diff options
| author | James Almer <jamrial@gmail.com> | 2025-01-01 23:58:39 -0300 |
|---|---|---|
| committer | James Almer <jamrial@gmail.com> | 2025-01-10 14:56:03 -0300 |
| commit | 7f9c7f9849a2155224711f0ff57ecdac6e4bfb57 (patch) | |
| tree | 0124508d994cb9eb7d4c7ac59769b71403625c74 | |
| parent | 292c1df7c159c8a1a7afe52613d164ff417e81ce (diff) | |
| download | ffmpeg-7f9c7f9849a2155224711f0ff57ecdac6e4bfb57.tar.gz | |
avcodec/jpeg2000dec: clear array length when freeing it
Fixes NULL pointer dereferences.
Fixes ticket #11393.
Reviewed-by: Michael Niedermayer <michael@niedermayer.cc>
Signed-off-by: James Almer <jamrial@gmail.com>
| -rw-r--r-- | libavcodec/jpeg2000dec.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/libavcodec/jpeg2000dec.c b/libavcodec/jpeg2000dec.c index e5e897a29f..b82d85d5ee 100644 --- a/libavcodec/jpeg2000dec.c +++ b/libavcodec/jpeg2000dec.c @@ -1521,6 +1521,7 @@ static int jpeg2000_decode_packet(Jpeg2000DecoderContext *s, Jpeg2000Tile *tile, } } av_freep(&cblk->lengthinc); + cblk->nb_lengthinc = 0; } } // Save state of stream |