diff options
| author | Nicolas George <nicolas.george@normalesup.org> | 2013-01-08 12:46:13 +0100 |
|---|---|---|
| committer | Nicolas George <nicolas.george@normalesup.org> | 2013-01-08 13:31:33 +0100 |
| commit | ff6b34009d4571ae0a4d130c0f8d27706a4c4026 (patch) | |
| tree | 9a173bb6980bda3173195fecbd59259499e1c678 | |
| parent | 315f15afe74354df78b1dca711f1ed43c3d7181a (diff) | |
| download | ffmpeg-ff6b34009d4571ae0a4d130c0f8d27706a4c4026.tar.gz | |
lavfi: fix use-after-free in ff_filter_frame.
Unlike the original ff_start_frame code, the incoming reference
may be freed before that point.
Fix CID966654.
| -rw-r--r-- | libavfilter/avfilter.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libavfilter/avfilter.c b/libavfilter/avfilter.c index 4edd5be30f..8c06173c83 100644 --- a/libavfilter/avfilter.c +++ b/libavfilter/avfilter.c @@ -706,7 +706,7 @@ static int ff_filter_frame_framed(AVFilterLink *link, AVFilterBufferRef *frame) } else out = frame; - while(cmd && cmd->time <= frame->pts * av_q2d(link->time_base)){ + while(cmd && cmd->time <= out->pts * av_q2d(link->time_base)){ av_log(link->dst, AV_LOG_DEBUG, "Processing command time:%f command:%s arg:%s\n", cmd->time, cmd->command, cmd->arg); |