aboutsummaryrefslogtreecommitdiffstats
path: root/doc/examples
diff options
context:
space:
mode:
authorAndreas Rheinhardt <andreas.rheinhardt@gmail.com>2020-08-24 05:46:08 +0200
committerAndreas Rheinhardt <andreas.rheinhardt@gmail.com>2021-02-27 07:20:57 +0100
commit7316177a44fcd325dff8d19a382c83a51f1dfacc (patch)
treea6a9a085a8250749caf6a909ddc632ed1b0dd27a /doc/examples
parent9ef72373131738c690cc6d1504a23a42cd220685 (diff)
downloadffmpeg-7316177a44fcd325dff8d19a382c83a51f1dfacc.tar.gz
avfilter/af_amerge: Fix segfault upon allocation failure
The amerge filter uses a variable number of inpads and allocates them in its init function; if all goes well, the number of inpads coincides with a number stored in the filter's private context. Yet if allocating a subsequent inpad fails, the uninit function nevertheless uses the number stored in the private context to determine the number of inpads to free and not the AVFilterContext's nb_inputs. This will lead to an access beyond the end of the allocated AVFilterContext.input_pads array and an invalid free. Reviewed-by: Nicolas George <george@nsup.org> Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> (cherry picked from commit 8f2c1f2cbe77685435362f1940b637a6c3ff1934)
Diffstat (limited to 'doc/examples')
0 files changed, 0 insertions, 0 deletions