diff options
| author | wm4 <nfxjfg@googlemail.com> | 2015-06-17 00:21:02 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michaelni@gmx.at> | 2015-06-18 22:09:01 +0200 |
| commit | 9473e5a05d2cbdd56a7e3923868451a07a0edfe0 (patch) | |
| tree | 1921e9fbb0bacd4a2ddc2e36741d8bacfa440993 /ffmpeg.c | |
| parent | 8a24ccfee3841d5b2069371b78921e7e6c8289dc (diff) | |
| download | ffmpeg-9473e5a05d2cbdd56a7e3923868451a07a0edfe0.tar.gz | |
avio: fix potential crashes when combining ffio_ensure_seekback + crc
Calling ffio_ensure_seekback() if ffio_init_checksum() has been called
on the same context can lead to out of bounds memory accesses and
crashes. The reason is that ffio_ensure_seekback() does not update
checksum_ptr after reallocating the buffer, resulting in a dangling
pointer.
This effectively fixes potential crashes when opening mp3 files.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit dc87758775e2ce8be84e4fe598e12416e83d2845)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'ffmpeg.c')
0 files changed, 0 insertions, 0 deletions