diff options
| author | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2019-11-10 05:07:28 +0100 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2019-12-31 19:51:57 +0100 |
| commit | d39a05870790dca489c8dac9d53f4b5f0214efb8 (patch) | |
| tree | 722e88f0fb0c0ded3a06013ebcc402a19f0d89af /libavcodec/sgienc.c | |
| parent | 96e1ca6e053a287f0c82e7fa5e7dc7a1cfc4a7aa (diff) | |
| download | ffmpeg-d39a05870790dca489c8dac9d53f4b5f0214efb8.tar.gz | |
avformat/id3v2: Fix double-free on error
ff_id3v2_parse_priv_dict() uses av_dict_set() with the flags
AV_DICT_DONT_STRDUP_KEY and AV_DICT_DONT_STRDUP_VAL. In this case both
key and value are freed on error (and owned by the destination
dictionary on success), so that freeing them again on error is a
double-free and therefore forbidden. But it nevertheless happened.
Fixes CID 1452489 and 1452421.
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit 67d4940a7795aa3afc8d1e624de33b030e0be51e)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavcodec/sgienc.c')
0 files changed, 0 insertions, 0 deletions