diff options
| author | wm4 <nfxjfg@googlemail.com> | 2015-06-17 00:21:02 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2015-08-20 14:38:25 +0200 |
| commit | 9d0aa058c997db60de84d2e05b08dabead9cb6e0 (patch) | |
| tree | c61eafd8ce44b5e35e736c5b816aaeb114692799 /libavcodec/vorbis_parser.c | |
| parent | 5302adb32367c95b765c82122b1d922d0df93b52 (diff) | |
| download | ffmpeg-9d0aa058c997db60de84d2e05b08dabead9cb6e0.tar.gz | |
avio: fix potential crashes when combining ffio_ensure_seekback + crc
Calling ffio_ensure_seekback() if ffio_init_checksum() has been called
on the same context can lead to out of bounds memory accesses and
crashes. The reason is that ffio_ensure_seekback() does not update
checksum_ptr after reallocating the buffer, resulting in a dangling
pointer.
This effectively fixes potential crashes when opening mp3 files.
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
(cherry picked from commit dc87758775e2ce8be84e4fe598e12416e83d2845)
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>
Diffstat (limited to 'libavcodec/vorbis_parser.c')
0 files changed, 0 insertions, 0 deletions