diff options
author | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2020-08-24 05:26:57 +0200 |
---|---|---|
committer | Andreas Rheinhardt <andreas.rheinhardt@gmail.com> | 2020-08-26 23:52:56 +0200 |
commit | 0960da42f5414a24497c75787ff4be318ae41421 (patch) | |
tree | 8b034b0c95a270144d187b9d4fbba1bdb0310af1 /libavfilter/vf_frei0r.c | |
parent | e07541930a8a045f1924152e12f8615043480b6f (diff) | |
download | ffmpeg-0960da42f5414a24497c75787ff4be318ae41421.tar.gz |
avfilter/af_headphone: Fix segfault upon allocation failure
The headphone filter uses a variable number of inpads and allocates them
in its init function; if all goes well, the number of inpads coincides
with a number stored in the filter's private context. Yet if allocating a
subsequent inpad fails, the uninit function nevertheless uses the number
stored in the private context to determine the number of inpads to free
and not the AVFilterContext's nb_inputs. This will lead to an access
beyond the end of the allocated AVFilterContext.input_pads array and
an invalid free.
Reviewed-by: Paul B Mahol <onemda@gmail.com>
Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
Diffstat (limited to 'libavfilter/vf_frei0r.c')
0 files changed, 0 insertions, 0 deletions