aboutsummaryrefslogtreecommitdiffstats
path: root/libavformat/derf.c
diff options
context:
space:
mode:
authorAndreas Rheinhardt <andreas.rheinhardt@gmail.com>2020-09-30 14:36:23 +0200
committerAndreas Rheinhardt <andreas.rheinhardt@gmail.com>2021-02-27 07:20:58 +0100
commit0608949fa2fb5b16e09d6c50d77ccea3c6cd56e4 (patch)
tree417c3a76356955cd9756f039e1484a39e5f4c6a9 /libavformat/derf.c
parent211f23d7897c48bb954e40134a6d6c3ac477b198 (diff)
downloadffmpeg-0608949fa2fb5b16e09d6c50d77ccea3c6cd56e4.tar.gz
avformat/movenc: Fix stack overflow when remuxing timecode tracks
There are two possible kinds of timecode tracks (with tag "tmcd") in the mov muxer: Tracks created internally by the muxer and timecode tracks sent by the user. If any of the latter exists, the former are deactivated. The former all belong to another track, the source track; the latter don't have a source track set, but the index of the source track is initially zeroed by av_mallocz_array(). This is a problem since 3d894db700cc1e360a7a75ab9ac8bf67ac6670a3: Said commit added a function that calculates the duration of tracks and the duration of timecode tracks is calculated by rescaling the duration (calculated by the very same function) of the source track. This gives an infinite recursion if the first track (the one that will be treated as source track for all timecode tracks) is a timecode track itself, leading to a stack overflow. This commit fixes this by not using the nonexistent source track when calculating the duration of timecode tracks not created internally by the mov muxer. Reviewed-by: Martin Storsjö <martin@martin.st> Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@gmail.com> (cherry picked from commit 22a2386a561ccbaabbbfd5cf7f89b2cbbade71b0)
Diffstat (limited to 'libavformat/derf.c')
0 files changed, 0 insertions, 0 deletions