diff options
| author | Ronald S. Bultje <rsbultje@gmail.com> | 2011-06-28 22:24:21 -0700 |
|---|---|---|
| committer | Reinhard Tartler <siretart@tauware.de> | 2011-06-29 20:12:32 +0200 |
| commit | cb66b552700c4fe54f3387eb12207049ff63dfe3 (patch) | |
| tree | 9f1bf8b37bbd83d6e8979fd819805dcf9681df93 /libavutil/opt.c | |
| parent | 9482dd0d17435c9b5b46d44cdf8af21b1f09235c (diff) | |
| download | ffmpeg-cb66b552700c4fe54f3387eb12207049ff63dfe3.tar.gz | |
ogg: fix double free when finding length of small chained oggs.
ogg_save() copies streams[], but doesn't keep track of free()'ed
struct members. Thus, if in between a call to ogg_save() and
ogg_restore(), streams[].private was free()'ed, this would result
in a double free -> crash, which happened when e.g. playing small
chained ogg fragments.
(cherry picked from commit 9ed6cbc3ee2ae3e7472fb25192a7e36fd7b15533)
Signed-off-by: Reinhard Tartler <siretart@tauware.de>
Diffstat (limited to 'libavutil/opt.c')
0 files changed, 0 insertions, 0 deletions