diff options
| author | James Almer <jamrial@gmail.com> | 2024-11-08 20:43:39 -0300 |
|---|---|---|
| committer | James Almer <jamrial@gmail.com> | 2024-11-10 12:04:53 -0300 |
| commit | 2e338152a274a5f10670cee3cd16097076216d72 (patch) | |
| tree | 7c9ff5c0763242e308855ba8b977fa95a60006b9 /tests/ref/vsynth/vsynth3-mjpeg-422 | |
| parent | 7f51cf75c6efb6a358b4cdb683cfbd8370d56a8f (diff) | |
| download | ffmpeg-2e338152a274a5f10670cee3cd16097076216d72.tar.gz | |
avformat/mov: use an array of pointers for heif_item
Pointers to specific entries in the array are stored in other structs, so
in the scenario where heif_item was reallocated when parsing an iloc box after
and iinf one, the pointers may end up referencing freed memory.
Fixes use-after-free with such samples.
Signed-off-by: James Almer <jamrial@gmail.com>
Diffstat (limited to 'tests/ref/vsynth/vsynth3-mjpeg-422')
0 files changed, 0 insertions, 0 deletions