aboutsummaryrefslogtreecommitdiffstats
path: root/tests/ref/vsynth/vsynth_lena-rv20
diff options
context:
space:
mode:
authorJames Almer <jamrial@gmail.com>2024-11-08 20:43:39 -0300
committerJames Almer <jamrial@gmail.com>2024-11-10 12:04:53 -0300
commit2e338152a274a5f10670cee3cd16097076216d72 (patch)
tree7c9ff5c0763242e308855ba8b977fa95a60006b9 /tests/ref/vsynth/vsynth_lena-rv20
parent7f51cf75c6efb6a358b4cdb683cfbd8370d56a8f (diff)
downloadffmpeg-2e338152a274a5f10670cee3cd16097076216d72.tar.gz
avformat/mov: use an array of pointers for heif_item
Pointers to specific entries in the array are stored in other structs, so in the scenario where heif_item was reallocated when parsing an iloc box after and iinf one, the pointers may end up referencing freed memory. Fixes use-after-free with such samples. Signed-off-by: James Almer <jamrial@gmail.com>
Diffstat (limited to 'tests/ref/vsynth/vsynth_lena-rv20')
0 files changed, 0 insertions, 0 deletions