mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-12-28 20:53:54 +02:00
avcodec/pgssubdec: Check for duplicate display segments
In such a duplication the previous gets overwritten and leaks
Fixes: memleak
Fixes: 12510/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_PGSSUB_fuzzer-5694439226343424
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
(cherry picked from commit e35c3d887b
)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
parent
136ec39a2f
commit
4946bda473
@ -676,6 +676,11 @@ static int decode(AVCodecContext *avctx, void *data, int *data_size,
|
|||||||
*/
|
*/
|
||||||
break;
|
break;
|
||||||
case DISPLAY_SEGMENT:
|
case DISPLAY_SEGMENT:
|
||||||
|
if (*data_size) {
|
||||||
|
av_log(avctx, AV_LOG_ERROR, "Duplicate display segment\n");
|
||||||
|
ret = AVERROR_INVALIDDATA;
|
||||||
|
break;
|
||||||
|
}
|
||||||
ret = display_end_segment(avctx, data, buf, segment_length);
|
ret = display_end_segment(avctx, data, buf, segment_length);
|
||||||
if (ret >= 0)
|
if (ret >= 0)
|
||||||
*data_size = ret;
|
*data_size = ret;
|
||||||
|
Loading…
Reference in New Issue
Block a user