ffmpeg | branch: release/2.5 | Andreas Cadhalpun 
<andreas.cadhal...@googlemail.com> | Tue May  5 23:51:48 2015 +0200| 
[7d58774360feb20339b68d6e955974f0d632afa4] | committer: Michael Niedermayer

diracdec: check if reference could not be allocated

s->ref_pics[i] is later used as ref argument of interpolate_refplane,
where it is dereferenced.

If it is NULL, it causes a segmentation fault.

Signed-off-by: Andreas Cadhalpun <andreas.cadhal...@googlemail.com>
Signed-off-by: Michael Niedermayer <michae...@gmx.at>
(cherry picked from commit d93181ef3eacdb862d93448f31c97765a523d1db)

Signed-off-by: Michael Niedermayer <michae...@gmx.at>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=7d58774360feb20339b68d6e955974f0d632afa4
---

 libavcodec/diracdec.c |    6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/libavcodec/diracdec.c b/libavcodec/diracdec.c
index edb56a6..966c358 100644
--- a/libavcodec/diracdec.c
+++ b/libavcodec/diracdec.c
@@ -1739,6 +1739,12 @@ static int dirac_decode_picture_header(DiracContext *s)
                     get_buffer_with_edge(s->avctx, s->ref_pics[i]->avframe, 
AV_GET_BUFFER_FLAG_REF);
                     break;
                 }
+
+        if (!s->ref_pics[i]) {
+            av_log(s->avctx, AV_LOG_ERROR, "Reference could not be 
allocated\n");
+            return -1;
+        }
+
     }
 
     /* retire the reference frames that are not used anymore */

_______________________________________________
ffmpeg-cvslog mailing list
ffmpeg-cvslog@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-cvslog

Reply via email to