[email protected] (12020-04-29):
> From: Limin Wang <[email protected]>
> 
> If an error occurs, avio_get_dyn_buf() will return 0 and buf is NULL, so it's 
> necessary to check
> the return value for the following code will access the buf pointer with 
> index. In addition,
> the buf len should be greater than written_len to avoid the buffer overflow 
> access.
> 
> Signed-off-by: Limin Wang <[email protected]>
> ---
>  libavformat/dashenc.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)

And if the allocation fails, the data is silently discarded. Seems
broken. Did you test your change?

Regards,

-- 
  Nicolas George

Attachment: signature.asc
Description: PGP signature

_______________________________________________
ffmpeg-devel mailing list
[email protected]
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

To unsubscribe, visit link above, or email
[email protected] with subject "unsubscribe".

Reply via email to