Module: libav Branch: release/0.8 Commit: c55ca98769759ceb8aa56854caa405a0f73ac1a4
Author: Kostya Shishkov <[email protected]> Committer: Reinhard Tartler <[email protected]> Date: Mon May 14 19:45:41 2012 +0200 indeo3: when freeing buffers, set pointers referencing them to NULL as well Related to CVE-2012-2804 (cherry picked from commit bc00da27010ed9e5dbe47e5b6fae3dcddb999d78) Signed-off-by: Reinhard Tartler <[email protected]> --- libavcodec/indeo3.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/libavcodec/indeo3.c b/libavcodec/indeo3.c index 63517c6..48e5810 100644 --- a/libavcodec/indeo3.c +++ b/libavcodec/indeo3.c @@ -207,6 +207,7 @@ static av_cold void free_frame_buffers(Indeo3DecodeContext *ctx) for (p = 0; p < 3; p++) { av_freep(&ctx->planes[p].buffers[0]); av_freep(&ctx->planes[p].buffers[1]); + ctx->planes[p].pixels[0] = ctx->planes[p].pixels[1] = 0; } } _______________________________________________ libav-commits mailing list [email protected] https://lists.libav.org/mailman/listinfo/libav-commits
