Hallo,
there is a severe allocation bug in pipelist.c

The line
if ((pl->segment_count % 32) == 0)
pl->segments = (PipeSegment **) realloc (pl->segments, sizeof (pl->segments) + 32 * sizeof (PipeSegment *));
}


assumes pl->segments to return the size of malloced memory pointed to by pl->segments;

myght be
if ((pl->segment_count % 32) == 0)
pl->segments = (PipeSegment **) realloc (pl->segments, (pl->segment_count + 32) * sizeof (PipeSegment *));
}




-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Mjpeg-users mailing list
Mjpeg-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mjpeg-users

Reply via email to