mirror of https://git.ffmpeg.org/ffmpeg.git
mov: Free an earlier allocated array if allocating a new one
It could probably also be considered an error if the pointer isn't null at this point, but then we might risk rejecting some slightly broken files that we might have handled so far. Sample-Id: 00000496-google Reported-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind CC: libav-stable@libav.org Signed-off-by: Martin Storsjö <martin@martin.st>
This commit is contained in:
parent
d51f09962d
commit
2620df1310
|
@ -1717,6 +1717,7 @@ static int mov_read_stts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
|
|||
if (entries >= UINT_MAX / sizeof(*sc->stts_data))
|
||||
return AVERROR(EINVAL);
|
||||
|
||||
av_free(sc->stts_data);
|
||||
sc->stts_data = av_malloc(entries * sizeof(*sc->stts_data));
|
||||
if (!sc->stts_data)
|
||||
return AVERROR(ENOMEM);
|
||||
|
|
Loading…
Reference in New Issue