aacdec: set ac->output_elements upon channel element free

The issue is that ac->output_elements is populated from
ac->che, which may be freed, leaving dangling pointers in this
list.

Should fix clusterfuzz.
This commit is contained in:
Lynne 2024-07-22 03:20:32 +02:00
parent 204f7f8cc7
commit b1b69ccbc0
No known key found for this signature in database
GPG Key ID: A2FEA5F03F034464
1 changed files with 1 additions and 0 deletions

View File

@ -166,6 +166,7 @@ static av_cold int che_configure(AACDecContext *ac,
ac->proc.sbr_ctx_close(ac->che[type][id]);
}
av_freep(&ac->che[type][id]);
memset(ac->output_element, 0, sizeof(ac->output_element));
}
return 0;
}