mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2025-02-01 12:23:04 +00:00
vp56: release frames on error
Fixes CVE-2012-2783 CC: libav-stable@libav.org
This commit is contained in:
parent
bb675d3ac6
commit
f33b5ba63e
@ -514,8 +514,14 @@ int ff_vp56_decode_frame(AVCodecContext *avctx, void *data, int *got_frame,
|
||||
s->modelp = &s->models[is_alpha];
|
||||
|
||||
res = s->parse_header(s, buf, remaining_buf_size, &golden_frame);
|
||||
if (res < 0)
|
||||
if (res < 0) {
|
||||
int i;
|
||||
for (i = 0; i < 4; i++) {
|
||||
if (s->frames[i].data[0])
|
||||
avctx->release_buffer(avctx, &s->frames[i]);
|
||||
}
|
||||
return res;
|
||||
}
|
||||
|
||||
if (res == VP56_SIZE_CHANGE) {
|
||||
int i;
|
||||
|
Loading…
Reference in New Issue
Block a user