lavfi: fix use-after-free in ff_filter_frame.

Unlike the original ff_start_frame code, the incoming reference
may be freed before that point.

Fix CID966654.
This commit is contained in:
Nicolas George 2013-01-08 12:46:13 +01:00
parent 315f15afe7
commit ff6b34009d

View File

@ -706,7 +706,7 @@ static int ff_filter_frame_framed(AVFilterLink *link, AVFilterBufferRef *frame)
} else
out = frame;
while(cmd && cmd->time <= frame->pts * av_q2d(link->time_base)){
while(cmd && cmd->time <= out->pts * av_q2d(link->time_base)){
av_log(link->dst, AV_LOG_DEBUG,
"Processing command time:%f command:%s arg:%s\n",
cmd->time, cmd->command, cmd->arg);