mirror of
https://github.com/mpv-player/mpv
synced 2024-12-26 00:42:57 +00:00
2a353381f3
When a video filter returned inf as PTS, the player crashed. One reason for this was that decode_audio() was called with a negative minlen parameter, which at some point caused it to call a memory allocation function with a ridiculous value, triggering an out of memory code path in talloc.c. (talloc.c has been modified to abort() on out of memory situations.) Fix this by sanity checking minlen in decode_audio(). (The check against outbuf->len always succeeded, because it's an unsigned comparison.) Make an existing sanity check in mplayer.c more robust: check for NaN too, which happens if the video PTS is inf. This happened with "-vf pullup,softpulldown" (but is not triggered when the following commit is applied). |
||
---|---|---|
.. | ||
decode | ||
filter | ||
out | ||
format.c | ||
format.h | ||
mixer.c | ||
mixer.h | ||
reorder_ch.c | ||
reorder_ch.h |