Skip to content
Snippets Groups Projects
Commit 2acee08a authored by Michael Niedermayer's avatar Michael Niedermayer
Browse files

avutil/frame: Copy size=0 side data in ff_init_buffer_info()

Fixes null pointer dereference
Fixes: 189/FOO

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg


Signed-off-by: default avatarMichael Niedermayer <michael@niedermayer.cc>
parent 3c0328d5
No related branches found
No related tags found
No related merge requests found
......@@ -349,6 +349,7 @@ FF_ENABLE_DEPRECATION_WARNINGS
wipe_side_data(dst);
return AVERROR(ENOMEM);
}
if (sd_src->buf) {
sd_dst->buf = av_buffer_ref(sd_src->buf);
if (!sd_dst->buf) {
wipe_side_data(dst);
......@@ -356,6 +357,7 @@ FF_ENABLE_DEPRECATION_WARNINGS
}
sd_dst->data = sd_dst->buf->data;
sd_dst->size = sd_dst->buf->size;
}
}
av_dict_copy(&sd_dst->metadata, sd_src->metadata, 0);
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment