har0ke/FFmpeg
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

avformat/id3v2: Free buffer in decode_str()

Browse Source 
Fixes: memleak
Fixes: 60058/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-5665259244093440

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
This commit is contained in:
Michael Niedermayer 2023-06-30 01:57:03 +02:00
parent f9b29451e4
commit c41ab871c7
No known key found for this signature in database
GPG Key ID: B18E8928B3948D64
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
libavformat/id3v2.c
View File

@ -309,8 +309,10 @@ static int decode_str(AVFormatContext *s, AVIOContext *pb, int encoding,
avio_w8(dynbuf, 0); avio_w8(dynbuf, 0);
dynsize = avio_close_dyn_buf(dynbuf, dst); dynsize = avio_close_dyn_buf(dynbuf, dst);
if (dynsize <= 0) if (dynsize <= 0) {
av_freep(dst);
return AVERROR(ENOMEM); return AVERROR(ENOMEM);
}
*maxread = left; *maxread = left;
return 0; return 0;