[FFmpeg-cvslog] avcodec/hevc: allocate entries unconditionally
Michael Niedermayer
git at videolan.org
Fri Nov 27 23:56:20 CET 2015
ffmpeg | branch: master | Michael Niedermayer <michael at niedermayer.cc> | Fri Nov 27 23:33:03 2015 +0100| [d85aa76115214183e7e3b7d65e950da61474959a] | committer: Michael Niedermayer
avcodec/hevc: allocate entries unconditionally
Fixes out of array access
Fixes: 08664a2a7921ef48172f26495c7455be/asan_heap-oob_23036c6_3301_523388ef84285a0270caf67a43247b59.bit
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>
> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d85aa76115214183e7e3b7d65e950da61474959a
---
libavcodec/hevc.c | 4 +---
1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/libavcodec/hevc.c b/libavcodec/hevc.c
index e9f27a4..6edfcdf 100644
--- a/libavcodec/hevc.c
+++ b/libavcodec/hevc.c
@@ -2452,11 +2452,9 @@ static int hls_slice_data_wpp(HEVCContext *s, const HEVCNAL *nal)
return AVERROR(ENOMEM);
}
+ ff_alloc_entries(s->avctx, s->sh.num_entry_point_offsets + 1);
if (!s->sList[1]) {
- ff_alloc_entries(s->avctx, s->sh.num_entry_point_offsets + 1);
-
-
for (i = 1; i < s->threads_number; i++) {
s->sList[i] = av_malloc(sizeof(HEVCContext));
memcpy(s->sList[i], s, sizeof(HEVCContext));
More information about the ffmpeg-cvslog
mailing list