[FFmpeg-cvslog] avcodec/cbs_av1: Free content in cbs_av1_free_metadata()

[Michael Niedermayer]

ffmpeg | branch: master | Michael Niedermayer <michael at niedermayer.cc> | Sun Oct 11 15:22:51 2020 +0200| [d40f2498618515c9e3d81db295c881b800666dc2] | committer: Michael Niedermayer

avcodec/cbs_av1: Free content in cbs_av1_free_metadata()

Fixes: memleak
Fixes: 25838/clusterfuzz-testcase-minimized-ffmpeg_BSF_TRACE_HEADERS_fuzzer-5736255957237760

Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Reviewed-by: James Almer <jamrial at gmail.com>
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d40f2498618515c9e3d81db295c881b800666dc2
---

 libavcodec/cbs_av1.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/libavcodec/cbs_av1.c b/libavcodec/cbs_av1.c
index 65cf45fcfa..8aa7b09fa7 100644
--- a/libavcodec/cbs_av1.c
+++ b/libavcodec/cbs_av1.c
@@ -1228,6 +1228,7 @@ static void cbs_av1_free_metadata(void *unit, uint8_t *content)
         av_buffer_unref(&md->metadata.itut_t35.payload_ref);
         break;
     }
+    av_free(content);
 }
 
 static const CodedBitstreamUnitTypeDescriptor cbs_av1_unit_types[] = {