[FFmpeg-devel] [PATCH] avformat/asfdec: init avpacket by av_packet_alloc()

13102179620 at 163.com 13102179620 at 163.com
Tue Jan 11 04:30:25 EET 2022


From: Yang Xiao <yshaw99 at outlook.com>

This commit fixed a crash when seeking wma frames, asf decoder will try to demux in function asf_read_pts().
Pointer member side_data of AVPacket that allocated by stack may be wild pointer.
Prevent releasing wild pointers in AVPacket when some functions try to call av_packet_unref, example av_read_frame().
---
 libavformat/asfdec_f.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavformat/asfdec_f.c b/libavformat/asfdec_f.c
index a8f36ed286..8cf953830e 100644
--- a/libavformat/asfdec_f.c
+++ b/libavformat/asfdec_f.c
@@ -1433,7 +1433,7 @@ static int64_t asf_read_pts(AVFormatContext *s, int stream_index,
 {
     FFFormatContext *const si = ffformatcontext(s);
     ASFContext *asf     = s->priv_data;
-    AVPacket pkt1, *pkt = &pkt1;
+    AVPacket *pkt = av_packet_alloc();
     ASFStream *asf_st;
     int64_t pts;
     int64_t pos = *ppos;
-- 
2.30.1 (Apple Git-130)



More information about the ffmpeg-devel mailing list