diff options
| author | Michael Niedermayer <michael@niedermayer.cc> | 2023-06-30 01:57:03 +0200 |
|---|---|---|
| committer | Michael Niedermayer <michael@niedermayer.cc> | 2023-07-22 17:05:47 +0200 |
| commit | c41ab871c703bc41a4753c784adff1c5fe3795ca (patch) | |
| tree | b6b0e1822a18094bc32ed990a4b02a71142f1613 /libavformat/id3v2.c | |
| parent | f9b29451e422e672595e95eefd03879a4398a1f6 (diff) | |
avformat/id3v2: Free buffer in decode_str()
Fixes: memleak
Fixes: 60058/clusterfuzz-testcase-minimized-ffmpeg_dem_IFF_fuzzer-5665259244093440
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/projects/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
Diffstat (limited to 'libavformat/id3v2.c')
| -rw-r--r-- | libavformat/id3v2.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/libavformat/id3v2.c b/libavformat/id3v2.c index 38c86a8e79..69193933e0 100644 --- a/libavformat/id3v2.c +++ b/libavformat/id3v2.c @@ -309,8 +309,10 @@ static int decode_str(AVFormatContext *s, AVIOContext *pb, int encoding, avio_w8(dynbuf, 0); dynsize = avio_close_dyn_buf(dynbuf, dst); - if (dynsize <= 0) + if (dynsize <= 0) { + av_freep(dst); return AVERROR(ENOMEM); + } *maxread = left; return 0; |