Browse Source

Fix possible heap overflow caused by av_fast_realloc()

Originally committed as revision 12579 to svn://svn.ffmpeg.org/ffmpeg/trunk
tags/v0.5
Michael Niedermayer 17 years ago
parent
commit
978805b2c5
1 changed files with 5 additions and 1 deletions
  1. +5
    -1
      libavcodec/utils.c

+ 5
- 1
libavcodec/utils.c View File

@@ -66,7 +66,11 @@ void *av_fast_realloc(void *ptr, unsigned int *size, unsigned int min_size)


*size= FFMAX(17*min_size/16 + 32, min_size); *size= FFMAX(17*min_size/16 + 32, min_size);


return av_realloc(ptr, *size);
ptr= av_realloc(ptr, *size);
if(!ptr) //we could set this to the unmodified min_size but this is safer if the user lost the ptr and uses NULL now
*size= 0;

return ptr;
} }


static unsigned int last_static = 0; static unsigned int last_static = 0;


Loading…
Cancel
Save