Recherche avancée

Sur d’autres sites (6961)

• avcodec/movtextenc : Fix memleak on (re)allocation error

  17 octobre 2020, par Andreas Rheinhardt

  avcodec/movtextenc : Fix memleak on (re)allocation error
  Up until now, the mov_text encoder used the dynamic array API for its
  
  list of style attributes ; it used the (horrible) av_dynarray_add() which
  
  works with an array of pointers ; on error it frees its array but not
  
  the buffers referenced by the pointers said array contains. It also
  
  returns no error code, encouraging not to check for errors.
  These properties imply that this function may only be used if the buffers
  
  referenced by the list either need not be freed at all or if they are
  
  freed by other means (i.e. if the list contains non-ownership pointers).
  In this case, the style attributes are owned by the pointers of the
  
  dynamic list. Ergo the old style attributes leak on a subsequent
  
  reallocation failure. But given that the (re)allocation isn't checked
  
  for success, the style attribute intended to be added to the list also
  
  leaks because the only pointer to it gets overwritten in the belief that
  
  it is now owned by the list.
  This commit fixes this by switching to av_fast_realloc() and an array
  
  containing the styles directly instead of pointers to individually
  
  allocated style attributes. The current style attributes are now no longer
  
  individually allocated, instead they are part of the context.
  Furthermore, av_fast_realloc() allows to easily distinguish between
  
  valid and allocated elements, thereby allowing to reuse the array
  
  (which up until now has always been freed after processing an
  
  AVSubtitleRect).
  Reviewed-by : Philip Langdale <philipl@overt.org>
  
  Signed-off-by : Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
  

  • [DH] libavcodec/movtextenc.c

• avfilter/vf_remap : Fix double-free of AVFilterFormats on error

  7 août 2020, par Andreas Rheinhardt

  avfilter/vf_remap : Fix double-free of AVFilterFormats on error
  The query_formats function of the remap filter tries to allocate
  
  two lists of formats which on success are attached to more permanent objects
  
  (AVFilterLinks) for storage afterwards. If attaching a list to an
  
  AVFilterLink succeeds, it is in turn owned by the AVFilterLink (or more
  
  exactly, the AVFilterLink becomes one of the common owners of the list).
  
  Yet if attaching a list to one of its links succeeds and an error happens
  
  lateron, both lists were manually freed, which means that is wrong if the
  
  list is already owned by one or more links ; these links' pointers to
  
  their lists will become dangling and there will be a double-free/use-after-
  
  free when these links are cleaned up automatically.
  This commit fixes this by removing the custom free code ; this will
  
  temporarily add a leaking codepath (if attaching a list not already
  
  owned by a link to a link fails, the list will leak), but this will
  
  be fixed soon by making sure that an AVFilterFormats without owner will
  
  be automatically freed when attaching it to an AVFilterLink fails.
  
  Notice at most one list leaks because a new list is only allocated
  
  after the old list has been successfully attached to a link.
  Reviewed-by : Nicolas George <george@nsup.org>
  
  Reviewed-by : Paul B Mahol <onemda@gmail.com>
  
  Signed-off-by : Andreas Rheinhardt <andreas.rheinhardt@gmail.com>
  

  • [DH] libavfilter/vf_remap.c

• lavc : add avcodec_free_context().

  5 avril 2014, par Anton Khirnov

  lavc : add avcodec_free_context().
  Right now, the caller has to manually manage some allocated
  
  AVCodecContext fields, like extradata or subtitle_header. This is
  
  fragile and prone to leaks, especially if we want to add more such
  
  fields in the future.
  The only reason for this behaviour is so that the AVStream codec context
  
  can be reused for decoding. Such reuse is discouraged anyway, so this
  
  commit is the first step to deprecating it.
  

  • [DBH] doc/APIchanges
  • [DBH] libavcodec/avcodec.h
  • [DBH] libavcodec/options.c
  • [DBH] libavcodec/version.h