From: Steven Liu <liuq...@kuaishou.com>
ret could be set to s->opaque->buffer in avio_close_dyn_buf, so it can
be set to NULL, check NULL pointer deference after it should be ok.
Reported-by: TOTE Robot <os...@tsinghua.edu.cn>
Signed-off-by: Steven Liu <liuq...@kuaishou.com>
---
fftools/ffmpeg_filter.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/fftools/ffmpeg_filter.c b/fftools/ffmpeg_filter.c
index 452b689d62..f2f77ff86f 100644
--- a/fftools/ffmpeg_filter.c
+++ b/fftools/ffmpeg_filter.c
@@ -119,6 +119,8 @@ static char *choose_pix_fmts(OutputFilter *ofilter)
avio_printf(s, "%s|", name);
}
len = avio_close_dyn_buf(s, &ret);
+ if (len <= 0 || !ret)
+ return NULL;
ret[len - 1] = 0;
return ret;
} else
--
2.25.0
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
