[FFmpeg-cvslog] avformat: Free the internal codec context at the end

Luca Barbato git at videolan.org
Tue Jan 9 02:27:05 EET 2018


ffmpeg | branch: release/3.2 | Luca Barbato <lu_zero at gentoo.org> | Wed Apr 12 01:46:30 2017 +0200| [d6ecc61db8eabb24d5fa51619d84a1483cef5c8d] | committer: Michael Niedermayer

avformat: Free the internal codec context at the end

Avoid a use after free in avformat_find_stream_info.

(cherry picked from commit 9e4a5eb51b9f3b2bff0ef08e0074b7fe4893075d)
Signed-off-by: Michael Niedermayer <michael at niedermayer.cc>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=d6ecc61db8eabb24d5fa51619d84a1483cef5c8d
---

 libavformat/utils.c | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/libavformat/utils.c b/libavformat/utils.c
index 3e59e50bb1..162eb5f4d2 100644
--- a/libavformat/utils.c
+++ b/libavformat/utils.c
@@ -3737,12 +3737,6 @@ FF_ENABLE_DEPRECATION_WARNINGS
         }
     }
 
-    // close codecs which were opened in try_decode_frame()
-    for (i = 0; i < ic->nb_streams; i++) {
-        st = ic->streams[i];
-        avcodec_close(st->internal->avctx);
-    }
-
     ff_rfps_calculate(ic);
 
     for (i = 0; i < ic->nb_streams; i++) {
@@ -3923,6 +3917,7 @@ find_stream_info_err:
         st = ic->streams[i];
         if (st->info)
             av_freep(&st->info->duration_error);
+        avcodec_close(ic->streams[i]->internal->avctx);
         av_freep(&ic->streams[i]->info);
     }
     if (ic->pb)



More information about the ffmpeg-cvslog mailing list