sysutils/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-10-24 02:09:03 +03:00
Code Activity

avfilter/dnn_backend_openvino: do not free the input layouts twice

Browse Source 
Fixes: o7gnt6oof6Qd
Fixes: use after free
Fixes: double free
Heap use after free after an allocation failure Replicated through UnModified FFmpeg with ASAN, the allocation failure injected through an LD_PRELOAD shim
Double free Replicated through UnModified FFmpeg with gdb, a crafted 8192x8192 PNG, input_resizable=1 and vm.overcommit_memory=2
Found during triage of the review of https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24617
This commit is contained in:
Michael Niedermayer
2026-10-13 06:10:50 +02:00
committed by michaelni
parent a8ba973e1a
commit 2c31cf561f
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
libavfilter/dnn/dnn_backend_openvino.c
View File

@@ -800,7 +800,9 @@ static int init_model_ov(OVModel *ov_model, const char *input_name, const char *
ov_preprocess_input_model_info_free(input_model_info);
input_model_info = NULL;
ov_layout_free(NCHW_layout);
NCHW_layout = NULL;
ov_layout_free(NHWC_layout);
NHWC_layout = NULL;
#else
if (ctx->batch_size > 1) {
input_shapes_t input_shapes;