sysutils/ffmpeg
1
0
Fork 0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-10-24 02:09:03 +03:00
Code Activity

avformat/rtpdec_rfc4175: Free the pending frame on close

Browse Source 
The handler had no close callback, so a frame that was not finalized
when the stream was closed leaked.

Memory leak Replicated through UnModified FFmpeg with ASAN
Found during triage of the security report V8a3e2cGQI7w
This commit is contained in:
Michael Niedermayer
2026-10-07 00:54:45 +02:00
committed by michaelni
parent d3576d034e
commit 50740a1144
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
libavformat/rtpdec_rfc4175.c
View File

@@ -344,6 +344,11 @@ invalid:
return missed_last_packet ? 0 : AVERROR_INVALIDDATA;
}
static void rfc4175_close_context(PayloadContext *data)
{
av_freep(&data->frame);
}
const RTPDynamicProtocolHandler ff_rfc4175_rtp_handler = {
.enc_name = "raw",
.codec_type = AVMEDIA_TYPE_VIDEO,
@@ -351,4 +356,5 @@ const RTPDynamicProtocolHandler ff_rfc4175_rtp_handler = {
.priv_data_size = sizeof(PayloadContext),
.parse_sdp_a_line = rfc4175_parse_sdp_line,
.parse_packet = rfc4175_handle_packet,
.close = rfc4175_close_context,
};