mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2026-10-24 02:09:03 +03:00
During USAC decoding (ff_aac_usac_decode_frame), configuration elements can be mapped and instantiated via che_configure(). For newly allocated ChannelElement structs, che_configure calls sbr_ctx_alloc_init() which dynamically allocates ac->che[type][id]. However, che_configure did not subsequently map the output pointer of the nested SingleChannelElement elements back to their statically-sized internal ret_buf arrays, causing a null pointer dereference during IMDCT windowing. The fix explicitly initializes these pointers following allocation. Signed-off-by: Marvin Scholz <epirat07@gmail.com>