1
0
mirror of https://git.ffmpeg.org/ffmpeg.git synced 2026-10-24 02:09:03 +03:00
Files
ffmpeg/libavfilter
Franciszek Kalinowski 461fb22053 avfilter/af_join: fix wrong loop bound in buffer dedup (use-after-free)
try_push_frame() decides whether an input buffer is already tracked by testing
`j == i` (the channel index) instead of `j == nb_buffers`. Once an earlier
channel shared a buffer, nb_buffers falls behind i and a genuinely new buffer is
never referenced, so it is freed while the output frame still points at it.

Reported by Franciszek Kalinowski (isec.pl / striga.ai) and Bartosz Smigielski.
2026-05-25 22:21:41 +00:00
..
2023-11-18 19:55:42 +01:00
2024-08-19 21:48:04 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2024-08-19 21:48:04 +02:00
2024-08-19 21:48:04 +02:00
…
…
…
…
…
2024-08-19 21:48:04 +02:00
2025-12-14 12:41:00 +05:30
2022-07-30 11:42:06 +02:00
2022-07-30 11:42:06 +02:00
2025-08-03 13:48:47 +02:00
…
…
2024-08-19 21:48:04 +02:00
…
…
…
2024-08-19 21:48:04 +02:00
…
…
2025-08-03 13:48:47 +02:00
2024-07-01 22:31:02 +02:00
2024-08-19 21:48:04 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
2024-08-19 21:48:04 +02:00
…
2024-02-16 21:34:38 +01:00
2025-06-15 21:00:38 +05:30
2025-10-16 18:41:19 +02:00
2025-07-04 01:32:27 +02:00
2025-07-04 01:32:27 +02:00
2026-05-15 20:29:29 +02:00
2026-05-15 20:29:29 +02:00
2025-08-03 13:48:47 +02:00
2025-08-03 13:48:47 +02:00
…
2025-08-03 13:48:47 +02:00
2026-04-28 12:29:37 +00:00
2025-04-22 20:45:57 +02:00
…
…