[FFmpeg-cvslog] avformat/bink: Check return value of av_add_index_entry()

Michael Niedermayer git at videolan.org
Mon Feb 17 23:59:13 CET 2014


ffmpeg | branch: master | Michael Niedermayer <michaelni at gmx.at> | Mon Feb 17 23:44:49 2014 +0100| [c57fc97e956a52edc94a38ff0ecd3058b44c15b7] | committer: Michael Niedermayer

avformat/bink: Check return value of av_add_index_entry()

Fixes null pointer dereference
Fixes: cdbf15cbd0a27cee958dd0b8800e452e-signal_sigsegv_737991_2083_cov_317652874_LBSTART.BIK
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni at gmx.at>

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=c57fc97e956a52edc94a38ff0ecd3058b44c15b7
---

 libavformat/bink.c |    6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/libavformat/bink.c b/libavformat/bink.c
index 94990a2..ec9257b 100644
--- a/libavformat/bink.c
+++ b/libavformat/bink.c
@@ -81,6 +81,7 @@ static int read_header(AVFormatContext *s)
     uint32_t pos, next_pos;
     uint16_t flags;
     int keyframe;
+    int ret;
 
     vst = avformat_new_stream(s, NULL);
     if (!vst)
@@ -184,8 +185,9 @@ static int read_header(AVFormatContext *s)
             av_log(s, AV_LOG_ERROR, "invalid frame index table\n");
             return AVERROR(EIO);
         }
-        av_add_index_entry(vst, pos, i, next_pos - pos, 0,
-                           keyframe ? AVINDEX_KEYFRAME : 0);
+        if ((ret = av_add_index_entry(vst, pos, i, next_pos - pos, 0,
+                                      keyframe ? AVINDEX_KEYFRAME : 0)) < 0)
+            return ret;
     }
 
     avio_seek(pb, vst->index_entries[0].pos, SEEK_SET);



More information about the ffmpeg-cvslog mailing list