[FFmpeg-trac] #1907(avformat:new): use-after-free in matroska demuxer

[FFmpeg]

#1907: use-after-free in matroska demuxer
-------------------------------------+------------------------------------
             Reporter:  eugenis      |                    Owner:
                 Type:  defect       |                   Status:  new
             Priority:  important    |                Component:  avformat
              Version:  unspecified  |               Resolution:
             Keywords:  mkv          |               Blocked By:
             Blocking:               |  Reproduced by developer:  0
Analyzed by developer:  0            |
-------------------------------------+------------------------------------

Comment (by eugenis):

 This was observed with git synced at:

 commit e56b0984103b981ec25fe8a22ef9c4905b9751dd
 Author: Clément Bœsch <ubitux at gmail.com>
 Date:   Thu Oct 25 00:27:10 2012 +0200

     lavf/srtenc: ignore invalid timed packets instead of failing.

     This way we don't abort in the middle of remuxing, just warn about an
     event ignored. The index increment is moved to make sure the output
     numbers still make sense.

 The fix for the crash you mentioned seems unrelated (it's in RM audio
 code, mine was h264/ac3).

-- 
Ticket URL: <https://ffmpeg.org/trac/ffmpeg/ticket/1907#comment:2>
FFmpeg <http://ffmpeg.org>
FFmpeg issue tracker