提交 402a61c9 编写于 作者: D Derek Buitenhuis

snow_dwt: Don't try and free members of non-existent arrays

If allocation fails earlier on, and the next frame is processed,
the slice buffer could be left in a state where line and data_stack
have already been freed, or are otherwise null pointers.
Signed-off-by: NDerek Buitenhuis <derek.buitenhuis@gmail.com>
上级 0a7964dc
......@@ -91,6 +91,10 @@ void ff_slice_buffer_release(slice_buffer *buf, int line)
void ff_slice_buffer_flush(slice_buffer *buf)
{
int i;
if (!buf->line)
return;
for (i = 0; i < buf->line_count; i++)
if (buf->line[i])
ff_slice_buffer_release(buf, i);
......@@ -101,8 +105,9 @@ void ff_slice_buffer_destroy(slice_buffer *buf)
int i;
ff_slice_buffer_flush(buf);
for (i = buf->data_count - 1; i >= 0; i--)
av_freep(&buf->data_stack[i]);
if (buf->data_stack)
for (i = buf->data_count - 1; i >= 0; i--)
av_freep(&buf->data_stack[i]);
av_freep(&buf->data_stack);
av_freep(&buf->line);
}
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册