From 207609554981be37db35e4390f49d38d68e890d9 Mon Sep 17 00:00:00 2001 From: Michael Niedermayer Date: Wed, 20 Aug 2014 18:27:25 +0200 Subject: [PATCH] avformat/asfdec: Check av_new_packet()s return code Fixes CID1041093 Signed-off-by: Michael Niedermayer --- libavformat/asfdec.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/libavformat/asfdec.c b/libavformat/asfdec.c index 5fc293e136..7f7bb4d5d4 100644 --- a/libavformat/asfdec.c +++ b/libavformat/asfdec.c @@ -1195,6 +1195,8 @@ static int asf_parse_packet(AVFormatContext *s, AVIOContext *pb, AVPacket *pkt) if (asf_st->pkt.size != asf_st->packet_obj_size || // FIXME is this condition sufficient? asf_st->frag_offset + asf->packet_frag_size > asf_st->pkt.size) { + int ret; + if (asf_st->pkt.data) { av_log(s, AV_LOG_INFO, "freeing incomplete packet size %d, new %d\n", @@ -1203,7 +1205,8 @@ static int asf_parse_packet(AVFormatContext *s, AVIOContext *pb, AVPacket *pkt) av_free_packet(&asf_st->pkt); } /* new packet */ - av_new_packet(&asf_st->pkt, asf_st->packet_obj_size); + if ((ret = av_new_packet(&asf_st->pkt, asf_st->packet_obj_size)) < 0) + return ret; asf_st->seq = asf->packet_seq; if (asf->ts_is_pts) { asf_st->pkt.pts = asf->packet_frag_timestamp - asf->hdr.preroll;