In function mov_read_custom(), it returns 0 on the path that av_malloc()
returns a NULL pointer. 0 indicates success. An error code should be
assigned to ret.
Signed-off-by: Pan Bian <bianpan2...@163.com>
---
libavformat/mov.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/libavformat/mov.c b/libavformat/mov.c
index ddb1e59..d25071b 100644
--- a/libavformat/mov.c
+++ b/libavformat/mov.c
@@ -4177,8 +4177,10 @@ static int mov_read_custom(MOVContext *c, AVIOContext
*pb, MOVAtom atom)
break;
*p = av_malloc(len + 1);
- if (!*p)
+ if (!*p) {
+ ret = AVERROR(ENOMEM);
break;
+ }
ret = ffio_read_size(pb, *p, len);
if (ret < 0) {
av_freep(p);
--
1.9.1
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
http://ffmpeg.org/mailman/listinfo/ffmpeg-devel
