On 22/11/11 23:04, Robert Nagy wrote:
I have encountered a heap corruption bug with avfilter_merge_formats.

At the end of:

     for (i = 0; i<  a->format_count; i++)
{
         for (j = 0; j<  b->format_count; j++)
{
             if (a->formats[i] == b->formats[j])
                 ret->formats[k++] = a->formats[i];
}
}

k = 49, however it has only allocated room for 16 elements in ret->formats.

This error occurs when I call "avfilter_graph_parse" with "yadif=0:-1" as
filter and then "avfilter_graph_config" where the heap corruption occurs.

I got this problem after updating to the latest revision with version
"2.49.0", it worked without problem with an older revision with version
"2.43.2".

The builds I use are from http://ffmpeg.zeranoe.com/builds/.

Please provide a full commandline so we can reproduce it, thank you for the initial bisecting =)

lu

--

Luca Barbato
Gentoo/linux
http://dev.gentoo.org/~lu_zero

_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel

Reply via email to