From: Federico Tomassetti <[email protected]>
Bug-Id: CID 1257776
Bug-Id: CID 1257778
---
libavformat/movenc.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/libavformat/movenc.c b/libavformat/movenc.c
index 6259a87..996110c 100644
--- a/libavformat/movenc.c
+++ b/libavformat/movenc.c
@@ -1167,6 +1167,8 @@ static int mov_write_ctts_tag(AVIOContext *pb, MOVTrack
*track)
int i;
ctts_entries = av_malloc((track->entry + 1) * sizeof(*ctts_entries)); /*
worst case */
+ if (!ctts_entries)
+ return AVERROR(ENOMEM);
ctts_entries[0].count = 1;
ctts_entries[0].duration = track->cluster[0].cts;
for (i = 1; i < track->entry; i++) {
@@ -1209,6 +1211,8 @@ static int mov_write_stts_tag(AVIOContext *pb, MOVTrack
*track)
stts_entries = track->entry ?
av_malloc(track->entry * sizeof(*stts_entries)) : /*
worst case */
NULL;
+ if (track->entry && !stts_entries)
+ return AVERROR(ENOMEM);
for (i = 0; i < track->entry; i++) {
int duration = get_cluster_duration(track, i);
if (i && duration == stts_entries[entries].duration) {
--
2.2.2
_______________________________________________
libav-devel mailing list
[email protected]
https://lists.libav.org/mailman/listinfo/libav-devel
