vlc/vlc-3.0 | branch: master | Hugo Beauzée-Luyssen <[email protected]> | Fri Aug 
 2 14:40:04 2019 +0200| [59058abed0c8e5022c21544c7c4279b349a339ea] | committer: 
Hugo Beauzée-Luyssen

asf: Fix missing fp pointer reset

This fixes a potential use after free

CVE-2019-14533

(cherry picked from commit d5a9fb5c671a00b13ca0a8d39489f4ee0ac23f94)
Signed-off-by: Hugo Beauzée-Luyssen <[email protected]>

> http://git.videolan.org/gitweb.cgi/vlc/vlc-3.0.git/?a=commit;h=59058abed0c8e5022c21544c7c4279b349a339ea
---

 modules/demux/asf/asf.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/demux/asf/asf.c b/modules/demux/asf/asf.c
index e626d5a9d7..22e60194d3 100644
--- a/modules/demux/asf/asf.c
+++ b/modules/demux/asf/asf.c
@@ -1388,6 +1388,7 @@ static void DemuxEnd( demux_t *p_demux )
     {
         ASF_FreeObjectRoot( p_demux->s, p_sys->p_root );
         p_sys->p_root = NULL;
+        p_sys->p_fp = NULL;
     }
     if( p_sys->meta )
     {

_______________________________________________
vlc-commits mailing list
[email protected]
https://mailman.videolan.org/listinfo/vlc-commits

Reply via email to