diff options
| author | Ronald S. Bultje <rbultje@ronald.bitfreak.net> | 2004-03-07 04:03:27 +0000 |
|---|---|---|
| committer | Ronald S. Bultje <rbultje@ronald.bitfreak.net> | 2004-03-07 04:03:27 +0000 |
| commit | 9665e6768fe3d56cf8fa97b9674a772c6c41fec7 (patch) | |
| tree | 13af0b8507204f9800d3304a1a91d2dc8bf2de6c /gst/qtdemux | |
| parent | 63e0fe099ee70bc6993f44cefb7537e7a559aef4 (diff) | |
gst/qtdemux/qtdemux.c: Fix crash (j might be greater than n_samples, in which case we're writing outside the allocate...
Original commit message from CVS:
* gst/qtdemux/qtdemux.c: (gst_qtdemux_add_stream),
(qtdemux_parse_trak):
Fix crash (j might be greater than n_samples, in which case we're
writing outside the allocated space for the array) and memleak.
Diffstat (limited to 'gst/qtdemux')
| -rw-r--r-- | gst/qtdemux/qtdemux.c | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/gst/qtdemux/qtdemux.c b/gst/qtdemux/qtdemux.c index 5ce3807b..38267655 100644 --- a/gst/qtdemux/qtdemux.c +++ b/gst/qtdemux/qtdemux.c @@ -687,9 +687,10 @@ static void gst_qtdemux_loop_header (GstElement *element) void gst_qtdemux_add_stream(GstQTDemux *qtdemux, QtDemuxStream *stream) { if(stream->subtype == GST_MAKE_FOURCC('v','i','d','e')){ + gchar *name = g_strdup_printf ("video_%02d", qtdemux->n_video_streams); stream->pad = gst_pad_new_from_template ( - gst_static_pad_template_get(&gst_qtdemux_videosrc_template), - g_strdup_printf ("video_%02d", qtdemux->n_video_streams)); + gst_static_pad_template_get(&gst_qtdemux_videosrc_template), name); + g_free (name); stream->fps = 1. * GST_SECOND / stream->samples[0].duration; if(stream->caps){ gst_caps_set_simple(stream->caps, @@ -699,9 +700,10 @@ void gst_qtdemux_add_stream(GstQTDemux *qtdemux, QtDemuxStream *stream) } qtdemux->n_video_streams++; }else{ + gchar *name = g_strdup_printf ("audio_%02d", qtdemux->n_audio_streams); stream->pad = gst_pad_new_from_template ( - gst_static_pad_template_get(&gst_qtdemux_audiosrc_template), - g_strdup_printf ("audio_%02d", qtdemux->n_audio_streams)); + gst_static_pad_template_get(&gst_qtdemux_audiosrc_template), name); + g_free (name); if(stream->caps){ gst_caps_set_simple(stream->caps, "rate", G_TYPE_INT, (int)stream->rate, @@ -1600,6 +1602,7 @@ done: for(j=first_chunk;j<last_chunk;j++){ int chunk_offset; + if(j>=n_samples)goto done2; if(stco){ chunk_offset = QTDEMUX_GUINT32_GET(stco->data + 16 + j*4); }else{ @@ -1620,7 +1623,6 @@ done: #endif samples[j].sample_index = sample_index; sample_index += samples_per_chunk; - if(j>=n_samples)goto done2; } } /* |