From 5871971fa1ed98d16954c40a201a00c13b27b92f Mon Sep 17 00:00:00 2001 From: gg0907 Date: Tue, 3 Jan 2023 16:43:47 +0800 Subject: [PATCH] fix CVE-2022-3109 Signed-off-by: gg0907 --- libavcodec/vp3.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/libavcodec/vp3.c b/libavcodec/vp3.c index 6fe1ca46a3..3a613d8310 100644 --- a/libavcodec/vp3.c +++ b/libavcodec/vp3.c @@ -2722,8 +2722,13 @@ static int vp3_decode_frame(AVCodecContext *avctx, if ((ret = ff_thread_get_buffer(avctx, &s->current_frame, AV_GET_BUFFER_FLAG_REF)) < 0) goto error; - if (!s->edge_emu_buffer) + if (!s->edge_emu_buffer) { s->edge_emu_buffer = av_malloc(9 * FFABS(s->current_frame.f->linesize[0])); + if (!s->edge_emu_buffer) { + ret = AVERROR(ENOMEM); + goto error; + } + } if (s->keyframe) { if (!s->theora) { -- Gitee