[FFmpeg-devel] [PATCH 1/2] lavfi/zmq: Avoid mem copy past the end of input buffer

Andriy Gelman andriy.gelman at gmail.com
Thu Aug 1 01:37:55 EEST 2019


From: Andriy Gelman <andriy.gelman at gmail.com>

---
 libavfilter/f_zmq.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libavfilter/f_zmq.c b/libavfilter/f_zmq.c
index 89da5bef06..744c721305 100644
--- a/libavfilter/f_zmq.c
+++ b/libavfilter/f_zmq.c
@@ -139,7 +139,7 @@ static int recv_msg(AVFilterContext *ctx, char **buf, int *buf_size)
         ret = AVERROR(ENOMEM);
         goto end;
     }
-    memcpy(*buf, zmq_msg_data(&msg), *buf_size);
+    memcpy(*buf, zmq_msg_data(&msg), *buf_size - 1);
     (*buf)[*buf_size-1] = 0;
 
 end:
-- 
2.22.0



More information about the ffmpeg-devel mailing list