[MPlayer-dev-eng] [PATCH] fix use-after-free in vo_vdpau

Rinat Ibragimov ibragimovrinat at mail.ru
Mon Oct 14 17:56:48 CEST 2013


Hi, I've faced use-after-free in vo_vdpau.c. The issue may arise when one switches to
next video in playlist. Here is a patch that should prevent that.

--
Rinat

Index: libvo/vo_vdpau.c
===================================================================
--- libvo/vo_vdpau.c	(revision 36464)
+++ libvo/vo_vdpau.c	(working copy)
@@ -1203,11 +1203,15 @@
 
     free(index_data);
     index_data = NULL;
+    index_data_size = 0;
 
     free(eosd_surfaces);
     eosd_surfaces = NULL;
+    eosd_surface_count = 0;
+
     free(eosd_targets);
     eosd_targets = NULL;
+    eosd_render_count = 0;
 
 #ifdef CONFIG_XF86VM
     vo_vm_close();


More information about the MPlayer-dev-eng mailing list