1
mirror of https://github.com/mpv-player/mpv synced 2024-11-14 22:48:35 +01:00
mpv/player
wm4 5858e3cdbd audio: fix use-after-free with fuzzed file
reinit_audio_filters_and_output() can fully shutdown the audio chain on
failure. Specifically, it will deallocate mpctx->ao_chain. The value of
that field was cached in ao_c. The code after the call did not account
that the audio chain can be shutdown, and used the stale ao_c value.

Fixes: #6808
2019-09-21 21:59:09 +02:00
..
javascript js: expose mpv_abort_async_command() (match dbe831bd) 2019-09-11 21:08:04 +03:00
lua osc: add mouse mid-button as alias to shift+left button 2019-09-21 15:30:20 +02:00
audio.c audio: fix use-after-free with fuzzed file 2019-09-21 21:59:09 +02:00
client.c client API: add mpv_command_ret 2019-09-21 14:24:42 +02:00
client.h render api: fix use-after-free 2019-09-20 13:54:17 +02:00
command.c input: add keybind command 2019-09-21 16:58:14 +00:00
command.h demux, command: add a third stream recording mechanism 2019-09-19 20:37:05 +02:00
configfiles.c Remove optical disc fancification layers 2019-09-13 17:31:59 +02:00
core.h demux, command: add a third stream recording mechanism 2019-09-19 20:37:05 +02:00
external_files.c external_files: add .lrc subtitle extension 2019-09-02 01:25:43 +03:00
external_files.h player: get rid of mpv_global.opts 2018-05-24 19:56:35 +02:00
javascript.c js: expose mpv_abort_async_command() (match dbe831bd) 2019-09-11 21:08:04 +03:00
loadfile.c player: use track title if exists instead of filename 2019-09-21 15:41:22 +02:00
lua.c lua: expose mpv_abort_async_command() 2018-05-24 19:56:34 +02:00
main.c m_config: remove m_config_create_shadow 2019-09-19 20:37:05 +02:00
misc.c player: fix --loop with backward playback 2019-09-19 20:37:05 +02:00
osd.c osd: allow sub-text to work even if sub-visibility is disabled 2019-09-21 15:36:58 +02:00
playloop.c playloop: don't read playback pos from byte stream 2019-09-21 15:49:28 +00:00
screenshot.c screenshot: move message showing to common code 2019-09-19 20:37:05 +02:00
screenshot.h image_writer: move convert_image() to player/screenshot.c 2019-09-14 23:02:39 +02:00
scripting.c scripting: change when/how player waits for scripts being loaded 2018-04-18 01:17:41 +03:00
sub.c player: ensure backward playback state is propagated on track switching 2019-09-19 20:37:05 +02:00
video.c player: ensure backward playback state is propagated on track switching 2019-09-19 20:37:05 +02:00