From 4adb93dff05dd947878c67784d98c9a4e13b57a7 Mon Sep 17 00:00:00 2001 From: Paul B Mahol Date: Thu, 23 Nov 2023 14:58:35 +0100 Subject: [PATCH] avfilter/asrc_afirsrc: fix by one smaller allocation of buffer References: https://bugzilla.opensuse.org/1223215 References: CVE-2023-49501 --- libavfilter/asrc_afirsrc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libavfilter/asrc_afirsrc.c b/libavfilter/asrc_afirsrc.c index e2359c159f..ea04c35759 100644 --- a/libavfilter/asrc_afirsrc.c +++ b/libavfilter/asrc_afirsrc.c @@ -480,7 +480,7 @@ static av_cold int config_eq_output(AVFilterLink *outlink) if (ret < 0) return ret; - s->magnitude = av_calloc(s->nb_magnitude, sizeof(*s->magnitude)); + s->magnitude = av_calloc(s->nb_magnitude + 1, sizeof(*s->magnitude)); if (!s->magnitude) return AVERROR(ENOMEM); memcpy(s->magnitude, eq_presets[s->preset].gains, sizeof(*s->magnitude) * s->nb_magnitude); -- 2.44.0