Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
 help / color / mirror / Atom feed
* [FFmpeg-devel] [PATCH] avformat/movenc_ttml: fix memleaks (PR #20586)
@ 2025-09-23 14:22 Zhao Zhili via ffmpeg-devel
  0 siblings, 0 replies; only message in thread
From: Zhao Zhili via ffmpeg-devel @ 2025-09-23 14:22 UTC (permalink / raw)
  To: ffmpeg-devel; +Cc: Zhao Zhili

PR #20586 opened by Zhao Zhili (quink)
URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20586
Patch URL: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20586.patch

Memory leaks can happen on normal case when break from while loop
early, and it can happen on error path with goto cleanup.
The two fate failures mov-mp4-ttml-stpp and mov-mp4-ttml-dfxp are
the first case.


>From 278fa8c69d07a4519669c851f0a51a0695761983 Mon Sep 17 00:00:00 2001
From: Zhao Zhili <zhilizhao@tencent.com>
Date: Tue, 23 Sep 2025 22:08:02 +0800
Subject: [PATCH] avformat/movenc_ttml: fix memleaks

Memory leaks can happen on normal case when break from while loop
early, and it can happen on error path with goto cleanup.
The two fate failures mov-mp4-ttml-stpp and mov-mp4-ttml-dfxp are
the first case.
---
 libavformat/movenc_ttml.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/libavformat/movenc_ttml.c b/libavformat/movenc_ttml.c
index c5232e589c..ff09c14fa2 100644
--- a/libavformat/movenc_ttml.c
+++ b/libavformat/movenc_ttml.c
@@ -140,7 +140,7 @@ static int mov_write_ttml_document_from_queue(AVFormatContext *s,
             } else if (pkt->pts >= end_ts) {
                 // starts after this fragment, put back to original queue
                 ret = avpriv_packet_list_put(&track->squashed_packet_queue,
-                                             pkt, av_packet_ref,
+                                             pkt, NULL,
                                              FF_PACKETLIST_FLAG_PREPEND);
                 if (ret < 0)
                     goto cleanup;
@@ -215,6 +215,7 @@ static int mov_write_ttml_document_from_queue(AVFormatContext *s,
     ret = 0;
 
 cleanup:
+    av_packet_unref(pkt);
     while (!avpriv_packet_list_get(&back_to_queue_list, pkt)) {
         ret = avpriv_packet_list_put(&track->squashed_packet_queue,
                                      pkt, av_packet_ref,
-- 
2.49.1

_______________________________________________
ffmpeg-devel mailing list -- ffmpeg-devel@ffmpeg.org
To unsubscribe send an email to ffmpeg-devel-leave@ffmpeg.org

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2025-09-23 14:23 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-09-23 14:22 [FFmpeg-devel] [PATCH] avformat/movenc_ttml: fix memleaks (PR #20586) Zhao Zhili via ffmpeg-devel

Git Inbox Mirror of the ffmpeg-devel mailing list - see https://ffmpeg.org/mailman/listinfo/ffmpeg-devel

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://master.gitmailbox.com/ffmpegdev/0 ffmpegdev/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 ffmpegdev ffmpegdev/ http://master.gitmailbox.com/ffmpegdev \
		ffmpegdev@gitmailbox.com
	public-inbox-index ffmpegdev

Example config snippet for mirrors.


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git