[vlc-commits] asf: Fix missing fp pointer reset

Hugo Beauzée-Luyssen git at videolan.org
Wed Aug 14 18:24:31 CEST 2019


vlc/vlc-3.0 | branch: master | Hugo Beauzée-Luyssen <hugo at beauzee.fr> | Fri Aug  2 14:40:04 2019 +0200| [59058abed0c8e5022c21544c7c4279b349a339ea] | committer: Hugo Beauzée-Luyssen

asf: Fix missing fp pointer reset

This fixes a potential use after free

CVE-2019-14533

(cherry picked from commit d5a9fb5c671a00b13ca0a8d39489f4ee0ac23f94)
Signed-off-by: Hugo Beauzée-Luyssen <hugo at beauzee.fr>

> http://git.videolan.org/gitweb.cgi/vlc/vlc-3.0.git/?a=commit;h=59058abed0c8e5022c21544c7c4279b349a339ea
---

 modules/demux/asf/asf.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/demux/asf/asf.c b/modules/demux/asf/asf.c
index e626d5a9d7..22e60194d3 100644
--- a/modules/demux/asf/asf.c
+++ b/modules/demux/asf/asf.c
@@ -1388,6 +1388,7 @@ static void DemuxEnd( demux_t *p_demux )
     {
         ASF_FreeObjectRoot( p_demux->s, p_sys->p_root );
         p_sys->p_root = NULL;
+        p_sys->p_fp = NULL;
     }
     if( p_sys->meta )
     {



More information about the vlc-commits mailing list