Commit a594f17f authored by Vittorio Giovara's avatar Vittorio Giovara

dvbsubdec: Free subrect memory on allocation error

Signed-off-by: 's avatarVittorio Giovara <vittorio.giovara@gmail.com>
parent 1cfd5663
......@@ -1293,6 +1293,10 @@ static int dvbsub_display_end_segment(AVCodecContext *avctx, const uint8_t *buf,
for (i = 0; i < sub->num_rects; i++) {
sub->rects[i] = av_mallocz(sizeof(*sub->rects[i]));
if (!sub->rects[i]) {
int j;
for (j = 0; j < i; j ++)
av_free(sub->rects[j]);
av_free(sub->rects);
return AVERROR(ENOMEM);
}
}
......@@ -1335,6 +1339,8 @@ static int dvbsub_display_end_segment(AVCodecContext *avctx, const uint8_t *buf,
rect->data[1] = av_mallocz(AVPALETTE_SIZE);
if (!rect->data[1]) {
for (i = 0; i < sub->num_rects; i++)
av_free(sub->rects[i]);
av_free(sub->rects);
return AVERROR(ENOMEM);
}
......@@ -1343,6 +1349,8 @@ static int dvbsub_display_end_segment(AVCodecContext *avctx, const uint8_t *buf,
rect->data[0] = av_malloc(region->buf_size);
if (!rect->data[0]) {
av_free(rect->data[1]);
for (i = 0; i < sub->num_rects; i++)
av_free(sub->rects[i]);
av_free(sub->rects);
return AVERROR(ENOMEM);
}
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment