Change #286124

Comments

avformat/rtpdec_rfc4175: Do not leak the frame finalized on a missed marker
When a packet with a new timestamp put the previous frame into pkt, an
invalid packet returned an error with the frame still in pkt, and a
packet with the marker set put the new frame into the same pkt. In both
cases the previous frame was lost and its buffer leaked, once per such
packet, so a sender can exhaust the memory of the receiver.
Return the previous frame in these cases, and the new one from the
following call.

Fixes: memleak
Fixes: iF2DzMcFQavi
Memory leak Replicated through UnModified FFmpeg with ASAN
Found during triage of the security report V8a3e2cGQI7w

Changed files

• libavformat/rtpdec_rfc4175.c