shithub: dav1d

Info  •  Files  •  Log  •  Branches

fix mvs_ref NULL ptr dererence after allocation error

--- a/src/decode.c

+++ b/src/decode.c

@@ -3178,6 +3178,10 @@

     if ((f->frame_hdr->frame_type & 1) || f->frame_hdr->allow_intrabc) {

         f->mvs_ref = dav1d_ref_create(f->sb128h * 32 * f->b4_stride *

                                       sizeof(*f->mvs));

+        if (!f->mvs_ref) {

+            res = -ENOMEM;

+            goto error;

+        }

         f->mvs = f->mvs_ref->data;

         if (!f->frame_hdr->allow_intrabc) {

             for (int i = 0; i < 7; i++)