lavf/4xm: fix memory leak in error handing path

need to free the header in error path. Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: Jun Zhao <barryjzhao@tencent.com>
5 years ago · 5f13859873
parent 85e338ab0d
commit 5f13859873
1 changed files with 2 additions and 1 deletions
--- a/libavformat/4xm.c
+++ b/libavformat/4xm.c
@ -241,7 +241,8 @@ static int fourxm_read_header(AVFormatContext *s)
        size       = AV_RL32(&header[i + 4]);
        if (size > header_size - i - 8 && (fourcc_tag == vtrk_TAG || fourcc_tag == strk_TAG)) {
            av_log(s, AV_LOG_ERROR, "chunk larger than array %d>%d\n", size, header_size - i - 8);
-            return AVERROR_INVALIDDATA;
+            ret = AVERROR_INVALIDDATA;
+            goto fail;
        }

        if (fourcc_tag == std__TAG) {