avcodec/jpeg2000dec: clear array length when freeing it

Fixes NULL pointer dereferences. Fixes ticket #11393. Reviewed-by: Michael Niedermayer <michael@niedermayer.cc> Signed-off-by: James Almer <jamrial@gmail.com>
2 months ago · 7f9c7f9849
parent 292c1df7c1
commit 7f9c7f9849
1 changed files with 1 additions and 0 deletions
--- a/libavcodec/jpeg2000dec.c
+++ b/libavcodec/jpeg2000dec.c
@ -1521,6 +1521,7 @@ static int jpeg2000_decode_packet(Jpeg2000DecoderContext *s, Jpeg2000Tile *tile,
                }
            }
            av_freep(&cblk->lengthinc);
+            cblk->nb_lengthinc = 0;
        }
    }
    // Save state of stream