Commit 0ea6606418 for ffmpeg
commit 0ea6606418c4602a9de5d43657b7b2f56b0f9681
Author: Michael Niedermayer <michael@niedermayer.cc>
Date: Sat Oct 24 05:49:36 2026 +0200
avcodec/libxevd: free the slice type storage of NAL units that complete no picture
Found during triage of the security report AkIti8GalyUg.
Fixes: memleak
Fixes: 5nzyL324psH3
Memleak Replicated through UnModified FFmpeg with ASAN
diff --git a/libavcodec/libxevd.c b/libavcodec/libxevd.c
index 4aad67af6f..b1bede5e1b 100644
--- a/libavcodec/libxevd.c
+++ b/libavcodec/libxevd.c
@@ -380,6 +380,8 @@ static int libxevd_receive_frame(AVCodecContext *avctx, AVFrame *frame)
}
bs_read_pos += nalu_size;
+ if (stat.fnum < 0)
+ av_freep(&bitb.pdata[1]);
if (stat.nalu_type == XEVD_NUT_SPS) { // EVC stream parameters changed
if ((ret = export_stream_params(xectx, avctx)) != 0) {