diff options
| author | Friedemann Kleint <Friedemann.Kleint@qt.io> | 2017-04-24 13:22:15 +0200 |
|---|---|---|
| committer | Friedemann Kleint <Friedemann.Kleint@qt.io> | 2017-04-25 12:11:32 +0000 |
| commit | 56185dedd2a075e5b7e72c18e766a60b890c14a1 (patch) | |
| tree | 2e7180eda06cb1259e6ae0636a2e468910debb8f /src/plugins/directshow/helpers/directshowmediatype.cpp | |
| parent | 64e84dab2673020e4384ae36d9d1e9e4f0d8052d (diff) | |
DirectShow: Fix uninitialized memory read in DirectShowMediaTypeEnum::Next()
Newly allocated memory was passed to DirectShowMediaType::copy(), which calls
DirectShowMediaType::clear() on the target, which crashes when trying to
release a COM pointer.
Split out a DirectShowMediaType::copyToUninitialized() helper function
which does not call clear() for this purpose.
Task-number: QTBUG-59515
Change-Id: I2801f4ba2c8da618ff8a1c57c4cea215fff292b4
Reviewed-by: Eskil Abrahamsen Blomfeldt <eskil.abrahamsen-blomfeldt@qt.io>
Diffstat (limited to 'src/plugins/directshow/helpers/directshowmediatype.cpp')
| -rw-r--r-- | src/plugins/directshow/helpers/directshowmediatype.cpp | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/plugins/directshow/helpers/directshowmediatype.cpp b/src/plugins/directshow/helpers/directshowmediatype.cpp index d9ddf8248..65882806c 100644 --- a/src/plugins/directshow/helpers/directshowmediatype.cpp +++ b/src/plugins/directshow/helpers/directshowmediatype.cpp @@ -134,6 +134,11 @@ void DirectShowMediaType::copy(AM_MEDIA_TYPE *target, const AM_MEDIA_TYPE *sourc clear(*target); + copyToUninitialized(target, source); +} + +void DirectShowMediaType::copyToUninitialized(AM_MEDIA_TYPE *target, const AM_MEDIA_TYPE *source) +{ *target = *source; if (source->cbFormat > 0) { |