gstreamer/subprojects/gst-plugins-bad/sys
Seungha Yang b9e51facdd d3d11decoder: Fix potential use after free
A DPB buffer held by codec picture object may not be writable
at the moment, then gst_buffer_make_writable() will unref passed buffer.

Specifically, the use after free or double free can happen if:
* Crop meta of buffer copy is required because of non-zero
  top-left crop position
* zero-copy is possible with crop meta
* A picture was duplicated, interlaced h264 stream for example

Interlaced h264 stream with non-zero top-left crop position
is not very common but it's possible configuration in theory.

Thus gst_buffer_make_writable() should be called with
GstVideoCodecFrame.output_buffer directly.

Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6706>
2024-04-22 13:28:06 +00:00
..
aja ajasrc: always post details about detected format 2024-04-04 18:23:31 +00:00
amfcodec amfcodec: Add plugin status message 2024-02-22 23:30:29 +00:00
androidmedia androidmedia: add NDK implementation of Android MediaCodec 2024-01-11 19:00:13 +00:00
applemedia vtdec: Fix caps criticals during negotiation 2024-03-27 09:04:28 +00:00
asio asio: Add support for MinGW build 2024-03-20 10:53:16 +00:00
bluez avdtpsink: post error message when failing to start 2024-02-09 10:09:13 +00:00
d3d11 d3d11decoder: Fix potential use after free 2024-04-22 13:28:06 +00:00
d3d12 d3d12testsrc: Use shared 11on12 device 2024-04-20 04:16:48 +09:00
d3dvideosink d3dvideosink: Fix navigation event leak 2023-06-15 05:09:46 +00:00
decklink decklink: Fix typo in element documentation 2023-11-09 07:53:12 +00:00
directshow sys: avoid double definition of symbol MEDIASUBTYPE_I420 2023-03-23 00:56:04 +00:00
directsound meson: Call pkgconfig.generate in the loop where we declare plugins dependencies 2022-09-01 21:17:35 +00:00
dvb doc: Fix newline char between authors 2023-05-20 05:48:23 +00:00
dwrite dwrite: Use shared 11on12 device 2024-04-20 04:16:48 +09:00
fbdev meson: Call pkgconfig.generate in the loop where we declare plugins dependencies 2022-09-01 21:17:35 +00:00
ipcpipeline meson: Call pkgconfig.generate in the loop where we declare plugins dependencies 2022-09-01 21:17:35 +00:00
kms kmssink: Add TIDSS auto-detection 2023-10-12 18:25:50 +00:00
magicleap meson: Call pkgconfig.generate in the loop where we declare plugins dependencies 2022-09-01 21:17:35 +00:00
mediafoundation mediafoundation: Fix infinite loop in device provider 2024-04-21 19:21:54 +09:00
msdk msdk: Add main-422-12 profile to hevc 2024-04-17 19:31:09 +00:00
nvcodec nvencoder: Add support for RGB formats 2024-04-02 13:07:29 +00:00
opensles meson: Call pkgconfig.generate in the loop where we declare plugins dependencies 2022-09-01 21:17:35 +00:00
qsv qsvdecoder: Release too old frames 2024-04-09 16:49:47 +00:00
shm shm: drop use of GSlice allocator 2023-02-03 17:48:10 +00:00
tinyalsa meson: Require tinyalsa >= 1.1.0 when building its plugin 2024-03-12 20:30:11 +00:00
uvcgadget uvcsink: use the pad's current caps to update caps_changed 2023-10-06 15:55:23 +00:00
uvch264 meson: Add a wrap file for libgudev 2023-04-19 22:47:19 +00:00
v4l2codecs v4l2codecs: Don't unref allocation query caps 2024-04-18 06:13:17 +00:00
va vavp9enc: Preserve PTS and other frame metadata 2024-04-19 07:18:35 +00:00
wasapi wasapi: Fix alloc/free function mismatch 2024-02-21 21:03:32 +00:00
wasapi2 wasapi2: Fix task memory leak 2024-02-21 21:03:32 +00:00
webview2 webview2: Handle double click and modifier 2024-04-18 20:19:38 +00:00
wic bad: Update indent 2023-02-28 10:12:31 +00:00
win32ipc win32ipc: Fix pipe handle leak 2023-08-23 18:33:04 +09:00
winks ksdeviceprovider: Fix crash while probing device caps 2024-02-09 14:09:07 +00:00
winscreencap winscreencap: Warn for deprecated plugin use 2022-12-08 17:48:11 +00:00
meson.build webview2: Add Microsoft WebView2 based web browser source 2024-03-28 10:49:39 +00:00