Commit b701ae9e authored by Rémi Denis-Courmont's avatar Rémi Denis-Courmont

sgimb: use after free (fixes #8724)

parent d42a6172
...@@ -366,13 +366,12 @@ static int Demux ( demux_t *p_demux ) ...@@ -366,13 +366,12 @@ static int Demux ( demux_t *p_demux )
return -1; return -1;
} }
free( p_sys->psz_uri ); char *uri;
if( asprintf( &p_sys->psz_uri, "%s%%3FMeDiAbAsEshowingId=%d%%26MeDiAbAsEconcert%%3FMeDiAbAsE", if( asprintf( &uri, "%s%%3FMeDiAbAsEshowingId=%d%%26MeDiAbAsEconcert"
p_sys->psz_uri, p_sys->i_sid ) == -1 ) "%%3FMeDiAbAsE", p_sys->psz_uri, p_sys->i_sid ) == -1 )
{
p_sys->psz_uri = NULL;
return -1; return -1;
} free( p_sys->psz_uri );
p_sys->psz_uri = uri;
} }
p_child = input_item_NewWithType( p_sys->psz_uri, p_child = input_item_NewWithType( p_sys->psz_uri,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment