Commit 51f7bb49 authored by Rémi Denis-Courmont's avatar Rémi Denis-Courmont

sgimb: use after free (fixes #8724)

(cherry picked from commit b701ae9ee5a78ca4d04d8c00c6c248d082dcc3f7)
parent a2a098cc
...@@ -367,13 +367,12 @@ static int Demux ( demux_t *p_demux ) ...@@ -367,13 +367,12 @@ static int Demux ( demux_t *p_demux )
return -1; return -1;
} }
free( p_sys->psz_uri ); char *uri;
if( asprintf( &p_sys->psz_uri, "%s%%3FMeDiAbAsEshowingId=%d%%26MeDiAbAsEconcert%%3FMeDiAbAsE", if( asprintf( &uri, "%s%%3FMeDiAbAsEshowingId=%d%%26MeDiAbAsEconcert"
p_sys->psz_uri, p_sys->i_sid ) == -1 ) "%%3FMeDiAbAsE", p_sys->psz_uri, p_sys->i_sid ) == -1 )
{
p_sys->psz_uri = NULL;
return -1; return -1;
} free( p_sys->psz_uri );
p_sys->psz_uri = uri;
} }
p_child = input_item_NewWithType( p_sys->psz_uri, p_child = input_item_NewWithType( p_sys->psz_uri,
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment