From: jeanlf <jeanlf@gpac.io>
Date: Wed, 4 Jan 2023 10:31:29 +0000 (+0100)
Subject: [PATCH] fixed #2365
X-Git-Tag: archive/raspbian/1.0.1+dfsg1-4+rpi1+deb11u3^2~4
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=145063a2f06675f7912d11511300c6d1ed1940b4;p=gpac.git

[PATCH] fixed #2365


Gbp-Pq: Name CVE-2023-23145.patch
---

diff --git a/src/laser/lsr_dec.c b/src/laser/lsr_dec.c
index 1c1a6a6..9321b53 100644
--- a/src/laser/lsr_dec.c
+++ b/src/laser/lsr_dec.c
@@ -1483,8 +1483,8 @@ static void lsr_read_rare_full(GF_LASeRCodec *lsr, GF_Node *n)
 			} else {
 				da->type=SVG_STROKEDASHARRAY_ARRAY;
 				da->array.count = lsr_read_vluimsbf5(lsr, "len");
-				da->array.vals = (Fixed*)gf_malloc(sizeof(Fixed)*da->array.count);
-				da->array.units = (u8*)gf_malloc(sizeof(u8)*da->array.count);
+                                da->array.vals = (Fixed*)gf_realloc(da->array.vals, sizeof(Fixed)*da->array.count);
+                                da->array.units = (u8*)gf_realloc(da->array.units, sizeof(u8)*da->array.count);
 				for (j=0; j<da->array.count; j++) {
 					da->array.vals[j] = lsr_read_fixed_16_8(lsr, "dash");
 					da->array.units[j] = 0;