@@ -4022,7 +4022,7 @@ static void mov_fix_index(MOVContext *mov, AVStream *st)
int num_discarded_begin = 0;
int first_non_zero_audio_edit = -1;
int packet_skip_samples = 0;
- MOVIndexRange *current_index_range;
+ MOVIndexRange *current_index_range = NULL;
int found_keyframe_after_edit = 0;
int found_non_empty_edit = 0;
@@ -4037,7 +4037,6 @@ static void mov_fix_index(MOVContext *mov, AVStream *st)
return;
}
msc->current_index_range = msc->index_ranges;
- current_index_range = msc->index_ranges - 1;
// Clean AVStream from traces of old index
sti->index_entries = NULL;
@@ -4224,8 +4223,9 @@ static void mov_fix_index(MOVContext *mov, AVStream *st)
}
// Update the index ranges array
- if (current_index_range < msc->index_ranges || index != current_index_range->end) {
- current_index_range++;
+ if (!current_index_range || index != current_index_range->end) {
+ current_index_range = current_index_range ? current_index_range + 1
+ : msc->index_ranges;
current_index_range->start = index;
}
current_index_range->end = index + 1;
It is undefined behaviour. Fixes many failed tests with UBSan and GCC 13 like "src/libavformat/mov.c:4229:44: runtime error: store to address 0x5572abe20f80 with insufficient space for an object of type 'struct MOVIndexRange'" (The line number does not refer to the line where &entry[-1] is assigned.) Signed-off-by: Andreas Rheinhardt <andreas.rheinhardt@outlook.com> --- Could also use index addressing; or a next_index_range pointer. libavformat/mov.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)