[Bug 774287] New: hls: gst_m3u8_has_next_fragment crash

[GStreamer (GNOME Bugzilla)]

https://bugzilla.gnome.org/show_bug.cgi?id=774287

            Bug ID: 774287
           Summary: hls: gst_m3u8_has_next_fragment crash
    Classification: Platform
           Product: GStreamer
           Version: 1.x
                OS: All
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: gst-plugins-bad
          Assignee: gstreamer-bugs at lists.freedesktop.org
          Reporter: tumaleksandr at yandex.ua
        QA Contact: gstreamer-bugs at lists.freedesktop.org
     GNOME version: ---

Function 'gst_m3u8_has_next_fragment' in
'gst-plugins-bad-1.9.90\ext\hls\m3u8.c' periodically crashes the program when
cur=NULL
    .text:6B40225F     mov     edi, [cur+4]             

gboolean gst_m3u8_has_next_fragment (GstM3U8 * m3u8, gboolean forward)
{
    ...
    cur = m3u8_find_next_fragment (m3u8, forward);  <-- Can return NULL
    ...
    have_next = (forward && cur->next) || (!forward && cur->prev); <-- CRASH!
    ...
}

The value 'cur' must be checked for NULL and so expression for 'have_next' will
look like:
    have_next = cur && ((forward && cur->next) || (!forward && cur->prev));

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.