if (pkt->obus_allocated < pkt->nb_obus + 1) {
int new_size = pkt->obus_allocated + 1;
- AV1OBU *tmp = av_realloc_array(pkt->obus, new_size, sizeof(*tmp));
+ AV1OBU *tmp;
+
+ if (new_size >= INT_MAX / sizeof(*tmp))
+ return AVERROR(ENOMEM);
+ tmp = av_fast_realloc(pkt->obus, &pkt->obus_allocated_size, new_size * sizeof(*tmp));
if (!tmp)
return AVERROR(ENOMEM);
pkt->obus = tmp;
- memset(pkt->obus + pkt->obus_allocated, 0,
- (new_size - pkt->obus_allocated) * sizeof(*tmp));
+ memset(pkt->obus + pkt->obus_allocated, 0, sizeof(*pkt->obus));
pkt->obus_allocated = new_size;
}
obu = &pkt->obus[pkt->nb_obus];
void ff_av1_packet_uninit(AV1Packet *pkt)
{
av_freep(&pkt->obus);
- pkt->obus_allocated = 0;
+ pkt->obus_allocated = pkt->obus_allocated_size = 0;
}