avformat/iff: fix memleak of packet

Fixes: msan_uninit-mem_7f65b9788da6_388_24.iff
Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind
Signed-off-by: Michael Niedermayer <michaelni@gmx.at>

diff --git a/libavformat/iff.c b/libavformat/iff.c
index 03c4b08..b5751c5 100644 (file)
--- a/libavformat/iff.c
+++ b/libavformat/iff.c
@@ -462,7 +462,9 @@ static int iff_read_packet(AVFormatContext *s,
         buf = pkt->data;
         bytestream_put_be16(&buf, 2);
         ret = avio_read(pb, buf, iff->body_size);
-        if (ret>=0 && ret < iff->body_size)
+        if (ret<0) {
+            av_free_packet(pkt);
+        } else if (ret < iff->body_size)
             av_shrink_packet(pkt, ret + 2);
     } else {
         av_assert0(0);