mirror of
https://git.ffmpeg.org/ffmpeg.git
synced 2026-10-28 18:15:24 +08:00
The frame can hold the last reference to the frames context and with it to the device context the hwaccel's free_frame_priv callback receives. vvc, mpegvideo and the mjpeg close path released the frame first, and the av1, vp8, vp9 and h264 picture replacement replaced it first; the other decoders already release the private data first. Found during triage/review of the security report AISLE-2026-R0043