Files
zoneminder/src
Isaac Connor 4aa62a4d82 fix: VideoStore filename use-after-free + null-oc destructor guard refs #4757
Two crash-class bugs reported by Copilot on PR #4835:

1. filename was held as const char* pointing into a caller-owned
   std::string. Event::AddPacket_() can rename the underlying file and
   reassign video_incomplete_path, invalidating that pointer; finalize()
   then fopens through the dangling pointer to parse the mfro trailer.
   Store filename as std::string inside VideoStore so the storage lives
   as long as the object does.

2. VideoStore::~VideoStore() dereferenced oc->pb and ran the reorder-
   queue drain without checking oc. If open() bailed before allocating
   oc, both paths would crash. Guard on oc being non-null.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-16 18:15:20 -04:00
..
2024-10-26 14:29:40 -04:00
2024-03-26 13:43:58 -05:00
2024-10-26 14:29:40 -04:00
2025-07-05 08:09:09 -04:00
2021-05-30 21:41:58 +02:00
2026-01-29 18:50:42 -05:00
2024-10-29 13:30:29 -04:00
2025-02-26 21:04:32 +11:00
2025-02-26 21:04:32 +11:00
2023-01-18 16:01:42 -05:00
2026-05-16 01:27:23 +03:00
2025-07-05 08:09:09 -04:00
2025-07-05 08:09:09 -04:00
2026-01-05 16:36:36 -05:00
2026-01-05 16:36:36 -05:00