wmadec: Properly handle empty outputs.

If out_size is zero we try to shrink the buffer to size zero. POSIX
says that the behavior is implementation-defined in this case, and
para_realloc() aborts due to an assert() statement that checks for
size zero. This patch makes sure the wma decoder never calls realloc()
with a zero size argument.

diff --git a/wmadec_filter.c b/wmadec_filter.c
index 0dff2b7914a0e1f1e18afc412bbd331bfe32f648..48257c19b11de385e999f96706b9ca83632ea4a4 100644 (file)
--- a/wmadec_filter.c
+++ b/wmadec_filter.c
@@ -1237,9 +1237,11 @@ next_buffer:
                free(out);
                goto err;
        }
-       out = para_realloc(out, out_size);
-       if (out_size > 0)
+       if (out_size > 0) {
+               out = para_realloc(out, out_size);
                btr_add_output(out, out_size, btrn);
+       } else
+               free(out);
        converted += ret + WMA_FRAME_SKIP;
 success:
        btr_consume(btrn, converted);