fix segfault when using invalid ROI or AfWindow parameters

parameters.c

@@ -24,16 +24,13 @@ const char *parameters_get_error() {
 bool parameters_unserialize(parameters_t *params, const uint8_t *buf, size_t buf_size) {
     memset(params, 0, sizeof(parameters_t));
 
-    char *tmp = malloc(buf_size + 1);
-    memcpy(tmp, buf, buf_size);
-    tmp[buf_size] = 0x00;
-
-    while (true)  {
-        char *entry = strsep(&tmp, " ");
-        if (entry == NULL) {
-            break;
-        }
+    char *copy = malloc(buf_size + 1);
+    memcpy(copy, buf, buf_size);
+    copy[buf_size] = 0x00;
+    char *ptr = copy;
+    char *entry;
 
+    while ((entry = strsep(&ptr, " ")) != NULL)  {
         char *key = strsep(&entry, ":");
         char *val = strsep(&entry, ":");
 
@@ -160,15 +157,15 @@ bool parameters_unserialize(parameters_t *params, const uint8_t *buf, size_t buf
         }
     }
 
-    free(tmp);
+    free(copy);
 
     params->buffer_count = 6;
     params->capture_buffer_count = params->buffer_count * 2;
 
     return true;
 
 failed:
-    free(tmp);
+    free(copy);
     parameters_destroy(params);
 
     return false;

window.c

@@ -4,19 +4,24 @@
 #include "window.h"
 
 bool window_load(const char *encoded, window_t *window) {
+    char *copy = strdup(encoded);
     float vals[4];
     int i = 0;
-    char *token = strtok((char *)encoded, ",");
-    while (token != NULL) {
+    char *ptr = copy;
+    char *token;
+
+    while ((token = strsep(&ptr, ",")) != NULL)  {
         vals[i] = atof(token);
         if (vals[i] < 0 || vals[i] > 1) {
+            free(copy);
             return false;
         }
 
         i++;
-        token = strtok(NULL, ",");
     }
 
+    free(copy);
+
     if (i != 4) {
         return false;
     }