From 7382fd3543bbe57c6804ab8e77209d7d1dc641d9 Mon Sep 17 00:00:00 2001 From: Thomas Martitz Date: Mon, 8 Aug 2011 13:21:08 +0200 Subject: [PATCH] Fix out of bounds access. --- apps/playback.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/playback.c b/apps/playback.c index 125f22601..551756eeb 100644 --- a/apps/playback.c +++ b/apps/playback.c @@ -3498,7 +3498,8 @@ unsigned char * audio_get_buffer(bool talk_buf, size_t *buffer_size) /* call buffer_get_buffer() to make use of the locking mechanism */ buf = buffer_get_buffer(&siz); buf += talkbuf_size = talkbuf_init(buf); - siz -= talkbuf_size + pcmbuf_init(buf + siz); + siz -= talkbuf_size; + siz -= pcmbuf_init(buf + siz); siz -= voicebuf_init(buf + siz); *buffer_size = siz; -- 2.11.4.GIT