From 0a5f8c0d73ac611687e5031d39e75b703777b6dc Mon Sep 17 00:00:00 2001 From: Ivan Poddubny Date: Sun, 31 May 2015 19:33:37 +0300 Subject: [PATCH] Fix buffer overflow in slin sample frames generation. The length of frames retured by sample functions was twice as large as real, what caused global buffer overflow caught by AddressSanitizer. ASTERISK-24717 #close Reported by: Badalian Vyacheslav Change-Id: Iec2fe682aef13e556684912f906bedf7c18229c6 --- include/asterisk/slin.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/include/asterisk/slin.h b/include/asterisk/slin.h index 148ee09ab3..976637473e 100644 --- a/include/asterisk/slin.h +++ b/include/asterisk/slin.h @@ -62,7 +62,7 @@ static inline struct ast_frame *slin8_sample(void) { static struct ast_frame f = { .frametype = AST_FRAME_VOICE, - .datalen = sizeof(ex_slin8) * 2, + .datalen = sizeof(ex_slin8), .samples = ARRAY_LEN(ex_slin8), .mallocd = 0, .offset = 0, @@ -79,7 +79,7 @@ static inline struct ast_frame *slin16_sample(void) { static struct ast_frame f = { .frametype = AST_FRAME_VOICE, - .datalen = sizeof(ex_slin16) * 2, + .datalen = sizeof(ex_slin16), .samples = ARRAY_LEN(ex_slin16), .mallocd = 0, .offset = 0, -- 2.47.2