From afdd915b3440aae1df6840c38aa356ffb616e135 Mon Sep 17 00:00:00 2001 From: russell Date: Tue, 17 Oct 2006 16:40:45 +0000 Subject: Set the readbuf size to be the same size of the variable, readsize. This buffer was 31 bytes, while the readsize could be 32 bytes, causing a read into invalid memory. (issue #8155, araasch) git-svn-id: http://svn.digium.com/svn/zaptel/branches/1.4@1507 5390a7c7-147a-4af0-8ec9-7488f05a26cb --- wct4xxp/base.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'wct4xxp/base.c') diff --git a/wct4xxp/base.c b/wct4xxp/base.c index b26307e..72afb05 100644 --- a/wct4xxp/base.c +++ b/wct4xxp/base.c @@ -2637,7 +2637,7 @@ static inline void __t4_framer_interrupt(struct t4 *wc, int span) if (readsize > 0) { struct zt_chan *sigchan = ts->sigchan; int i; - unsigned char readbuf[FRMR_RBCL_MAX_SIZE]; + unsigned char readbuf[readsize]; if (debug & DEBUG_FRAMER) printk("Framer %d: Got RPF/RME! readsize is %d\n", sigchan->span->offset, readsize); -- cgit v1.2.3