2ad2b6d31b
The len variable can, in certain situations (large burst of incoming non-SLIN audio), exceed the size of the on-stack frame buffer, which causes ftdm_buffer_read_loop() to overwrite the dt_buffer pointer. Use ftdm_min() to make sure len (after conversion to SLIN units) isn't larger than the frame buffer size. Also adds are couple more code comments. Signed-off-by: Stefan Knoblich <stkn@openisdn.net> |
||
|---|---|---|
| .. | ||
| build | ||
| conf | ||
| docs | ||
| mod_freetdm | ||
| msvc | ||
| sample | ||
| src | ||
| .gitignore | ||
| .update | ||
| AUTHORS | ||
| CMakeLists.txt | ||
| ChangeLog | ||
| Makefile.am | ||
| NEWS | ||
| README | ||
| TODO | ||
| acinclude.m4 | ||
| bootstrap | ||
| configure.ac | ||
| configure.gnu | ||
| cyginstall.sh | ||
| freetdm.2008.sln | ||
| freetdm.2010.sln | ||
| freetdm.pc.in | ||
| mkrelease.sh | ||
| ozrename.sh | ||
| ozreplace.sh | ||
README
FreeTDM http://wiki.freeswitch.org/wiki/FreeTDM