Files
freeswitch/libs/freetdm/src
Stefan Knoblich 8a98baa696 ftmod_isdn: Avoid stack smashing buffer overflow in isdn_tones_run().
The len variable can, in certain situations (large burst of incoming non-SLIN audio),
exceed the size of the on-stack frame buffer, which causes ftdm_buffer_read_loop() to
overwrite the dt_buffer pointer.

Use ftdm_min() to make sure len (after conversion to SLIN units) isn't larger
than the frame buffer size.

Also adds are couple more code comments.

Signed-off-by: Stefan Knoblich <stkn@openisdn.net>
2012-08-14 00:25:07 -05:00
..
2010-01-15 21:43:41 +00:00
…
2012-07-18 08:16:35 -05:00
2012-05-09 09:20:10 -05:00
…
2012-04-18 11:52:02 -05:00
2012-04-18 11:52:02 -05:00
2010-01-15 20:35:11 +00:00