From 3362216b662d80fded346dcfa56c84c6f804d993 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Josef=20S=C3=B6ntgen?= Date: Thu, 15 Nov 2018 13:11:55 +0100 Subject: [PATCH] os: clear remaining samples in Audio packet ... instead of potentially producing out-of-bounds write in the source buffer. Fixes #3264. --- repos/os/include/audio_out_session/audio_out_session.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/repos/os/include/audio_out_session/audio_out_session.h b/repos/os/include/audio_out_session/audio_out_session.h index 18d651ad4..f3b81c124 100644 --- a/repos/os/include/audio_out_session/audio_out_session.h +++ b/repos/os/include/audio_out_session/audio_out_session.h @@ -94,7 +94,7 @@ class Audio_out::Packet Genode::memcpy(_data, data, (samples > PERIOD ? PERIOD : samples) * SAMPLE_SIZE); if (samples < PERIOD) - Genode::memset(data + samples, 0, (PERIOD - samples) * SAMPLE_SIZE); + Genode::memset(_data + samples, 0, (PERIOD - samples) * SAMPLE_SIZE); } /**