Fix a stack smashing bug

Signed-off-by: Tristan Matthews <tmatth@videolan.org>
xiph · Jan 24, 2019 · f9e43a1 · f9e43a1
1 parent 6b539e0
commit f9e43a1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libspeexdsp/buffer.c b/libspeexdsp/buffer.c
@@ -135,7 +135,7 @@ EXPORT int speex_buffer_read(SpeexBuffer *st, void *_data, int len)
    char *data = _data;
    if (len > st->available)
    {
-      SPEEX_MEMSET(data+st->available, 0, st->size-st->available);
+      SPEEX_MEMSET(data+st->available, 0, len - st->available);
       len = st->available;
    }
    end = st->read_ptr + len;