Tha_14/toxic
1
0
Fork 0
mirror of https://github.com/Tha14/toxic.git synced 2025-07-15 17:26:42 +02:00
Code Issues Projects Releases Wiki Activity

Fix pointer use after free bug

Browse Source 
If toxcore fails to end a call we still need to do a cleanup
This commit is contained in:
jfreegman
2020-10-27 15:20:21 -04:00
parent 478762f76c
commit 91f194c821
3 changed files with 36 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/audio_device.c
View File

@@ -342,6 +342,7 @@ DeviceError close_device(DeviceType type, uint32_t device_idx)
}
lock;
Device *device = running[type][device_idx];
DeviceError rc = de_None;
@@ -472,6 +473,7 @@ void *thread_poll(void *arg) // TODO: maybe use thread for every input source
lock;
if (!thread_running) {
free(frame_buf);
unlock;
break;
}
@@ -488,18 +490,18 @@ void *thread_poll(void *arg) // TODO: maybe use thread for every input source
for (uint32_t i = 0; i < size[input]; ++i) {
lock;
if (running[input][i] != NULL) {
alcGetIntegerv(running[input][i]->dhndl, ALC_CAPTURE_SAMPLES, sizeof(int32_t), &sample);
Device *device = running[input][i];
int f_size = (running[input][i]->sample_rate * running[input][i]->frame_duration / 1000);
if (device != NULL) {
alcGetIntegerv(device->dhndl, ALC_CAPTURE_SAMPLES, sizeof(int32_t), &sample);
int f_size = (device->sample_rate * device->frame_duration / 1000);
if (sample < f_size || f_size > FRAME_BUF_SIZE) {
unlock;
continue;
}
Device *device = running[input][i];
alcCaptureSamples(device->dhndl, frame_buf, f_size);
if (device->muted) {
@@ -519,8 +521,6 @@ void *thread_poll(void *arg) // TODO: maybe use thread for every input source
}
}
free(frame_buf);
pthread_exit(NULL);
}