Stefan Knoblich 8a98baa696 ftmod_isdn: Avoid stack smashing buffer overflow in isdn_tones_run().
The len variable can, in certain situations (large burst of incoming non-SLIN audio),
exceed the size of the on-stack frame buffer, which causes ftdm_buffer_read_loop() to
overwrite the dt_buffer pointer.

Use ftdm_min() to make sure len (after conversion to SLIN units) isn't larger
than the frame buffer size.

Also adds are couple more code comments.

Signed-off-by: Stefan Knoblich <stkn@openisdn.net>
2012-08-14 00:25:07 -05:00
..
2012-01-03 14:11:47 -05:00
2012-08-10 17:21:52 +02:00
2011-03-06 22:11:39 -05:00
2011-03-17 08:34:00 -05:00
2011-03-11 17:36:42 -05:00

FreeTDM
http://wiki.freeswitch.org/wiki/FreeTDM