ref: e9807e8a79be8cb0de8ca901a31684fe8cd4988e
parent: 4a59e004c2c1e6197f9292e2fd2ae39847a754f0
author: Sigrid <ftrvxmtrx@gmail.com>
date: Mon Jan 11 11:17:48 EST 2021
libvorbis: fix free() called on a wrong pointer
--- a/sys/src/cmd/audio/libvorbis/mdct.c
+++ b/sys/src/cmd/audio/libvorbis/mdct.c
@@ -495,7 +495,7 @@
int n4=n>>2;
int n8=n>>3;
DATA_TYPE *w=malloc(n*sizeof(*w)); /* forward needs working space */
- DATA_TYPE *w2=w+n2;
+ DATA_TYPE *w2=w+n2, *wbuf=w;
/* rotate */
@@ -559,5 +559,5 @@
w+=2;
T+=2;
}
- free(w);
+ free(wbuf);
}
--
⑨