From 2d88425379e80508d0f95653bfcfdec72ef69ffc Mon Sep 17 00:00:00 2001 From: Mark Pilgrim Date: Thu, 30 Apr 2020 10:07:26 -0400 Subject: [PATCH] Fix buffer overflow in AudioBuffer::copyFromChannel --- .../renderer/modules/webaudio/audio_buffer.cc | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/chromium_src/third_party/blink/renderer/modules/webaudio/audio_buffer.cc b/chromium_src/third_party/blink/renderer/modules/webaudio/audio_buffer.cc index 4ed2b01581e8..068c62fd28ab 100644 --- a/chromium_src/third_party/blink/renderer/modules/webaudio/audio_buffer.cc +++ b/chromium_src/third_party/blink/renderer/modules/webaudio/audio_buffer.cc @@ -24,15 +24,15 @@ } \ } -#define BRAVE_AUDIOBUFFER_COPYFROMCHANNEL \ - LocalDOMWindow* window = LocalDOMWindow::From(script_state); \ - if (window) { \ - double fudge_factor = \ - brave::BraveSessionCache::From(*(window->document())) \ - .GetFudgeFactor(); \ - for (unsigned i = 0; i < count; ++i) { \ - dst[i + buffer_offset] = dst[i + buffer_offset] * fudge_factor; \ - } \ +#define BRAVE_AUDIOBUFFER_COPYFROMCHANNEL \ + LocalDOMWindow* window = LocalDOMWindow::From(script_state); \ + if (window) { \ + double fudge_factor = \ + brave::BraveSessionCache::From(*(window->document())) \ + .GetFudgeFactor(); \ + for (unsigned i = 0; i < count; i++) { \ + dst[i] = dst[i] * fudge_factor; \ + } \ } #include "../../../../../../third_party/blink/renderer/modules/webaudio/audio_buffer.cc"