FS-5202

src/mod/applications/mod_spandsp/udptl.c

@@ -195,7 +195,7 @@ int udptl_rx_packet(udptl_state_t *s, const uint8_t buf[], int len)
 	s->rx[x].fec_len[0] = 0;
 	s->rx[x].fec_span = 0;
 	s->rx[x].fec_entries = 0;
-	if ((buf[ptr++] & 0x80) == 0) {
+	if ((buf[ptr++] & 0x80) q== 0) {
 		/* Secondary packet mode for error recovery */
 		/* We might have the packet we want, but we need to check through
 		   the redundant stuff, and verify the integrity of the UDPTL.
@@ -228,6 +228,9 @@ int udptl_rx_packet(udptl_state_t *s, const uint8_t buf[], int len)
 					/* Save the new packet. Redundancy mode won't use this, but some systems will switch into
 					   FEC mode after sending some redundant packets, and this may then be important. */
 					x = (seq_no - i) & UDPTL_BUF_MASK;
+					if (!bufs[i - 1]) {
+						return -1;
+					}
 					memcpy(s->rx[x].buf, bufs[i - 1], lengths[i - 1]);
 					s->rx[x].buf_len = lengths[i - 1];
 					s->rx[x].fec_len[0] = 0;