kern: fix bug in ToMessageBuffer pointer transfer selection

This commit is contained in:
Michael Scire 2020-07-11 02:06:44 -07:00
parent 4a7ce9dd75
commit 3c8d8161cc

View file

@ -88,7 +88,7 @@ namespace ams::kern {
break;
case ipc::MessageBuffer::MessageHeader::ReceiveListCountType_ToMessageBuffer:
{
const uintptr_t buf = util::AlignUp(this->msg_buffer_end, PointerTransferBufferAlignment);
const uintptr_t buf = util::AlignUp(this->msg_buffer_end + key, PointerTransferBufferAlignment);
if ((buf < buf + size) && (buf + size <= this->msg_buffer_space_end)) {
out = buf;