kern: fix bug in ToMessageBuffer pointer transfer selection

This commit is contained in:
Michael Scire 2020-07-11 02:06:44 -07:00
parent 5d3f416451
commit 756bc0e52e

View File

@ -88,7 +88,7 @@ namespace ams::kern {
break;
case ipc::MessageBuffer::MessageHeader::ReceiveListCountType_ToMessageBuffer:
{
const uintptr_t buf = util::AlignUp(this->msg_buffer_end, PointerTransferBufferAlignment);
const uintptr_t buf = util::AlignUp(this->msg_buffer_end + key, PointerTransferBufferAlignment);
if ((buf < buf + size) && (buf + size <= this->msg_buffer_space_end)) {
out = buf;