From 98dc5c67e9327d41e5f32dd351df618d5c29f92e Mon Sep 17 00:00:00 2001
From: Yury Popov <dev@syncleo-iot.com>
Date: Tue, 15 Nov 2022 09:51:55 +0300
Subject: [PATCH] klatt: fix logic error causes buffer overrun

---
 src/libespeak-ng/klatt.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/libespeak-ng/klatt.c b/src/libespeak-ng/klatt.c
index 0b601ff6..55d294f7 100644
--- a/src/libespeak-ng/klatt.c
+++ b/src/libespeak-ng/klatt.c
@@ -1013,7 +1013,7 @@ static void SetSynth_Klatt(int length, frame_t *fr1, frame_t *fr2, voice_t *wvoi
 	}
 
 	for (ix = 0; ix < N_KLATTP; ix++) {
-		if ((ix >= 5) && ((fr1->frflags & FRFLAG_KLATT) == 0)) {
+		if ((ix >= 5) || ((fr1->frflags & FRFLAG_KLATT) == 0)) {
 			klattp1[ix] = klattp[ix] = 0;
 			klattp_inc[ix] = 0;
 		} else {