[kdbus] KDBUS_ITEM_PAYLOAD_OFF items are (once again) relative to msg header

diff --git a/gio/gkdbus.c b/gio/gkdbus.c
index 1d6f4d1..2a68d40 100644 (file)
--- a/gio/gkdbus.c
+++ b/gio/gkdbus.c
@@ -1889,7 +1889,7 @@ g_kdbus_decode_dbus_msg (GKDBusWorker           *worker,
             flavour = body_size & 7;
             g_assert ((item->vec.offset & 7) == flavour);
 
             flavour = body_size & 7;
             g_assert ((item->vec.offset & 7) == flavour);
 

-            vector.gbytes = g_bytes_new (((guchar *) worker->kdbus_buffer) + item->vec.offset - flavour, item->vec.size + flavour);
+            vector.gbytes = g_bytes_new (((guchar *) msg) + item->vec.offset - flavour, item->vec.size + flavour);

             vector.data.pointer = g_bytes_get_data (vector.gbytes, NULL);
             vector.data.pointer += flavour;
             vector.size = item->vec.size;
             vector.data.pointer = g_bytes_get_data (vector.gbytes, NULL);
             vector.data.pointer += flavour;
             vector.size = item->vec.size;