Solaris xf86OSRingBell() off-by-one error in filling iov[] array
When generating sound buffers for /dev/audio bells, insert waveform for beep *or* silence, but not both, so we don't write one entry past the end of the iov buffer when the final bit of soundwave ends up in the final entry allocated in the iov array. Fixes OpenSolaris bug 6894890: http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6894890 Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com> Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net> Acked-by: Adam Jackson <ajax@redhat.com> Signed-off-by: Keith Packard <keithp@keithp.com>
This commit is contained in:
parent
2d40f22d1e
commit
be96fb2f02
@ -126,14 +126,15 @@ xf86OSRingBell(int loudness, int pitch, int duration)
|
||||
iovcnt = 0;
|
||||
|
||||
for (cnt = 0; cnt <= repeats; cnt++) {
|
||||
iov[iovcnt].iov_base = (char *) samples;
|
||||
iov[iovcnt++].iov_len = sizeof(samples);
|
||||
if (cnt == repeats) {
|
||||
/* Insert a bit of silence so that multiple beeps are distinct and
|
||||
* not compressed into a single tone.
|
||||
*/
|
||||
iov[iovcnt].iov_base = (char *) silence;
|
||||
iov[iovcnt++].iov_len = sizeof(silence);
|
||||
} else {
|
||||
iov[iovcnt].iov_base = (char *) samples;
|
||||
iov[iovcnt++].iov_len = sizeof(samples);
|
||||
}
|
||||
if ((iovcnt >= IOV_MAX) || (cnt == repeats)) {
|
||||
written = writev(audioFD, iov, iovcnt);
|
||||
|
Loading…
Reference in New Issue
Block a user