From 06c8a9ed0b1a01343d21859bff22ae67f4b29021 Mon Sep 17 00:00:00 2001 From: Eric Wong Date: Tue, 14 Oct 2008 11:10:00 +0200 Subject: {dir,song}vec: fix off-by-one errors in {dir,song}vec_delete Found by Valgrind while looking for another bug... Hmm.. I should really just make this code generic since they're duplicated... --- src/songvec.c | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) (limited to 'src/songvec.c') diff --git a/src/songvec.c b/src/songvec.c index 80954643e..a62c6e671 100644 --- a/src/songvec.c +++ b/src/songvec.c @@ -47,28 +47,27 @@ songvec_find(const struct songvec *sv, const char *url) int songvec_delete(struct songvec *sv, const struct song *del) { - int i; + size_t i; pthread_mutex_lock(&nr_lock); - for (i = sv->nr; --i >= 0; ) { + for (i = 0; i < sv->nr; ++i) { if (sv->base[i] != del) continue; /* we _don't_ call song_free() here */ if (!--sv->nr) { - pthread_mutex_unlock(&nr_lock); free(sv->base); sv->base = NULL; - return i; } else { memmove(&sv->base[i], &sv->base[i + 1], - (sv->nr - i + 1) * sizeof(struct song *)); + (sv->nr - i) * sizeof(struct song *)); sv->base = xrealloc(sv->base, sv_size(sv)); } - break; + pthread_mutex_unlock(&nr_lock); + return i; } pthread_mutex_unlock(&nr_lock); - return i; + return -1; /* not found */ } void -- cgit v1.2.3