devdraw/OSX: correct access to reply buffer (fixes rpc tag crash)
diff --git a/src/cmd/devdraw/osx-srv.c b/src/cmd/devdraw/osx-srv.c
index 9329bc2..10baf0f 100644
--- a/src/cmd/devdraw/osx-srv.c
+++ b/src/cmd/devdraw/osx-srv.c
@@ -289,6 +289,7 @@
 /*
  * Reply to m.
  */
+QLock replylock;
 void
 replymsg(Wsysmsg *m)
 {
@@ -303,6 +304,8 @@
 	if(trace) fprint(2, "-> %W\n", m);
 	/* copy to output buffer */
 	n = sizeW2M(m);
+
+	qlock(&replylock);
 	if(n > nmbuf){
 		free(mbuf);
 		mbuf = malloc(n);
@@ -313,6 +316,7 @@
 	convW2M(m, mbuf, n);
 	if(write(4, mbuf, n) != n)
 		sysfatal("write: %r");
+	qunlock(&replylock);
 }
 
 /*