Message ID | 8893a235-66a8-8fbe-7d95-862e29da90b1@t-online.de (mailing list archive) |
---|---|
State | New, archived |
Headers | show |
Series | audio: fix integer overflow | expand |
diff --git a/audio/audio.c b/audio/audio.c index 56fae55047..abea027fdf 100644 --- a/audio/audio.c +++ b/audio/audio.c @@ -1738,7 +1738,7 @@ static AudioState *audio_init(Audiodev *dev, const char *name) if (dev->timer_period <= 0) { s->period_ticks = 1; } else { - s->period_ticks = dev->timer_period * SCALE_US; + s->period_ticks = dev->timer_period * (int64_t)SCALE_US; } e = qemu_add_vm_change_state_handler (audio_vm_change_state_handler, s);
Tell the compiler to do a 32bit * 32bit -> 64bit multiplication because period_ticks is a 64bit variable. The overflow occurs for audio timer periods larger than 4294967us. Fixes: be1092afa0 "audio: fix audio timer rate conversion bug" Signed-off-by: Volker RĂ¼melin <vr_qemu@t-online.de> --- audio/audio.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)