]> git.baikalelectronics.ru Git - kernel.git/commit
ALSA: fireface: Fix integer overflow in transmit_midi_msg()
authorGeert Uytterhoeven <geert+renesas@glider.be>
Mon, 11 Jan 2021 13:02:50 +0000 (14:02 +0100)
committerTakashi Iwai <tiwai@suse.de>
Tue, 12 Jan 2021 13:57:29 +0000 (14:57 +0100)
commit9317f937ca9baaeffdb479bd637a362e10cd95ed
treee6e4fa08c235fd927ac0faa8de70e35889a35ca8
parent1c8790709ce9591005478e754f7ff96893c9d7cd
ALSA: fireface: Fix integer overflow in transmit_midi_msg()

As snd_ff.rx_bytes[] is unsigned int, and NSEC_PER_SEC is 1000000000L,
the second multiplication in

    ff->rx_bytes[port] * 8 * NSEC_PER_SEC / 31250

always overflows on 32-bit platforms, truncating the result.  Fix this
by precalculating "NSEC_PER_SEC / 31250", which is an integer constant.

Note that this assumes ff->rx_bytes[port] <= 16777.

Fixes: 7e3b6af359ce3cb0 ("ALSA: fireface: add transaction support")
Reviewed-by: Takashi Sakamoto <o-takashi@sakamocchi.jp>
Signed-off-by: Geert Uytterhoeven <geert+renesas@glider.be>
Link: https://lore.kernel.org/r/20210111130251.361335-2-geert+renesas@glider.be
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/firewire/fireface/ff-transaction.c