diff options
| author | Gerd Hoffmann | 2017-05-15 12:45:43 +0200 |
|---|---|---|
| committer | Gerd Hoffmann | 2017-05-29 14:03:35 +0200 |
| commit | 3ae7eb88c472799f17beb653f4bc3fb8b124c72e (patch) | |
| tree | 9008a0b5ec8a6829cdb6ba6e9a50a0355d49b05c /hw | |
| parent | Merge remote-tracking branch 'jasowang/tags/net-pull-request' into staging (diff) | |
| download | qemu-3ae7eb88c472799f17beb653f4bc3fb8b124c72e.tar.gz qemu-3ae7eb88c472799f17beb653f4bc3fb8b124c72e.tar.xz qemu-3ae7eb88c472799f17beb653f4bc3fb8b124c72e.zip | |
ehci: fix overflow in frame timer code
In case the frame timer doesn't run for a while due to the host being
busy skipped_uframes can become big enough that UFRAME_TIMER_NS *
skipped_uframes overflows. Which in turn throws off all subsequent
ehci frame timer calculations.
Reported-by: 李林 <8610_28@163.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
Message-id: 20170515104543.32044-1-kraxel@redhat.com
Diffstat (limited to 'hw')
| -rw-r--r-- | hw/usb/hcd-ehci.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/usb/hcd-ehci.c b/hw/usb/hcd-ehci.c index 50ef817f93..d7361e570f 100644 --- a/hw/usb/hcd-ehci.c +++ b/hw/usb/hcd-ehci.c @@ -2238,7 +2238,7 @@ static void ehci_frame_timer(void *opaque) int need_timer = 0; int64_t expire_time, t_now; uint64_t ns_elapsed; - int uframes, skipped_uframes; + uint64_t uframes, skipped_uframes; int i; t_now = qemu_clock_get_ns(QEMU_CLOCK_VIRTUAL); |