From: Peter Maydell <peter.maydell@linaro.org>
To: qemu-arm@nongnu.org, qemu-devel@nongnu.org
Subject: [PATCH] hw/audio/lm4549: Don't try to open a zero-frequency audio voice
Date: Fri, 7 Nov 2025 15:41:16 +0000 [thread overview]
Message-ID: <20251107154116.1396769-1-peter.maydell@linaro.org> (raw)
If the guest incorrectly programs the lm4549 audio chip with a zero
frequency, we will pass this to AUD_open_out(), which will complain:
A bug was just triggered in AUD_open_out
Save all your work and restart without audio
I am sorry
Context:
audio: frequency=0 nchannels=2 fmt=S16 endianness=little
The datasheet doesn't say what we should do here, only that the valid
range for the freqency is 8000 to 48000 Hz; we choose to log the
guest error and ignore an attempt to change the DAC rate to something
outside the valid range.
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/410
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
---
This bug has been around for so long and is a weird edge case whose
only effect is to print a debug message, so it doesn't really seem
worth cc'ing stable on.
---
hw/audio/lm4549.c | 17 ++++++++++++++++-
1 file changed, 16 insertions(+), 1 deletion(-)
diff --git a/hw/audio/lm4549.c b/hw/audio/lm4549.c
index 745441bd790..bf711c49c04 100644
--- a/hw/audio/lm4549.c
+++ b/hw/audio/lm4549.c
@@ -15,6 +15,7 @@
#include "qemu/osdep.h"
#include "hw/hw.h"
+#include "qemu/log.h"
#include "qemu/audio.h"
#include "lm4549.h"
#include "migration/vmstate.h"
@@ -179,9 +180,23 @@ void lm4549_write(lm4549_state *s,
break;
case LM4549_PCM_Front_DAC_Rate:
- regfile[LM4549_PCM_Front_DAC_Rate] = value;
DPRINTF("DAC rate change = %i\n", value);
+ /*
+ * Valid sample rates are 4kHz to 48kHz.
+ * The datasheet doesn't say what happens if you try to
+ * set the frequency to zero. AUD_open_out() will print
+ * a bug message if we pass it a zero frequency, so just
+ * ignore attempts to set the DAC frequency to zero.
+ */
+ if (value < 4000 || value > 48000) {
+ qemu_log_mask(LOG_GUEST_ERROR,
+ "%s: DAC sample rate %d Hz is invalid, ignoring it\n",
+ __func__, value);
+ break;
+ }
+ regfile[LM4549_PCM_Front_DAC_Rate] = value;
+
/* Re-open a voice with the new sample rate */
struct audsettings as;
as.freq = value;
--
2.43.0
next reply other threads:[~2025-11-07 15:41 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-11-07 15:41 Peter Maydell [this message]
2025-11-08 0:22 ` [PATCH] hw/audio/lm4549: Don't try to open a zero-frequency audio voice BALATON Zoltan
2025-11-08 10:48 ` Peter Maydell
2025-11-09 10:45 ` Philippe Mathieu-Daudé
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20251107154116.1396769-1-peter.maydell@linaro.org \
--to=peter.maydell@linaro.org \
--cc=qemu-arm@nongnu.org \
--cc=qemu-devel@nongnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).