commit 6d91ba5028dd1ab7870ac3c71fa870c50adadb08
author Mikhail Naganov <mnaganov@google.com> Tue Mar 26 14:35:28 2019 -0700
committer Mikhail Naganov <mnaganov@google.com> Tue Mar 26 22:16:28 2019 +0000
tree 972200d79d9d573f6d5da145ffb87fa3af3fd819
parent 6a91f7cf52fe6f02f88b1fc6461be8133c97d5ed

audioflinger: Fix unsigned integer overflow in RecordThread

Bug: 129159931
Test: atest CtsMediaTestCases:AudioRecordTest
  on cuttlefish

Change-Id: I87b72d6d98806327278b80d0a4765f7bed9ce2a7

services/audioflinger/Threads.cpp

diff --git a/services/audioflinger/Threads.cpp b/services/audioflinger/Threads.cpp
index e94fb49..984d9fe 100644
--- a/services/audioflinger/Threads.cpp
+++ b/services/audioflinger/Threads.cpp
@@ -7245,7 +7245,7 @@
                 } else {
                     // FIXME could do a partial drop of framesOut
                     if (activeTrack->mFramesToDrop > 0) {
-                        activeTrack->mFramesToDrop -= framesOut;
+                        activeTrack->mFramesToDrop -= (ssize_t)framesOut;
                         if (activeTrack->mFramesToDrop <= 0) {
                             activeTrack->clearSyncStartEvent();
                         }