The ECM calculates a peak value of an in-cylinder pressure before ignition based on the operating state of the hydrogen engine. When the peak value of the in-cylinder pressure before ignition exceeds a threshold value, the ECM performs an advancement correction of the ignition timing such that the peak value becomes less than or equal to the threshold value.