[PATCH 0/2] irqchip: crossbar: fix out-of-bounds access and resource leak
From: Bhargav Joshi
Date: Tue Jun 09 2026 - 17:00:39 EST
This series fixes two bugs in the TI irq-crossbar driver. These bugs
were recently flagged by the Sashiko AI bot during the review process
for the DT schema conversion of ti,irq-crossbar binding.
https://lore.kernel.org/linux-devicetree/20260605210647.CCC881F00893@xxxxxxxxxxxxxxx/
patch 1:
fixes crossbar_domain_free() uses crossbar source index as the index for
cb->irq_map and cb->write(), rather than the GIC SPI index. This can
cause out of out-of-bounds write. but irq_domain_reset_irq_data() which
zeros d->hwirq is called before d->hwirq is read. subsequent accesses
use hwirq=0 which is always in-bounds but writes to the wrong slot.
patch 2:
fixes A resource leak where `irq_domain_free_irqs_parent()` was never
called.
Signed-off-by: Bhargav Joshi <j.bhargav.u@xxxxxxxxx>
---
Bhargav Joshi (2):
irqchip: crossbar: Fix out-of-bounds access in crossbar_domain_free()
irqchip: crossbar: Fix parent domain resource leak
drivers/irqchip/irq-crossbar.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
---
base-commit: 2d3090a8aeb596a26935db0955d46c9a5db5c6ce
change-id: 20260609-irq-crossbar-fix-43a7df653c6c
Best regards,
--
Bhargav