commit 93797d87d63d36404907640e4e20bb976bff4744
author Rob Herring <rob.herring@calxeda.com> Mon Dec 12 09:59:14 2011 -0600
committer Rob Herring <rob.herring@calxeda.com> Wed Dec 28 08:26:06 2011 -0600
tree b77b8c98e7fe64b05eada97ba8c0418ac2115c64
parent 3ecdd0515287afbcde352077d59e4028dcfbb685

irq: check domain hwirq range for DT translate

A DT node may have more than 1 domain associated with it, so make sure
the hwirq number is within range when doing DT translation.

Signed-off-by: Rob Herring <rob.herring@calxeda.com>
Acked-by: Grant Likely <grant.likely@secretlab.ca>
Acked-by: Shawn Guo <shawn.guo@linaro.org>
Cc: Thomas Gleixner <tglx@linutronix.de>

kernel/irq/irqdomain.c

diff --git a/kernel/irq/irqdomain.c b/kernel/irq/irqdomain.c
index 200ce83..8bd7479 100644
--- a/kernel/irq/irqdomain.c
+++ b/kernel/irq/irqdomain.c
@@ -135,6 +135,9 @@
 		return -EINVAL;
 	if (intsize < 1)
 		return -EINVAL;
+	if (d->nr_irq && ((intspec[0] < d->hwirq_base) ||
+	    (intspec[0] >= d->hwirq_base + d->nr_irq)))
+		return -EINVAL;
 
 	*out_hwirq = intspec[0];
 	*out_type = IRQ_TYPE_NONE;