[PATCH v1] ufs: host: mediatek: Fix out-of-bounds access in MCQ IRQ mapping

[peter.wang at mediatek.com]

From: Peter Wang <peter.wang at mediatek.com>

This patch addresses a potential out-of-bounds access issue when
accessing 'host->mcq_intr_info[q_index]'. The value of 'q_index'
might exceed the valid array bounds if 'q_index == nr'.
The condition is corrected to 'q_index >= nr' to prevent
accessing invalid memory.

Fixes: 66e26a4b8a77 ("scsi: ufs: host: mediatek: Set IRQ affinity policy for MCQ mode")
Cc: <stable at vger.kernel.org>
Reported-by: Dan Carpenter <dan.carpenter at linaro.org>
Signed-off-by: Peter Wang <peter.wang at mediatek.com>
---
 drivers/ufs/host/ufs-mediatek.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/ufs/host/ufs-mediatek.c b/drivers/ufs/host/ufs-mediatek.c
index 86ae73b89d4d..f902ce08c95a 100644
--- a/drivers/ufs/host/ufs-mediatek.c
+++ b/drivers/ufs/host/ufs-mediatek.c
@@ -818,7 +818,7 @@ static u32 ufs_mtk_mcq_get_irq(struct ufs_hba *hba, unsigned int cpu)
 	unsigned int q_index;
 
 	q_index = map->mq_map[cpu];
-	if (q_index > nr) {
+	if (q_index >= nr) {
 		dev_err(hba->dev, "hwq index %d exceed %d\n",
 			q_index, nr);
 		return MTK_MCQ_INVALID_IRQ;
-- 
2.45.2