[PATCH] lib: utils/irqchip: plic: Fix the off-by-one error in priority save/restore helpers

[Bin Meng]

On 2022/11/28 21:36:24, "Andreas Schwab" <schwab at suse.de> wrote:

>On Nov 28 2022, Bin Meng wrote:
>
>>  diff --git a/lib/utils/irqchip/plic.c b/lib/utils/irqchip/plic.c
>>  index 73d7788..4df9020 100644
>>  --- a/lib/utils/irqchip/plic.c
>>  +++ b/lib/utils/irqchip/plic.c
>>  @@ -38,13 +38,13 @@ static void plic_set_priority(const struct plic_data *plic, u32 source, u32 val)
>>
>>   void plic_priority_save(const struct plic_data *plic, u8 *priority)
>>   {
>>  -	for (u32 i = 0; i < plic->num_src; i++)
>>  +	for (u32 i = 1; i <= plic->num_src; i++)
>>   		priority[i] = plic_get_priority(plic, i);
>
>That requires updating the size of the priority array.
These 2 APIs are really poorly designed. The index to the priority array 
is controlled by plic->num_src which comes from DTS, so there is 
potentially a mismatch between the DTS property value and the size of 
the priority array.

Currently the only user of these 2 APIs in OpenSBI is D1 and the size of 
the priority array is set to 176. There is no problem if DTS provides a 
less than 176 value. Otherwise it can cause out-of-bound access in 
OpenSBI.

Regards,
Bin