From: Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx> On Wed, 13 Aug 2025 08:38:27 +0300, Dan Carpenter wrote: > The "> chip->ngpio" comparison here needs to be ">= chip->ngpio", > otherwise it leads to an out of bounds access. The fwd->valid_mask > bitmap only has chip->ngpio bits and the fwd->descs[] array has that > same number of elements. These values are set in > devm_gpiochip_fwd_alloc(). > > > [...] Applied, thanks! [1/1] gpio: aggregator: Fix off by one in gpiochip_fwd_desc_add() https://git.kernel.org/brgl/linux/c/148547000cfc1ba8cec02857268333d08724b9cc Best regards, -- Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>