drivers/gpio: ite: Validate num_pins to prevent untrusted loop bound
Added a build assert to limit num_pins to a maximum allowable value to
prevent potential out-of-bounds access or infinite loops.
Signed-off-by: Tim Lin <tim2.lin@ite.corp-partner.google.com>
diff --git a/drivers/gpio/gpio_ite_it8xxx2_v2.c b/drivers/gpio/gpio_ite_it8xxx2_v2.c
index 79784ad..3a1b04c 100644
--- a/drivers/gpio/gpio_ite_it8xxx2_v2.c
+++ b/drivers/gpio/gpio_ite_it8xxx2_v2.c
@@ -27,6 +27,8 @@
LOG_MODULE_REGISTER(gpio_it8xxx2, LOG_LEVEL_ERR);
+#define ITE_GPIO_MAX_PINS 8
+
/*
* Structure gpio_ite_cfg is about the setting of GPIO
* this config will be used at initial time
@@ -530,6 +532,8 @@
}
#define GPIO_ITE_DEV_CFG_DATA(inst) \
+ BUILD_ASSERT(DT_INST_PROP(inst, ngpios) <= ITE_GPIO_MAX_PINS, \
+ "The maximum number of pins per port is 8."); \
static struct gpio_ite_data gpio_ite_data_##inst; \
static const struct gpio_ite_cfg gpio_ite_cfg_##inst = { \
.common = {.port_pin_mask = GPIO_PORT_PIN_MASK_FROM_DT_INST(inst)}, \
