Re: [syzbot] [kernel?] UBSAN: shift-out-of-bounds in pcl726_attach

From: Edward Adam Davis
Date: Sat Jul 05 2025 - 21:56:43 EST


#syz test

diff --git a/drivers/comedi/drivers/pcl726.c b/drivers/comedi/drivers/pcl726.c
index 0430630e6ebb..8802f33f1954 100644
--- a/drivers/comedi/drivers/pcl726.c
+++ b/drivers/comedi/drivers/pcl726.c
@@ -328,6 +328,9 @@ static int pcl726_attach(struct comedi_device *dev,
* Hook up the external trigger source interrupt only if the
* user config option is valid and the board supports interrupts.
*/
+ if (it->options[1] < 0 || it->options[1] > 31)
+ return -EINVAL;
+
if (it->options[1] && (board->irq_mask & (1 << it->options[1]))) {
ret = request_irq(it->options[1], pcl726_interrupt, 0,
dev->board_name, dev);