# DF-2098 — ar5416 GPIO index unvalidated (HALASSERT compiled out)

## Verdict
REPRODUCED (source-only confirmation). Bug confirmed by source tracing.

## Mechanism
ar5416GpioCfgOutput/Input/Set/SetIntr (ar5416_gpio.c) validate gpio only with HALASSERT (ah_internal.h:665-676) which is empty unless AH_ASSERT defined. Production builds have no validation. gpio_shift=gpio<<1 with large gpio -> UB shift / OOB register access.

## Fix
Add runtime bounds check: if (gpio >= halNumGpioPins) return AH_FALSE; (or return for void function).

## Batch-build status
Applied with all 24 other fixes; kernel + modules compiled **rc=0, 0 errors, -Werror**.