]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d79d16b) | patch
io_uring: fix a use after free in io_async_task_func()
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 8 Jul 2020 18:47:11 +0000 (21:47 +0300)
committerJens Axboe <axboe@kernel.dk>
Wed, 8 Jul 2020 19:15:04 +0000 (13:15 -0600)
commit18058ed3e0bff4d5d7635cca48e8b83b7a390a7b
treea3e80c1d69261f0debc3c31188f79164ff9f124ctree | snapshot
parentd79d16bbd25031869f893ba73d3e5ab3c1b8b021commit | diff
io_uring: fix a use after free in io_async_task_func()

The "apoll" variable is freed and then used on the next line.  We need
to move the free down a few lines.

Fixes: 68ffcfd34d16 ("io_uring: simplify io_async_task_func()")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c diff | blob | history
Linux Kernel Source Tree.