]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9598534) | patch
io_uring: fix ->work corruption with poll_add
authorPavel Begunkov <asml.silence@gmail.com>
Fri, 24 Jul 2020 17:07:20 +0000 (20:07 +0300)
committerJens Axboe <axboe@kernel.dk>
Fri, 24 Jul 2020 18:51:33 +0000 (12:51 -0600)
commit48cdad08ca06839132a7d24e2f01a781e885c777
treeb386921fbd47c05693f732e95f19f90822d50805tree | snapshot
parent9598534a56bd0ea94f1798017a7c5b004130698bcommit | diff
io_uring: fix ->work corruption with poll_add

req->work might be already initialised by the time it gets into
__io_arm_poll_handler(), which will corrupt it by using fields that are
in an union with req->work. Luckily, the only side effect is missing
put_creds(). Clean req->work before going there.

Suggested-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c diff | blob | history
Linux Kernel Source Tree.