shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-03-24 19:40:21 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
60db638be5f4eb6cecb1de86c545008784ccd749
linux/io_uring
History
Gabriel Krisman Bertazi 60db638be5 io_uring/kbuf: Fix check of BID wrapping in provided buffers 
[ Upstream commit ab69838e7c75b0edb699c1a8f42752b30333c46f ]

Commit 3851d25c75 ("io_uring: check for rollover of buffer ID when
providing buffers") introduced a check to prevent wrapping the BID
counter when sqe->off is provided, but it's off-by-one too
restrictive, rejecting the last possible BID (65534).

i.e., the following fails with -EINVAL.

     io_uring_prep_provide_buffers(sqe, addr, size, 0xFFFF, 0, 0);

Fixes: 3851d25c75 ("io_uring: check for rollover of buffer ID when providing buffers")
Signed-off-by: Gabriel Krisman Bertazi <krisman@suse.de>
Link: https://lore.kernel.org/r/20231005000531.30800-2-krisman@suse.de
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-11-20 11:52:00 +01:00
..
advise.c
io_uring: make io_kiocb_to_cmd() typesafe
2022-08-12 17:01:00 -06:00
advise.h
io_uring: split out fadvise/madvise operations
2022-07-24 18:39:11 -06:00
alloc_cache.h
io_uring: fix poll/netmsg alloc caches
2023-04-06 12:10:52 +02:00
cancel.c
io_uring/cancel: re-grab ctx mutex after finishing wait
2023-01-12 12:02:38 +01:00
cancel.h
io_uring: add sync cancelation API through io_uring_register()
2022-07-24 18:39:15 -06:00
epoll.c
io_uring: undeprecate epoll_ctl support
2023-06-09 10:34:23 +02:00
epoll.h
io_uring: move epoll handler to its own file
2022-07-24 18:39:11 -06:00
fdinfo.c
io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
2023-11-02 09:35:29 +01:00
fdinfo.h
io_uring: move fdinfo helpers to its own file
2022-07-24 18:39:12 -06:00
filetable.c
io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get()
2023-03-30 12:49:25 +02:00
filetable.h
io_uring: kill hot path fixed file bitmap debug checks
2022-10-16 17:07:53 -06:00
fs.c
io_uring/fs: remove sqe->rw_flags checking from LINKAT
2023-10-06 14:57:02 +02:00
fs.h
io_uring: split out filesystem related operations
2022-07-24 18:39:11 -06:00
io_uring.c
io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
2023-09-19 12:27:54 +02:00
io_uring.h
io_uring: mark task TASK_RUNNING before handling resume/task work
2023-03-10 09:34:07 +01:00
io-wq.c
io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
2023-09-19 12:27:54 +02:00
io-wq.h
io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
2023-09-19 12:27:54 +02:00
kbuf.c
io_uring/kbuf: Fix check of BID wrapping in provided buffers
2023-11-20 11:52:00 +01:00
kbuf.h
io_uring: allow buffer recycling in READV
2022-09-21 10:30:43 -06:00
Makefile
io_uring: add zc notification infrastructure
2022-07-24 18:41:06 -06:00
msg_ring.c
io_uring/msg_ring: fix missing lock on overflow for IOPOLL
2023-08-30 16:11:05 +02:00
msg_ring.h
io_uring: get rid of double locking
2023-08-30 16:11:04 +02:00
net.c
io_uring/net: fix iter retargeting for selected buf
2023-09-23 11:11:10 +02:00
net.h
io_uring/net: zerocopy sendmsg
2022-09-21 13:15:02 -06:00
nop.c
io_uring: kill extra io_uring_types.h includes
2022-07-24 18:39:14 -06:00
nop.h
io_uring: move nop into its own file
2022-07-24 18:39:11 -06:00
notif.c
io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag
2022-12-31 13:33:11 +01:00
notif.h
io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag
2022-12-31 13:33:11 +01:00
opdef.c
io_uring: get rid of double locking
2023-08-30 16:11:04 +02:00
opdef.h
io_uring: dont remove file from msg_ring reqs
2022-12-31 13:33:12 +01:00
openclose.c
io_uring: correct check for O_TMPFILE
2023-08-16 18:27:24 +02:00
openclose.h
io_uring: split out fixed file installation and removal
2022-07-24 18:39:16 -06:00
poll.c
io_uring: always lock in io_apoll_task_func
2023-09-19 12:27:54 +02:00
poll.h
io_uring/poll: allow some retries for poll triggering spuriously
2023-03-11 13:55:43 +01:00
refs.h
io_uring: make io_uring_types.h public
2022-07-24 18:39:14 -06:00
rsrc.c
io_uring/rsrc: use nospec'ed indexes
2023-05-11 23:03:24 +09:00
rsrc.h
io_uring/rsrc: fix rogue rsrc node grabbing
2023-04-06 12:10:51 +02:00
rw.c
io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed
2023-11-08 14:11:02 +01:00
rw.h
io_uring/rw: don't lose partial IO result on fail
2022-09-21 13:15:02 -06:00
slist.h
io_uring: move list helpers to a separate file
2022-07-24 18:39:15 -06:00
splice.c
io_uring: make io_kiocb_to_cmd() typesafe
2022-08-12 17:01:00 -06:00
splice.h
io_uring: split out splice related operations
2022-07-24 18:39:11 -06:00
sqpoll.c
io_uring: Don't set affinity on a dying sqpoll thread
2023-09-19 12:27:54 +02:00
sqpoll.h
io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used
2023-09-19 12:27:54 +02:00
statx.c
io_uring: make io_kiocb_to_cmd() typesafe
2022-08-12 17:01:00 -06:00
statx.h
io_uring: move statx handling to its own file
2022-07-24 18:39:11 -06:00
sync.c
io_uring: make io_kiocb_to_cmd() typesafe
2022-08-12 17:01:00 -06:00
sync.h
io_uring: split out fs related sync/fallocate functions
2022-07-24 18:39:11 -06:00
tctx.c
io_uring: remove io_register_submitter
2022-10-07 12:25:30 -06:00
tctx.h
io_uring: simplify __io_uring_add_tctx_node
2022-10-07 12:25:30 -06:00
timeout.c
io_uring: annotate offset timeout races
2023-08-11 12:08:24 +02:00
timeout.h
io_uring: remove unused return from io_disarm_next
2022-09-21 13:15:01 -06:00
uring_cmd.c
block/io_uring: pass in issue_flags for uring_cmd task_work handling
2023-04-06 12:10:51 +02:00
uring_cmd.h
io_uring: move uring_cmd handling to its own file
2022-07-24 18:39:11 -06:00
xattr.c
__io_setxattr(): constify path
2022-09-01 17:39:05 -04:00
xattr.h
io_uring: move xattr related opcodes to its own file
2022-07-24 18:39:11 -06:00