Jens Axboe 02f444ba07 UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid ...

commit 7644b1a1c9 upstream.

We could race with SQ thread exit, and if we do, we'll hit a NULL pointer
dereference when the thread is cleared. Grab the SQPOLL data lock before
attempting to get the task cpu and pid for fdinfo, this ensures we have a
stable view of it.

Bug: 309790656
Cc: stable@vger.kernel.org
Link: https://bugzilla.kernel.org/show_bug.cgi?id=218032
Reviewed-by: Gabriel Krisman Bertazi <krisman@suse.de>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 9236d2ea64)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I044e0285d4535440606ff593230b873e3145db91

2024-01-08 17:33:38 +00:00

..

advise.c

io_uring: make io_kiocb_to_cmd() typesafe

2022-08-12 17:01:00 -06:00

advise.h

io_uring: split out fadvise/madvise operations

2022-07-24 18:39:11 -06:00

alloc_cache.h

io_uring: fix poll/netmsg alloc caches

2023-04-06 12:10:52 +02:00

cancel.c

io_uring/cancel: re-grab ctx mutex after finishing wait

2023-01-12 12:02:38 +01:00

cancel.h

io_uring: add sync cancelation API through io_uring_register()

2022-07-24 18:39:15 -06:00

epoll.c

io_uring: undeprecate epoll_ctl support

2023-06-09 10:34:23 +02:00

epoll.h

io_uring: move epoll handler to its own file

2022-07-24 18:39:11 -06:00

fdinfo.c

UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid

2024-01-08 17:33:38 +00:00

fdinfo.h

io_uring: move fdinfo helpers to its own file

2022-07-24 18:39:12 -06:00

filetable.c

io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get()

2023-03-30 12:49:25 +02:00

filetable.h

io_uring: kill hot path fixed file bitmap debug checks

2022-10-16 17:07:53 -06:00

fs.c

io_uring/fs: remove sqe->rw_flags checking from LINKAT

2023-10-06 14:57:02 +02:00

fs.h

…

io_uring.c

io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used

2023-09-19 12:27:54 +02:00

io_uring.h

io_uring: mark task TASK_RUNNING before handling resume/task work

2023-03-10 09:34:07 +01:00

io-wq.c

io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used

2023-09-19 12:27:54 +02:00

io-wq.h

io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used

2023-09-19 12:27:54 +02:00

kbuf.c

io_uring: fix memory leak when removing provided buffers

2023-04-13 16:55:31 +02:00

kbuf.h

io_uring: allow buffer recycling in READV

2022-09-21 10:30:43 -06:00

Makefile

io_uring: add zc notification infrastructure

2022-07-24 18:41:06 -06:00

msg_ring.c

io_uring/msg_ring: fix missing lock on overflow for IOPOLL

2023-08-30 16:11:05 +02:00

msg_ring.h

io_uring: get rid of double locking

2023-08-30 16:11:04 +02:00

net.c

io_uring/net: fix iter retargeting for selected buf

2023-09-23 11:11:10 +02:00

net.h

io_uring/net: zerocopy sendmsg

2022-09-21 13:15:02 -06:00

nop.c

io_uring: kill extra io_uring_types.h includes

2022-07-24 18:39:14 -06:00

nop.h

…

notif.c

io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag

2022-12-31 13:33:11 +01:00

notif.h

io_uring/net: introduce IORING_SEND_ZC_REPORT_USAGE flag

2022-12-31 13:33:11 +01:00

opdef.c

io_uring: get rid of double locking

2023-08-30 16:11:04 +02:00

opdef.h

io_uring: dont remove file from msg_ring reqs

2022-12-31 13:33:12 +01:00

openclose.c

io_uring: correct check for O_TMPFILE

2023-08-16 18:27:24 +02:00

openclose.h

io_uring: split out fixed file installation and removal

2022-07-24 18:39:16 -06:00

poll.c

io_uring: always lock in io_apoll_task_func

2023-09-19 12:27:54 +02:00

poll.h

io_uring/poll: allow some retries for poll triggering spuriously

2023-03-11 13:55:43 +01:00

refs.h

io_uring: make io_uring_types.h public

2022-07-24 18:39:14 -06:00

rsrc.c

io_uring/rsrc: use nospec'ed indexes

2023-05-11 23:03:24 +09:00

rsrc.h

io_uring/rsrc: fix rogue rsrc node grabbing

2023-04-06 12:10:51 +02:00

rw.c

use less confusing names for iov_iter direction initializers

2023-02-09 11:28:04 +01:00

rw.h

io_uring/rw: don't lose partial IO result on fail

2022-09-21 13:15:02 -06:00

slist.h

io_uring: move list helpers to a separate file

2022-07-24 18:39:15 -06:00

splice.c

io_uring: make io_kiocb_to_cmd() typesafe

2022-08-12 17:01:00 -06:00

splice.h

…

sqpoll.c

io_uring: Don't set affinity on a dying sqpoll thread

2023-09-19 12:27:54 +02:00

sqpoll.h

io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used

2023-09-19 12:27:54 +02:00

statx.c

io_uring: make io_kiocb_to_cmd() typesafe

2022-08-12 17:01:00 -06:00

statx.h

io_uring: move statx handling to its own file

2022-07-24 18:39:11 -06:00

sync.c

io_uring: make io_kiocb_to_cmd() typesafe

2022-08-12 17:01:00 -06:00

sync.h

io_uring: split out fs related sync/fallocate functions

2022-07-24 18:39:11 -06:00

tctx.c

io_uring: remove io_register_submitter

2022-10-07 12:25:30 -06:00

tctx.h

io_uring: simplify __io_uring_add_tctx_node

2022-10-07 12:25:30 -06:00

timeout.c

io_uring: annotate offset timeout races

2023-08-11 12:08:24 +02:00

timeout.h

io_uring: remove unused return from io_disarm_next

2022-09-21 13:15:01 -06:00

uring_cmd.c

block/io_uring: pass in issue_flags for uring_cmd task_work handling

2023-04-06 12:10:51 +02:00

uring_cmd.h

io_uring: move uring_cmd handling to its own file

2022-07-24 18:39:11 -06:00

xattr.c

__io_setxattr(): constify path

2022-09-01 17:39:05 -04:00

xattr.h

…