Messages in this thread | | | From | Jens Axboe <> | Subject | [GIT PULL] io_uring fixes for 5.6-rc | Date | Sat, 21 Mar 2020 12:38:34 -0600 |
| |
Hi Linus,
Two different fixes in here:
- Fix for a potential NULL pointer deref for links with async or drain marked (Pavel)
- Fix for not properly checking RLIMIT_NOFILE for async punted operations. This affects openat/openat2, which were added this cycle, and accept4. I did a full audit of other cases where we might check current->signal->rlim[] and found only RLIMIT_FSIZE for buffered writes and fallocate. That one is fixed and queued for 5.7 and marked stable.
Please pull!
git://git.kernel.dk/linux-block.git tags/io_uring-5.6-20200320
---------------------------------------------------------------- Jens Axboe (2): io_uring: make sure openat/openat2 honor rlimit nofile io_uring: make sure accept honor rlimit nofile
Pavel Begunkov (1): io_uring: NULL-deref for IOSQE_{ASYNC,DRAIN}
fs/file.c | 7 ++++++- fs/io_uring.c | 18 ++++++++++++++++-- include/linux/file.h | 1 + include/linux/socket.h | 3 ++- net/socket.c | 8 +++++--- 5 files changed, 30 insertions(+), 7 deletions(-)
-- Jens Axboe
| |