Messages in this thread Patch in this message | | | From | andrey.konovalov@linux ... | Subject | [PATCH mm 21/21] io_uring: use mempool KASAN hook | Date | Tue, 19 Dec 2023 23:29:05 +0100 |
| |
From: Andrey Konovalov <andreyknvl@google.com>
Use the proper kasan_mempool_unpoison_object hook for unpoisoning cached objects.
A future change might also update io_uring to check the return value of kasan_mempool_poison_object to prevent double-free and invalid-free bugs. This proves to be non-trivial with the current way io_uring caches objects, so this is left out-of-scope of this series.
Signed-off-by: Andrey Konovalov <andreyknvl@google.com> --- io_uring/alloc_cache.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/io_uring/alloc_cache.h b/io_uring/alloc_cache.h index 8de0414e8efe..bf2fb26a6539 100644 --- a/io_uring/alloc_cache.h +++ b/io_uring/alloc_cache.h @@ -33,7 +33,7 @@ static inline struct io_cache_entry *io_alloc_cache_get(struct io_alloc_cache *c struct io_cache_entry *entry; entry = container_of(cache->list.next, struct io_cache_entry, node); - kasan_unpoison_range(entry, cache->elem_size); + kasan_mempool_unpoison_object(entry, cache->elem_size); cache->list.next = cache->list.next->next; cache->nr_cached--; return entry; -- 2.25.1
| |