Jens Axboe 3851d25c75 io_uring: check for rollover of buffer ID when providing buffers ... We already check if the chosen starting offset for the buffer IDs fit within an unsigned short, as 65535 is the maximum value for a provided buffer. But if the caller asks to add N buffers at offset M, and M + N would exceed the size of the unsigned short, we simply add buffers with wrapping around the ID. This is not necessarily a bug and could in fact be a valid use case, but it seems confusing and inconsistent with the initial check for starting offset. Let's check for wrap consistently, and error the addition if we do need to wrap. Reported-by: Olivier Langlois <olivier@trillion01.com> Link: https://github.com/axboe/liburing/issues/726 Cc: stable@vger.kernel.org Signed-off-by: Jens Axboe <axboe@kernel.dk>		2022-11-10 11:07:41 -07:00
..
advise.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
advise.h
alloc_cache.h
cancel.c	io_uring: add IORING_SETUP_DEFER_TASKRUN	2022-09-21 10:30:42 -06:00
cancel.h
epoll.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
epoll.h
fdinfo.c	io_uring: fix fdinfo sqe offsets calculation	2022-10-12 16:30:56 -06:00
fdinfo.h
filetable.c
filetable.h	io_uring: kill hot path fixed file bitmap debug checks	2022-10-16 17:07:53 -06:00
fs.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
fs.h
io-wq.c	io-wq: Fix memory leak in worker creation	2022-10-20 05:48:59 -07:00
io-wq.h
io_uring.c	io_uring: calculate CQEs from the user visible value	2022-11-08 10:36:15 -07:00
io_uring.h	io_uring: unlock if __io_run_local_work locked inside	2022-10-27 09:52:12 -06:00
kbuf.c	io_uring: check for rollover of buffer ID when providing buffers	2022-11-10 11:07:41 -07:00
kbuf.h	io_uring: allow buffer recycling in READV	2022-09-21 10:30:43 -06:00
Makefile
msg_ring.c	io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()	2022-10-19 12:33:33 -07:00
msg_ring.h
net.c	io_uring/net: fail zc sendmsg when unsupported by socket	2022-10-22 08:43:03 -06:00
net.h	io_uring/net: zerocopy sendmsg	2022-09-21 13:15:02 -06:00
nop.c
nop.h
notif.c	io_uring/notif: Remove the unused function io_notif_complete()	2022-09-05 11:42:39 -06:00
notif.h	io_uring/net: simplify zerocopy send user API	2022-09-01 09:13:33 -06:00
opdef.c	io_uring/opdef: remove 'audit_skip' from SENDMSG_ZC	2022-10-12 16:30:56 -06:00
opdef.h	io_uring: add custom opcode hooks on fail	2022-09-21 13:15:02 -06:00
openclose.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
openclose.h
poll.c	io_uring/poll: disable level triggered poll	2022-09-28 19:27:11 -06:00
poll.h
refs.h
rsrc.c	io_uring: remove FFS_SCM	2022-10-16 17:07:12 -06:00
rsrc.h	io_uring: remove FFS_SCM	2022-10-16 17:07:12 -06:00
rw.c	io_uring/rw: remove leftover debug statement	2022-10-16 17:24:10 -06:00
rw.h	io_uring/rw: don't lose partial IO result on fail	2022-09-21 13:15:02 -06:00
slist.h
splice.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
splice.h
sqpoll.c
sqpoll.h
statx.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
statx.h
sync.c	io_uring: make io_kiocb_to_cmd() typesafe	2022-08-12 17:01:00 -06:00
sync.h
tctx.c	io_uring: remove io_register_submitter	2022-10-07 12:25:30 -06:00
tctx.h	io_uring: simplify __io_uring_add_tctx_node	2022-10-07 12:25:30 -06:00
timeout.c	io_uring: remove unused return from io_disarm_next	2022-09-21 13:15:01 -06:00
timeout.h	io_uring: remove unused return from io_disarm_next	2022-09-21 13:15:01 -06:00
uring_cmd.c	io_uring: introduce fixed buffer support for io_uring_cmd	2022-09-30 07:50:59 -06:00
uring_cmd.h
xattr.c	__io_setxattr(): constify path	2022-09-01 17:39:05 -04:00
xattr.h