Pavel Begunkov c21a8027ad io_uring/net: fix iter retargeting for selected buf ... When using selected buffer feature, io_uring delays data iter setup until later. If io_setup_async_msg() is called before that it might see not correctly setup iterator. Pre-init nr_segs and judge from its state whether we repointing. Cc: stable@vger.kernel.org Reported-by: syzbot+a4c6e5ef999b68b26ed1@syzkaller.appspotmail.com Fixes: 0455d4ccec ("io_uring: add POLL_FIRST support for send/sendmsg and recv/recvmsg") Signed-off-by: Pavel Begunkov <asml.silence@gmail.com> Link: https://lore.kernel.org/r/0000000000002770be06053c7757@google.com Signed-off-by: Jens Axboe <axboe@kernel.dk>		2023-09-14 10:12:55 -06:00
..
Makefile	…
advise.c	…
advise.h	…
alloc_cache.h	…
cancel.c	io_uring/cancel: wire up IORING_ASYNC_CANCEL_OP for sync cancel	2023-07-17 10:05:48 -06:00
cancel.h	io_uring/cancel: support opcode based lookup and cancelation	2023-07-17 10:05:48 -06:00
epoll.c	…
epoll.h	…
fdinfo.c	io_uring/fdinfo: only print ->sq_array[] if it's there	2023-09-01 15:08:29 -06:00
fdinfo.h	…
filetable.c	…
filetable.h	…
fs.c	…
fs.h	…
io-wq.c	io_uring: break out of iowq iopoll on teardown	2023-09-07 09:02:27 -06:00
io-wq.h	io_uring: break out of iowq iopoll on teardown	2023-09-07 09:02:27 -06:00
io_uring.c	Revert "io_uring: fix IO hang in io_wq_put_and_exit from do_exit()"	2023-09-07 09:41:49 -06:00
io_uring.h	io_uring: force inline io_fill_cqe_req	2023-08-24 17:16:19 -06:00
kbuf.c	io_uring: stop calling free_compound_page()	2023-08-21 14:28:42 -07:00
kbuf.h	…
msg_ring.c	…
msg_ring.h	…
net.c	io_uring/net: fix iter retargeting for selected buf	2023-09-14 10:12:55 -06:00
net.h	…
nop.c	…
nop.h	…
notif.c	…
notif.h	…
opdef.c	…
opdef.h	…
openclose.c	io_uring: correct check for O_TMPFILE	2023-08-07 12:34:23 -06:00
openclose.h	…
poll.c	io_uring: never overflow io_aux_cqe	2023-08-11 10:42:57 -06:00
poll.h	…
refs.h	…
rsrc.c	io_uring/rsrc: keep one global dummy_ubuf	2023-08-11 10:42:57 -06:00
rsrc.h	io_uring/rsrc: Annotate struct io_mapped_ubuf with __counted_by	2023-08-17 19:14:47 -06:00
rw.c	for-6.6/io_uring-2023-08-28	2023-08-29 20:11:33 -07:00
rw.h	…
slist.h	…
splice.c	io_uring/splice: use fput() directly	2023-08-10 10:24:25 -06:00
splice.h	…
sqpoll.c	io_uring: Don't set affinity on a dying sqpoll thread	2023-08-30 09:53:44 -06:00
sqpoll.h	io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used	2023-08-16 13:40:28 -06:00
statx.c	…
statx.h	…
sync.c	…
sync.h	…
tctx.c	…
tctx.h	…
timeout.c	io_uring: never overflow io_aux_cqe	2023-08-11 10:42:57 -06:00
timeout.h	…
uring_cmd.c	io_uring: simplify big_cqe handling	2023-08-24 17:16:19 -06:00
uring_cmd.h	…
xattr.c	…
xattr.h	…