io_uring: don't check unrelated req->open.how in accept request
authorJens Axboe <axboe@kernel.dk>
Mon, 14 Mar 2022 23:26:19 +0000 (17:26 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 8 Apr 2022 12:23:10 +0000 (14:23 +0200)
commit1323976e9448ace3af334235e4e0c1858119e782
tree3ff3e7c7084dda75a8ae75e4f4f4247d72e0afdc
parent657edec8987a1d2ce5adf52f9c73ed9e196f0b01
io_uring: don't check unrelated req->open.how in accept request

[ Upstream commit adf3a9e9f556613197583a1884f0de40a8bb6fb9 ]

Looks like a victim of too much copy/paste, we should not be looking
at req->open.how in accept. The point is to check CLOEXEC and error
out, which we don't invalid direct descriptors on exec. Hence any
attempt to get a direct descriptor with CLOEXEC is invalid.

No harm is done here, as req->open.how.flags overlaps with
req->accept.flags, but it's very confusing and might change if either of
those command structs are modified.

Fixes: aaa4db12ef7b ("io_uring: accept directly into fixed file table")
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/io_uring.c