projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e1d0c6d) | patch
io_uring: fix off-by-one in sync cancelation file check
authorJens Axboe <axboe@kernel.dk>
Tue, 23 Aug 2022 13:26:08 +0000 (07:26 -0600)
committerJens Axboe <axboe@kernel.dk>
Tue, 23 Aug 2022 13:26:08 +0000 (07:26 -0600)
commit47abea041f897d64dbd5777f0cf7745148f85d75
tree12da1cc86a67e9ae113af1f5942a5a72e8765fc5tree | snapshot
parente1d0c6d05afdcff01ace698edb3b8808db1dc066commit | diff
io_uring: fix off-by-one in sync cancelation file check

The passed in index should be validated against the number of registered
files we have, it needs to be smaller than the index value to avoid going
one beyond the end.

Fixes: 78a861b94959 ("io_uring: add sync cancelation API through io_uring_register()")
Reported-by: Luo Likang <luolikang@nsfocus.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
io_uring/cancel.c diff | blob | history
Domain: System / Kernel;