From: Pavel Begunkov <asml.silence@gmail.com>
Date: Mon, 20 Jun 2022 00:26:01 +0000 (+0100)
Subject: io_uring: add a warn_once for poll_find
X-Git-Tag: v6.6.17~6956^2~63
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=bce5d70cd64a5d48aff613334b8a5fac450b9753;p=platform%2Fkernel%2Flinux-rpi.git

io_uring: add a warn_once for poll_find

io_poll_remove() expects poll_find() to search only for poll requests and
passes a flag for this. Just be a little bit extra cautious considering
lots of recent poll/cancellation changes and add a WARN_ON_ONCE checking
that we don't get an apoll'ed request.

Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Link: https://lore.kernel.org/r/ec9a66f1e22f99dcd02288d4e42f3cc6bb357804.1655684496.git.asml.silence@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
---

diff --git a/io_uring/poll.c b/io_uring/poll.c
index cbf44c3..bd31107 100644
--- a/io_uring/poll.c
+++ b/io_uring/poll.c
@@ -833,6 +833,11 @@ int io_poll_remove(struct io_kiocb *req, unsigned int issue_flags)
 	}
 
 found:
+	if (WARN_ON_ONCE(preq->opcode != IORING_OP_POLL_ADD)) {
+		ret = -EFAULT;
+		goto out;
+	}
+
 	if (poll_update->update_events || poll_update->update_user_data) {
 		/* only mask one event flags, keep behavior flags */
 		if (poll_update->update_events) {