| commit | 2d280bc8930ba9ed1705cfd548c6c8924949eaf1 | [log] [tgz] |
|---|---|---|
| author | Pavel Begunkov <asml.silence@gmail.com> | Sun Nov 29 18:33:32 2020 +0000 |
| committer | Jens Axboe <axboe@kernel.dk> | Mon Nov 30 11:12:03 2020 -0700 |
| tree | ca26780dd333d3d3cd1193f38af32ed0a9ac0101 | |
| parent | af60470347de6ac2b9f0cc3703975a543a3de075 [diff] |
io_uring: fix recvmsg setup with compat buf-select __io_compat_recvmsg_copy_hdr() with REQ_F_BUFFER_SELECT reads out iov len but never assigns it to iov/fast_iov, leaving sr->len with garbage. Hopefully, following io_buffer_select() truncates it to the selected buffer size, but the value is still may be under what was specified. Cc: <stable@vger.kernel.org> # 5.7 Signed-off-by: Pavel Begunkov <asml.silence@gmail.com> Signed-off-by: Jens Axboe <axboe@kernel.dk>