commit | c398ecb3d611925e4a5411afdf7489914a5c0460 | [log] [tgz] |
---|---|---|
author | Pavel Begunkov <asml.silence@gmail.com> | Thu Apr 09 08:17:59 2020 +0300 |
committer | Jens Axboe <axboe@kernel.dk> | Thu Apr 09 09:38:18 2020 -0600 |
tree | 9f9abd0e95912c35d5851e88edf07967c78b4d72 | |
parent | 9c280f9087118099f50566e906b9d9d5a0fb4529 [diff] |
io_uring: fix fs cleanup on cqe overflow If completion queue overflow occurs, __io_cqring_fill_event() will update req->cflags, which is in a union with req->work and happens to be aliased to req->work.fs. Following io_free_req() -> io_req_work_drop_env() may get a bunch of different problems (miscount fs->users, segfault, etc) on cleaning @fs. Signed-off-by: Pavel Begunkov <asml.silence@gmail.com> Signed-off-by: Jens Axboe <axboe@kernel.dk>