| commit | ecfc51777487da4da530710e0b13de4c8cb4a6d2 | [log] [tgz] |
|---|---|---|
| author | Pavel Begunkov <asml.silence@gmail.com> | Mon Jun 29 13:13:03 2020 +0300 |
| committer | Jens Axboe <axboe@kernel.dk> | Tue Jun 30 08:39:59 2020 -0600 |
| tree | 60ebb91b5fb2e09fb274d9e0d8db2c47128029a6 | |
| parent | 8eb7e2d00763367f345ef0b2a2eb4f8001ae40ce [diff] |
io_uring: fix potential use after free on fallback request free After __io_free_req() puts a ctx ref, it should be assumed that the ctx may already be gone. However, it can be accessed when putting the fallback req. Free the req first and then put the ctx. Signed-off-by: Pavel Begunkov <asml.silence@gmail.com> Signed-off-by: Jens Axboe <axboe@kernel.dk>