)]}'
{
  "commit": "f1d96a8fcbbbb22d4fbc1d69eaaa678bbb0ff6e2",
  "tree": "8a3a3856eec59a94b9a2f7bba37127b982cf7d48",
  "parents": [
    "805b13adde3964c78cba125a15527e88c19f87b3"
  ],
  "author": {
    "name": "Pavel Begunkov",
    "email": "asml.silence@gmail.com",
    "time": "Fri Mar 13 22:29:14 2020 +0300"
  },
  "committer": {
    "name": "Jens Axboe",
    "email": "axboe@kernel.dk",
    "time": "Sat Mar 14 16:57:41 2020 -0600"
  },
  "message": "io_uring: NULL-deref for IOSQE_{ASYNC,DRAIN}\n\nProcessing links, io_submit_sqe() prepares requests, drops sqes, and\npasses them with sqe\u003dNULL to io_queue_sqe(). There IOSQE_DRAIN and/or\nIOSQE_ASYNC requests will go through the same prep, which doesn\u0027t expect\nsqe\u003dNULL and fail with NULL pointer deference.\n\nAlways do full prepare including io_alloc_async_ctx() for linked\nrequests, and then it can skip the second preparation.\n\nCc: stable@vger.kernel.org # 5.5\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1b2517291b7870ebb49c3999d9a19c62b6f8bb25",
      "old_mode": 33188,
      "old_path": "fs/io_uring.c",
      "new_id": "b1fbc4424aa63c7c0dc5ca0c02d40f8f2637a0c8",
      "new_mode": 33188,
      "new_path": "fs/io_uring.c"
    }
  ]
}