diff options
| author | Pavel Begunkov <asml.silence@gmail.com> | 2023-04-13 15:28:05 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2023-05-11 23:17:19 +0900 |
| commit | a368fa2096a8d254fd5ce24f7a359b1b2248d1e6 (patch) | |
| tree | 0dac22734ce1bbc58242fe77387a0be02928dbbc /io_uring | |
| parent | 127f0d4bc288baf2c8bd846fc57aa04fa6b708cf (diff) | |
| download | linux-stable-a368fa2096a8d254fd5ce24f7a359b1b2248d1e6.tar.gz linux-stable-a368fa2096a8d254fd5ce24f7a359b1b2248d1e6.tar.bz2 linux-stable-a368fa2096a8d254fd5ce24f7a359b1b2248d1e6.zip | |
io_uring/rsrc: use nospec'ed indexes
[ Upstream commit 953c37e066f05a3dca2d74643574b8dfe8a83983 ]
We use array_index_nospec() for registered buffer indexes, but don't use
it while poking into rsrc tags, fix that.
Fixes: 634d00df5e1cf ("io_uring: add full-fledged dynamic buffers support")
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Link: https://lore.kernel.org/r/f02fafc5a9c0dd69be2b0618c38831c078232ff0.1681395792.git.asml.silence@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'io_uring')
| -rw-r--r-- | io_uring/rsrc.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/io_uring/rsrc.c b/io_uring/rsrc.c index 7a43aed8e395..e6fec9e971ea 100644 --- a/io_uring/rsrc.c +++ b/io_uring/rsrc.c @@ -577,7 +577,7 @@ static int __io_sqe_buffers_update(struct io_ring_ctx *ctx, } ctx->user_bufs[i] = imu; - *io_get_tag_slot(ctx->buf_data, offset) = tag; + *io_get_tag_slot(ctx->buf_data, i) = tag; } if (needs_switch) |