Pavel Begunkov f4a1254f2a io_uring: fix cancellation overwriting req->flags ... Only the current owner of a request is allowed to write into req->flags. Hence, the cancellation path should never touch it. Add a new field instead of the flag, move it into the 3rd cache line because it should always be initialised. poll_refs can move further as polling is an involved process anyway. It's a minimal patch, in the future we can and should find a better place for it and remove now unused REQ_F_CANCEL_SEQ. Fixes: 521223d7c2 ("io_uring/cancel: don't default to setting req->work.cancel_seq") Cc: stable@vger.kernel.org Reported-by: Li Shi <sl1589472800@gmail.com> Signed-off-by: Pavel Begunkov <asml.silence@gmail.com> Link: https://lore.kernel.org/r/6827b129f8f0ad76fa9d1f0a773de938b240ffab.1718323430.git.asml.silence@gmail.com Signed-off-by: Jens Axboe <axboe@kernel.dk>		2024-06-13 19:25:28 -06:00
..
advise.c
advise.h
alloc_cache.h	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
cancel.c	io_uring: fix warnings on shadow variables	2024-04-15 08:10:26 -06:00
cancel.h	io_uring: fix cancellation overwriting req->flags	2024-06-13 19:25:28 -06:00
epoll.c
epoll.h
fdinfo.c	io_uring: fix warnings on shadow variables	2024-04-15 08:10:26 -06:00
fdinfo.h
filetable.c	io_uring/filetable: don't unnecessarily clear/reset bitmap	2024-05-08 08:27:45 -06:00
filetable.h
fs.c
fs.h
futex.c	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
futex.h	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
io_uring.c	io_uring: fix cancellation overwriting req->flags	2024-06-13 19:25:28 -06:00
io_uring.h	io_uring: check for non-NULL file pointer in io_file_can_poll()	2024-06-01 12:25:35 -06:00
io-wq.c	io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue()	2024-06-04 07:39:00 -06:00
io-wq.h
kbuf.c	io_uring/kbuf: add helpers for getting/peeking multiple buffers	2024-04-22 11:26:01 -06:00
kbuf.h	io_uring/kbuf: add helpers for getting/peeking multiple buffers	2024-04-22 11:26:01 -06:00
Makefile	io_uring: move mapping/allocation helpers to a separate file	2024-04-15 08:10:26 -06:00
memmap.c	io_uring: don't attempt to mmap larger than what the user asks for	2024-05-29 09:53:14 -06:00
memmap.h	io_uring: move mapping/allocation helpers to a separate file	2024-04-15 08:10:26 -06:00
msg_ring.c	io_uring/msg_ring: cleanup posting to IOPOLL vs !IOPOLL ring	2024-05-01 17:13:51 -06:00
msg_ring.h
napi.c	io_uring/napi: fix timeout calculation	2024-06-04 07:32:45 -06:00
napi.h
net.c	io_uring/net: assign kmsg inq/flags before buffer selection	2024-05-30 14:04:37 -06:00
net.h	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
nop.c	io_uring: support to inject result for NOP	2024-05-10 06:09:45 -06:00
nop.h
notif.c	io_uring/notif: disable LAZY_WAKE for linked notifs	2024-04-30 13:06:27 -06:00
notif.h	io_uring/notif: implement notification stacking	2024-04-22 19:31:18 -06:00
opdef.c	io_uring/rw: Free iovec before cleaning async data	2024-05-30 08:33:01 -06:00
opdef.h	io_uring: drop ->prep_async()	2024-04-15 08:10:25 -06:00
openclose.c
openclose.h
poll.c	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
poll.h	io_uring/poll: shrink alloc cache size to 32	2024-04-15 08:10:25 -06:00
refs.h	io_uring: kill dead code in io_req_complete_post	2024-04-15 08:10:26 -06:00
register.c	io_uring: fix possible deadlock in io_register_iowq_max_workers()	2024-06-04 07:39:17 -06:00
register.h
rsrc.c	io_uring/rsrc: don't lock while !TASK_RUNNING	2024-06-12 13:02:12 -06:00
rsrc.h	io_uring: remove io_req_put_rsrc_locked()	2024-04-15 08:10:26 -06:00
rw.c	Assorted commits that had missed the last merge window...	2024-05-21 13:11:44 -07:00
rw.h	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
slist.h
splice.c
splice.h
sqpoll.c	io_uring/sqpoll: ensure that normal task_work is also run timely	2024-05-21 13:41:14 -06:00
sqpoll.h
statx.c
statx.h
sync.c
sync.h
tctx.c
tctx.h
timeout.c	io_uring/timeout: remove duplicate initialization of the io_timeout list.	2024-04-15 08:10:27 -06:00
timeout.h
truncate.c
truncate.h
uring_cmd.c	io_uring: separate header for exported net bits	2024-04-15 08:10:26 -06:00
uring_cmd.h	io_uring/alloc_cache: switch to array based caching	2024-04-15 08:10:25 -06:00
waitid.c	io_uring: remove struct io_tw_state::locked	2024-04-15 08:10:24 -06:00
waitid.h
xattr.c
xattr.h