Jens AxboeandGreg Kroah-Hartman 206d8e0242 io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() ...

[ Upstream commit d58d82bd0e ]

io_uring_cmd_sock() does a normal read of cmd->sqe->cmd_op, where it
really should be using a READ_ONCE() as ->sqe may still be pointing to
the original SQE. Since the prep side already does this READ_ONCE() and
stores it locally, use that value rather than re-read it.

Fixes: 8e9fad0e70 ("io_uring: Add io_uring command support for sockets")
Link: https://lore.kernel.org/r/20250121-uring-sockcmd-fix-v1-1-add742802a29@google.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-02-08 09:58:10 +01:00

..

advise.c

io_uring/advise: support 64-bit lengths

2024-06-16 14:54:55 -06:00

advise.h

…

alloc_cache.h

io_uring/alloc_cache: switch to array based caching

2024-04-15 08:10:25 -06:00

cancel.c

io_uring: fix warnings on shadow variables

2024-04-15 08:10:26 -06:00

cancel.h

io_uring: fix cancellation overwriting req->flags

2024-06-13 19:25:28 -06:00

epoll.c

…

epoll.h

…

eventfd.c

io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period

2025-01-17 13:40:58 +01:00

eventfd.h

io_uring/eventfd: move eventfd handling to separate file

2024-06-16 14:54:55 -06:00

fdinfo.c

io_uring/rsrc: change ubuf->ubuf_end to length tracking

2024-09-15 09:15:22 -06:00

fdinfo.h

…

filetable.c

io_uring/filetable: don't unnecessarily clear/reset bitmap

2024-05-08 08:27:45 -06:00

filetable.h

…

fs.c

…

fs.h

…

futex.c

io_uring/alloc_cache: switch to array based caching

2024-04-15 08:10:25 -06:00

futex.h

io_uring/alloc_cache: switch to array based caching

2024-04-15 08:10:25 -06:00

io_uring.c

io_uring: don't touch sqd->thread off tw add

2025-01-17 13:40:59 +01:00

io_uring.h

io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work

2024-10-17 08:38:04 -06:00

io-wq.c

io_uring/io-wq: inherit cpuset of cgroup in io worker

2024-09-11 07:27:56 -06:00

io-wq.h

io_uring/io-wq: make io_wq_work flags atomic

2024-06-16 14:54:55 -06:00

kbuf.c

io_uring/kbuf: use pre-committed buffer address for non-pollable file

2025-01-09 13:33:48 +01:00

kbuf.h

io_uring/kbuf: add support for incremental buffer consumption

2024-08-29 08:44:58 -06:00

Makefile

io_uring: add GCOV_PROFILE_URING Kconfig option

2024-08-30 10:52:02 -06:00

memmap.c

io_uring: check for overflows in io_pin_pages

2024-12-05 14:02:50 +01:00

memmap.h

io_uring: move mapping/allocation helpers to a separate file

2024-04-15 08:10:26 -06:00

msg_ring.c

io_uring/msg_ring: fix uninitialized use of target_req->flags

2024-07-25 08:41:35 -06:00

msg_ring.h

io_uring/msg_ring: add an alloc cache for io_kiocb entries

2024-06-24 08:39:55 -06:00

napi.c

io_uring: user registered clockid for wait timeouts

2024-08-25 08:27:01 -06:00

napi.h

io_uring/napi: postpone napi timeout adjustment

2024-08-25 08:27:01 -06:00

net.c

io_uring/net: always initialize kmsg->msg.msg_inq upfront

2025-01-09 13:33:41 +01:00

net.h

io_uring: Introduce IORING_OP_LISTEN

2024-06-19 07:57:21 -06:00

nop.c

io_uring: support to inject result for NOP

2024-05-10 06:09:45 -06:00

nop.h

…

notif.c

io_uring/notif: disable LAZY_WAKE for linked notifs

2024-04-30 13:06:27 -06:00

notif.h

io_uring/notif: implement notification stacking

2024-04-22 19:31:18 -06:00

opdef.c

io_uring: Fix probe of disabled operations

2024-06-19 08:58:00 -06:00

opdef.h

io_uring: Fix probe of disabled operations

2024-06-19 08:58:00 -06:00

openclose.c

…

openclose.h

…

poll.c

io_uring: keep multishot request NAPI timeout current

2024-07-30 06:18:58 -06:00

poll.h

io_uring/poll: shrink alloc cache size to 32

2024-04-15 08:10:25 -06:00

refs.h

io_uring: kill dead code in io_req_complete_post

2024-04-15 08:10:26 -06:00

register.c

io_uring: clean up a type in io_uring_register_get_file()

2024-09-16 12:04:10 -06:00

register.h

io_uring: clean up a type in io_uring_register_get_file()

2024-09-16 12:04:10 -06:00

rsrc.c

io_uring/rsrc: require cloned buffers to share accounting contexts

2025-02-01 18:39:40 +01:00

rsrc.h

io_uring/rsrc: change ubuf->ubuf_end to length tracking

2024-09-15 09:15:22 -06:00

rw.c

io_uring/rw: fix downgraded mshot read

2025-01-09 13:33:51 +01:00

rw.h

io_uring/alloc_cache: switch to array based caching

2024-04-15 08:10:25 -06:00

slist.h

…

splice.c

…

splice.h

…

sqpoll.c

io_uring/sqpoll: zero sqd->thread on tctx errors

2025-01-17 13:40:52 +01:00

sqpoll.h

…

statx.c

vfs: retire user_path_at_empty and drop empty arg from getname_flags

2024-06-05 17:03:57 +02:00

statx.h

…

sync.c

…

sync.h

…

tctx.c

io_uring/tctx: work around xa_store() allocation error issue

2024-12-14 20:04:10 +01:00

tctx.h

…

timeout.c

io_uring/timeout: fix multishot updates

2025-01-17 13:40:51 +01:00

timeout.h

…

truncate.c

…

truncate.h

…

uring_cmd.c

io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()

2025-02-08 09:58:10 +01:00

uring_cmd.h

io_uring/alloc_cache: switch to array based caching

2024-04-15 08:10:25 -06:00

waitid.c

…

waitid.h

…

xattr.c

vfs: retire user_path_at_empty and drop empty arg from getname_flags

2024-06-05 17:03:57 +02:00

xattr.h

…