projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b2edc0a) | patch
io_uring: fix a use after free in io_async_task_func()
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 8 Jul 2020 18:47:11 +0000 (21:47 +0300)
committerJens Axboe <axboe@kernel.dk>
Wed, 8 Jul 2020 19:15:04 +0000 (13:15 -0600)
commitaa340845ae6f019e0a12321a1741c14679bb0664
treea3e80c1d69261f0debc3c31188f79164ff9f124ctree | snapshot
parentb2edc0a77fac19bbdef63cedb2ea34aec1a9a499commit | diff
io_uring: fix a use after free in io_async_task_func()

The "apoll" variable is freed and then used on the next line.  We need
to move the free down a few lines.

Fixes: 0be0b0e33b0b ("io_uring: simplify io_async_task_func()")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git