I hard coded (user_max_address() - PAGESIZE) as the start address in liburing/test/read-write.c:test_buf_select() and provided two buffers of PAGESIZE each. Without the patch, io_uring_prep_provide_buffers() succeeds but the subsequent __test_io() obviously fails with -EFAULT. With the patch, io_uring_prep_provide_buffers() fails with -EFAULT. I think this would be a good test case to add but I'm not sure what would be a generic way to implement it. Bijan Mottahedeh (1): io_uring: validate the full range of provided buffers for access fs/io_uring.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) -- 1.8.3.1