On 11/29/20 11:33 AM, Pavel Begunkov wrote: > __io_compat_recvmsg_copy_hdr() with REQ_F_BUFFER_SELECT reads out iov > len but never assigns it to iov/fast_iov, leaving sr->len with garbage. > Hopefully, following io_buffer_select() truncates it to the selected > buffer size, but the value is still may be under what was specified. Applied, thanks. -- Jens Axboe
