On Mon, Apr 01, 2019 at 07:37:42AM +0100, Al Viro wrote: > On Sun, Mar 31, 2019 at 05:18:10PM -0700, Linus Torvalds wrote: > > > Yeah, I would like to see the actual aio.c pull request and the > > use-after-free fixes. All the patches look fine, I just don't have the > > final end result.. > > use-after-free fixes: ceph is already in mainline, Daniel's bpf fix is in > bpf tree (1da6c4d9140c "bpf: fix use after free in bpf_evict_inode"), > the rest is in vfs.git#fixes. ... and aio stuff is The following changes since commit 9e98c678c2d6ae3a17cb2de55d17f69dddaa231b: Linux 5.1-rc1 (2019-03-17 14:22:26 -0700) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs.git work.aio for you to fetch changes up to 7316b49c2a117ca0611bc9af779d2108b764a7f9: aio: move sanity checks and request allocation to io_submit_one() (2019-03-17 20:52:32 -0400) ---------------------------------------------------------------- Al Viro (8): aio: fold lookup_kiocb() into its sole caller aio: keep io_event in aio_kiocb aio: store event at final iocb_put() Fix aio_poll() races make aio_read()/aio_write() return int aio: move dropping ->ki_eventfd into iocb_destroy() deal with get_reqs_available() in aio_get_req() itself aio: move sanity checks and request allocation to io_submit_one() Linus Torvalds (1): pin iocb through aio. fs/aio.c | 338 ++++++++++++++++++++++++++++----------------------------------- 1 file changed, 150 insertions(+), 188 deletions(-)