[PATCH 0/1] io_uring: fix bad free in io_sqe_files_register

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



If io_sqe_files_register is called but returns EFAULT or EBADF the
io_ring_ctx user_files member is cleaned up, but a following call to
io_sqe_files_unregister will double-free.

Dan Robertson (1):
  io_uring: fix bad free in io_sqe_files_register

 fs/io_uring.c | 1 +
 1 file changed, 1 insertion(+)

-- 
2.21.0






[Index of Archives]     [Linux RAID]     [Linux SCSI]     [Linux ATA RAID]     [IDE]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Device Mapper]

  Powered by Linux