From: Jens Axboe <axboe@xxxxxxxxx>
commit 70ed519ed59da3a92c3acedeb84a30e5a66051ce upstream.
If the iovec inside the kmsg isn't already allocated AND one gets
expanded beyond the fixed size, then the request may not already have
been marked for cleanup. Ensure that it is.
Cc: stable@xxxxxxxxxxxxxxx
Fixes: a05d1f625c7a ("io_uring/net: support bundles for send")
Signed-off-by: Jens Axboe <axboe@xxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
io_uring/net.c | 1 +
1 file changed, 1 insertion(+)
--- a/io_uring/net.c
+++ b/io_uring/net.c
@@ -613,6 +613,7 @@ retry_bundle:
if (arg.iovs != &kmsg->fast_iov && arg.iovs != kmsg->free_iov) {
kmsg->free_iov_nr = ret;
kmsg->free_iov = arg.iovs;
+ req->flags |= REQ_F_NEED_CLEANUP;
}
}
Patches currently in stable-queue which might be from axboe@xxxxxxxxx are
queue-6.10/io_uring-net-ensure-expanded-bundle-send-gets-marked-for-cleanup.patch
queue-6.10/io_uring-net-ensure-expanded-bundle-recv-gets-marked-for-cleanup.patch
queue-6.10/block-change-rq_integrity_vec-to-respect-the-iterato.patch
queue-6.10/io_uring-net-don-t-pick-multiple-buffers-for-non-bundle-send.patch
