On 30/11/2020 18:12, Jens Axboe wrote: > On 11/29/20 11:33 AM, Pavel Begunkov wrote: >> __io_compat_recvmsg_copy_hdr() with REQ_F_BUFFER_SELECT reads out iov >> len but never assigns it to iov/fast_iov, leaving sr->len with garbage. >> Hopefully, following io_buffer_select() truncates it to the selected >> buffer size, but the value is still may be under what was specified. > > Applied, thanks. Jens, apologies but where did it go? Can't find at git.kernel.dk -- Pavel Begunkov