On 12/2/20 3:04 PM, Pavel Begunkov wrote: > On 30/11/2020 18:12, Jens Axboe wrote: >> On 11/29/20 11:33 AM, Pavel Begunkov wrote: >>> __io_compat_recvmsg_copy_hdr() with REQ_F_BUFFER_SELECT reads out iov >>> len but never assigns it to iov/fast_iov, leaving sr->len with garbage. >>> Hopefully, following io_buffer_select() truncates it to the selected >>> buffer size, but the value is still may be under what was specified. >> >> Applied, thanks. > > Jens, apologies but where did it go? Can't find at git.kernel.dk Looks like I forgot to push it out, but it did get applied to io_uring-5.10. My git box is having an issue right now, so can't even push it out... Will do so tomorrow morning. -- Jens Axboe