Jens Axboe 69a62e03f8 io_uring/msg_ring: don't leave potentially dangling ->tctx pointer ...

For remote posting of messages, req->tctx is assigned even though it
is never used. Rather than leave a dangling pointer, just clear it to
NULL and use the previous check for a valid submitter_task to gate on
whether or not the request should be terminated.

Reported-by: Jann Horn <jannh@google.com>
Fixes: b6f58a3f4a ("io_uring: move struct io_kiocb from task_struct to io_uring_task")
Signed-off-by: Jens Axboe <axboe@kernel.dk>

2025-01-22 17:10:45 -07:00

8.7 KiB

Raw Blame History

View Raw