superrob1500
/
mirror-linux
mirror of https://github.com/torvalds/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

io_uring: check for user passing 0 nr_submit 

io_submit_sqes() shouldn't be stepping into its main loop when there is
nothing to submit, i.e. nr=0. Fix 0 submission queue entries checks,
which should follow after all user input truncations.

Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
pull/1354/merge
Pavel Begunkov 2025-10-16 12:20:31 +01:00 committed by Jens Axboe
parent 1cba30bf9f
commit dde92a5026
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
io_uring/io_uring.c
View File

@ -2453,10 +2453,11 @@ int io_submit_sqes(struct io_ring_ctx *ctx, unsigned int nr)
unsigned int left; unsigned int left;
int ret; int ret;
entries = min(nr, entries);
if (unlikely(!entries)) if (unlikely(!entries))
return 0; return 0;
/* make sure SQ entry isn't read before tail */
ret = left = min(nr, entries); ret = left = entries;
io_get_task_refs(left); io_get_task_refs(left);
io_submit_state_start(&ctx->submit_state, left); io_submit_state_start(&ctx->submit_state, left);