Yang Xiuwei 50a98ce1ea io_uring: fix incorrect io_kiocb reference in io_link_skb ... [ Upstream commit 2c139a47eff8de24e3350dadb4c9d5e3426db826 ] In io_link_skb function, there is a bug where prev_notif is incorrectly assigned using 'nd' instead of 'prev_nd'. This causes the context validation check to compare the current notification with itself instead of comparing it with the previous notification. Fix by using the correct prev_nd parameter when obtaining prev_notif. Signed-off-by: Yang Xiuwei <yangxiuwei@kylinos.cn> Reviewed-by: Pavel Begunkov <asml.silence@gmail.com> Fixes: 6fe4220912 ("io_uring/notif: implement notification stacking") Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-09-25 11:16:53 +02:00
..
advise.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
advise.h
alloc_cache.c	io_uring: add alloc_cache.c	2025-01-28 15:10:40 -07:00
alloc_cache.h	io_uring/net: convert to struct iou_vec	2025-03-07 13:41:08 -07:00
cancel.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
cancel.h	io_uring/cancel: add generic cancel helper	2025-02-17 05:34:45 -07:00
cmd_net.c	io_uring/cmd: move net cmd into a separate file	2025-04-28 11:51:31 -06:00
epoll.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
epoll.h	io_uring/epoll: add support for IORING_OP_EPOLL_WAIT	2025-02-20 07:59:56 -07:00
eventfd.c	io_uring/eventfd: open code io_eventfd_grab()	2025-04-24 08:33:54 -06:00
eventfd.h	io_uring/eventfd: dedup signalling helpers	2025-04-24 08:33:54 -06:00
fdinfo.c	io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()	2025-06-10 11:20:04 -06:00
fdinfo.h
filetable.c	io_uring: cache nodes and mapped buffers	2025-02-28 07:05:46 -07:00
filetable.h
fs.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
fs.h
futex.c	io_uring/futex: ensure io_futex_wait() cleans up properly on failure	2025-08-28 16:34:34 +02:00
futex.h
io_uring.c	io_uring/msg_ring: kill alloc_cache for io_kiocb allocations	2025-09-25 11:16:53 +02:00
io_uring.h	io_uring: include dying ring in task_work "should cancel" state	2025-09-25 11:16:50 +02:00
io-wq.c	io_uring/io-wq: fix max_workers breakage and nr_workers underflow	2025-09-25 11:16:50 +02:00
io-wq.h	io_uring/wq: avoid indirect do_work/free_work calls	2025-04-21 05:06:58 -06:00
kbuf.c	io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths	2025-09-04 16:55:43 +02:00
kbuf.h	io_uring/kbuf: flag partial buffer mappings	2025-06-26 12:17:48 -06:00
Kconfig	io_uring: make zcrx depend on CONFIG_IO_URING	2025-03-31 07:07:44 -06:00
Makefile	io_uring/fdinfo: only compile if CONFIG_PROC_FS is set	2025-05-16 12:33:02 -06:00
memmap.c	io_uring/memmap: cast nr_pages to size_t before shifting	2025-08-20 18:40:43 +02:00
memmap.h	io_uring: update parameter name in io_pin_pages function declaration	2025-05-09 07:58:22 -06:00
msg_ring.c	io_uring/msg_ring: kill alloc_cache for io_kiocb allocations	2025-09-25 11:16:53 +02:00
msg_ring.h	io_uring/msg_ring: Drop custom destructor	2024-12-27 10:08:21 -07:00
napi.c	net: use napi_id_valid helper	2025-02-17 16:43:04 -08:00
napi.h
net.c	io_uring/net: commit partial buffers on retry	2025-08-20 18:40:44 +02:00
net.h	io_uring/net: convert to struct iou_vec	2025-03-07 13:41:08 -07:00
nop.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
nop.h
notif.c	io_uring: fix incorrect io_kiocb reference in io_link_skb	2025-09-25 11:16:53 +02:00
notif.h
opdef.c	io_uring: make fallocate be hashed work	2025-06-23 08:58:44 -06:00
opdef.h	io_uring: rearrange opdef flags by use pattern	2025-02-27 07:27:56 -07:00
openclose.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
openclose.h	io_uring: add support for IORING_OP_PIPE	2025-04-21 05:06:58 -06:00
poll.c	io_uring: include dying ring in task_work "should cancel" state	2025-09-25 11:16:50 +02:00
poll.h	io_uring: introduce type alias for io_tw_state	2025-02-17 05:34:50 -07:00
refs.h	io_uring: always do atomic put from iowq	2025-04-03 08:31:57 -06:00
register.c	io_uring: consistently use rcu semantics with sqpoll thread	2025-06-12 08:17:09 -06:00
register.h
rsrc.c	io_uring: export io_[un]account_mem	2025-08-20 18:40:43 +02:00
rsrc.h	io_uring: export io_[un]account_mem	2025-08-20 18:40:43 +02:00
rw.c	fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability	2025-09-19 16:37:26 +02:00
rw.h	io_uring/kbuf: pass bgid to io_buffer_select()	2025-04-21 05:06:58 -06:00
slist.h
splice.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
splice.h
sqpoll.c	io_uring/sqpoll: don't put task_struct on tctx setup failure	2025-06-17 06:43:18 -06:00
sqpoll.h	io_uring: consistently use rcu semantics with sqpoll thread	2025-06-12 08:17:09 -06:00
statx.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
statx.h
sync.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
sync.h
tctx.c	io_uring/wq: avoid indirect do_work/free_work calls	2025-04-21 05:06:58 -06:00
tctx.h
timeout.c	io_uring: include dying ring in task_work "should cancel" state	2025-09-25 11:16:50 +02:00
timeout.h	io_uring/timeout: don't export link t-out disarm helper	2025-05-06 10:11:23 -06:00
truncate.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
truncate.h
uring_cmd.c	io_uring: include dying ring in task_work "should cancel" state	2025-09-25 11:16:50 +02:00
uring_cmd.h	io_uring/cmd: axe duplicate io_uring_cmd_import_fixed_vec() declaration	2025-05-20 14:36:41 -06:00
waitid.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
waitid.h
xattr.c	io_uring: finish IOU_OK -> IOU_COMPLETE transition	2025-05-21 08:41:16 -06:00
xattr.h
zcrx.c	io_uring/zcrx: don't leak pages on account failure	2025-08-20 18:41:44 +02:00
zcrx.h	io_uring/zcrx: account area memory	2025-08-20 18:40:43 +02:00