Pavel Begunkov e1d7727b73 io_uring: don't assume uaddr alignment in io_vec_fill_bvec ...

There is no guaranteed alignment for user pointers. Don't use mask
trickery and adjust the offset by bv_offset.

Cc: stable@vger.kernel.org
Reported-by: David Hildenbrand <david@redhat.com>
Fixes: 9ef4cbbcb4 ("io_uring: add infra for importing vectored reg buffers")
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Link: https://lore.kernel.org/io-uring/19530391f5c361a026ac9b401ff8e123bde55d98.1750771718.git.asml.silence@gmail.com/
Signed-off-by: Jens Axboe <axboe@kernel.dk>

2025-06-24 20:51:08 -06:00

..

advise.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

advise.h

…

alloc_cache.c

io_uring: add alloc_cache.c

2025-01-28 15:10:40 -07:00

alloc_cache.h

io_uring/net: convert to struct iou_vec

2025-03-07 13:41:08 -07:00

cancel.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

cancel.h

io_uring/cancel: add generic cancel helper

2025-02-17 05:34:45 -07:00

cmd_net.c

io_uring/cmd: move net cmd into a separate file

2025-04-28 11:51:31 -06:00

epoll.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

epoll.h

io_uring/epoll: add support for IORING_OP_EPOLL_WAIT

2025-02-20 07:59:56 -07:00

eventfd.c

io_uring/eventfd: open code io_eventfd_grab()

2025-04-24 08:33:54 -06:00

eventfd.h

io_uring/eventfd: dedup signalling helpers

2025-04-24 08:33:54 -06:00

fdinfo.c

io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()

2025-06-10 11:20:04 -06:00

fdinfo.h

…

filetable.c

io_uring: cache nodes and mapped buffers

2025-02-28 07:05:46 -07:00

filetable.h

io_uring/rsrc: pass 'struct io_ring_ctx' reference to rsrc helpers

2024-11-07 15:24:33 -07:00

fs.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

fs.h

…

futex.c

io_uring/futex: mark wait requests as inflight

2025-06-04 10:50:14 -06:00

futex.h

io_uring: move cancelations to be io_uring_task based

2024-11-06 13:55:38 -07:00

io_uring.c

io_uring: run local task_work from ring exit IOPOLL reaping

2025-06-13 15:26:17 -06:00

io_uring.h

io_uring: remove duplicate io_uring_alloc_task_context() definition

2025-06-17 06:41:48 -06:00

io-wq.c

io_uring: fix task leak issue in io_wq_create()

2025-06-15 12:58:39 -06:00

io-wq.h

io_uring/wq: avoid indirect do_work/free_work calls

2025-04-21 05:06:58 -06:00

kbuf.c

io_uring/kbuf: don't truncate end buffer for multiple buffer peeks

2025-06-13 11:01:49 -06:00

kbuf.h

io_uring/kbuf: limit legacy provided buffer lists to USHRT_MAX

2025-06-03 15:32:44 -06:00

Kconfig

io_uring: make zcrx depend on CONFIG_IO_URING

2025-03-31 07:07:44 -06:00

Makefile

io_uring/fdinfo: only compile if CONFIG_PROC_FS is set

2025-05-16 12:33:02 -06:00

memmap.c

Merge branch 'io_uring-6.15' into for-6.16/io_uring

2025-05-16 12:31:19 -06:00

memmap.h

io_uring: update parameter name in io_pin_pages function declaration

2025-05-09 07:58:22 -06:00

msg_ring.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

msg_ring.h

io_uring/msg_ring: Drop custom destructor

2024-12-27 10:08:21 -07:00

napi.c

net: use napi_id_valid helper

2025-02-17 16:43:04 -08:00

napi.h

io_uring/napi: add static napi tracking strategy

2024-11-06 13:55:38 -07:00

net.c

io_uring/net: always use current transfer count for buffer put

2025-06-20 08:33:45 -06:00

net.h

io_uring/net: convert to struct iou_vec

2025-03-07 13:41:08 -07:00

nop.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

nop.h

…

notif.c

io_uring: remove io_preinit_req()

2025-05-06 10:11:23 -06:00

notif.h

io_uring/notif: implement notification stacking

2024-04-22 19:31:18 -06:00

opdef.c

io_uring: make fallocate be hashed work

2025-06-23 08:58:44 -06:00

opdef.h

io_uring: rearrange opdef flags by use pattern

2025-02-27 07:27:56 -07:00

openclose.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

openclose.h

io_uring: add support for IORING_OP_PIPE

2025-04-21 05:06:58 -06:00

poll.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

poll.h

io_uring: introduce type alias for io_tw_state

2025-02-17 05:34:50 -07:00

refs.h

io_uring: always do atomic put from iowq

2025-04-03 08:31:57 -06:00

register.c

io_uring: consistently use rcu semantics with sqpoll thread

2025-06-12 08:17:09 -06:00

register.h

io_uring: temporarily disable registered waits

2024-11-15 09:58:34 -07:00

rsrc.c

io_uring: don't assume uaddr alignment in io_vec_fill_bvec

2025-06-24 20:51:08 -06:00

rsrc.h

io_uring/rsrc: don't rely on user vaddr alignment

2025-06-24 20:50:59 -06:00

rw.c

Merge tag 'for-6.16/io_uring-20250523' of git://git.kernel.dk/linux

2025-05-26 12:13:22 -07:00

rw.h

io_uring/kbuf: pass bgid to io_buffer_select()

2025-04-21 05:06:58 -06:00

slist.h

io_uring: silence variable ‘prev’ set but not used warning

2023-03-09 10:10:58 -07:00

splice.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

splice.h

io_uring/splice: open code 2nd direct file assignment

2024-10-29 13:43:28 -06:00

sqpoll.c

io_uring/sqpoll: don't put task_struct on tctx setup failure

2025-06-17 06:43:18 -06:00

sqpoll.h

io_uring: consistently use rcu semantics with sqpoll thread

2025-06-12 08:17:09 -06:00

statx.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

statx.h

…

sync.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

sync.h

…

tctx.c

io_uring/wq: avoid indirect do_work/free_work calls

2025-04-21 05:06:58 -06:00

tctx.h

io_uring: simplify __io_uring_add_tctx_node

2022-10-07 12:25:30 -06:00

timeout.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

timeout.h

io_uring/timeout: don't export link t-out disarm helper

2025-05-06 10:11:23 -06:00

truncate.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

truncate.h

io_uring: add support for ftruncate

2024-02-09 09:04:39 -07:00

uring_cmd.c

io_uring/cmd: warn on reg buf imports by ineligible cmds

2025-05-23 06:31:06 -06:00

uring_cmd.h

io_uring/cmd: axe duplicate io_uring_cmd_import_fixed_vec() declaration

2025-05-20 14:36:41 -06:00

waitid.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

waitid.h

io_uring: move cancelations to be io_uring_task based

2024-11-06 13:55:38 -07:00

xattr.c

io_uring: finish IOU_OK -> IOU_COMPLETE transition

2025-05-21 08:41:16 -06:00

xattr.h

…

zcrx.c

io_uring/zcrx: fix area release on registration failure

2025-05-27 12:56:16 -06:00

zcrx.h

io_uring/zcrx: dmabuf backed zerocopy receive

2025-05-06 10:11:00 -06:00