From: Pavel Begunkov Date: Thu, 13 Apr 2023 14:28:05 +0000 (+0100) Subject: io_uring/rsrc: use nospec'ed indexes X-Git-Tag: for-6.4/io_uring-2023-04-21~19 X-Git-Url: https://git.kernel.dk/?a=commitdiff_plain;h=953c37e066f05a3dca2d74643574b8dfe8a83983;p=linux-block.git io_uring/rsrc: use nospec'ed indexes We use array_index_nospec() for registered buffer indexes, but don't use it while poking into rsrc tags, fix that. Fixes: 634d00df5e1cf ("io_uring: add full-fledged dynamic buffers support") Signed-off-by: Pavel Begunkov Link: https://lore.kernel.org/r/f02fafc5a9c0dd69be2b0618c38831c078232ff0.1681395792.git.asml.silence@gmail.com Signed-off-by: Jens Axboe --- diff --git a/io_uring/rsrc.c b/io_uring/rsrc.c index 11058e20bdcc..3c1538b8c8f4 100644 --- a/io_uring/rsrc.c +++ b/io_uring/rsrc.c @@ -517,7 +517,7 @@ static int __io_sqe_buffers_update(struct io_ring_ctx *ctx, } ctx->user_bufs[i] = imu; - *io_get_tag_slot(ctx->buf_data, offset) = tag; + *io_get_tag_slot(ctx->buf_data, i) = tag; } if (needs_switch)