diff options
| author | Jens Axboe <axboe@kernel.dk> | 2026-04-09 11:22:43 -0600 |
|---|---|---|
| committer | Jens Axboe <axboe@kernel.dk> | 2026-06-08 11:03:16 -0600 |
| commit | 46800585ae04863c623b1563b03d12e9381089f1 (patch) | |
| tree | 45ff261b4c4e1b7612679c9783af8ffff695eecd /include/linux/debugobjects.h | |
| parent | 57ed21fad4022d595c6654d3b4d2b2083a79ee25 (diff) | |
io_uring/kbuf: validate ring provided buffer addresses with access_ok()
Commit:
809b997a5ce9 ("x86-64/arm64/powerpc: clean up and rename __copy_from_user_flushcache")
sanitized that any provided copy helper should separately validate
destination and source addresses, but we should also ensure that
anything that is retrieved from a buffer is validated upfront. For ring
provided buffers, always include an access_ok() when grabbing a new
buffer.
Fixes: c7fb19428d67 ("io_uring: add support for ring mapped supplied buffers")
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Diffstat (limited to 'include/linux/debugobjects.h')
0 files changed, 0 insertions, 0 deletions