]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit - fs/io_uring.c
io_uring: Fix NULL dereference in error in io_sqe_files_register()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 1 Feb 2021 12:23:42 +0000 (15:23 +0300)
committerJens Axboe <axboe@kernel.dk>
Mon, 1 Feb 2021 18:56:41 +0000 (11:56 -0700)
commit13770a71ed35512cc73c6b350297a797f0b27880
tree187ba85ec28682e4c620221c98068498b74066ac
parent8b28fdf21193d35d6ec5a8430f0241f5f977c6ac
io_uring: Fix NULL dereference in error in io_sqe_files_register()

If we hit a "goto out_free;" before the "ctx->file_data" pointer has
been assigned then it leads to a NULL derefence when we call:

free_fixed_rsrc_data(ctx->file_data);

We can fix this by moving the assignment earlier.

Fixes: 1ad555c6ae6e ("io_uring: create common fixed_rsrc_data allocation routines")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c