30 Nov
2020
30 Nov
'20
6:12 p.m.
On 11/29/20 11:33 AM, Pavel Begunkov wrote:
__io_compat_recvmsg_copy_hdr() with REQ_F_BUFFER_SELECT reads out iov len but never assigns it to iov/fast_iov, leaving sr->len with garbage. Hopefully, following io_buffer_select() truncates it to the selected buffer size, but the value is still may be under what was specified.
Applied, thanks.
--
Jens Axboe