io_uring: fix double poll leak on repolling
We have re-polling for partial IO, so a request can be polled twice. If it used two poll entries the first time then on the second io_arm_poll_handler() it will find the old apoll entry and NULL kmalloc()'ed second entry, i.e. apoll->double_poll, so leaking it. Fixes: 10c87333 ("io_uring: allow re-poll if we made progress") Signed-off-by:Pavel Begunkov <asml.silence@gmail.com> Link: https://lore.kernel.org/r/fee2452494222ecc7f1f88c8fb659baef971414a.1655852245.git.asml.silence@gmail.com Signed-off-by:
Jens Axboe <axboe@kernel.dk>
Loading
-
mentioned in commit 321383fa
-
mentioned in commit cbb8107b
-
mentioned in commit eacf23c6
-
mentioned in commit 0cc4b4d4
-
mentioned in commit 095382c2
-
mentioned in commit c25e199b
-
mentioned in commit 81c3b677
-
mentioned in commit 4584164b
-
mentioned in commit cec06e3a
-
mentioned in commit 138d120f
-
mentioned in commit d54d4171
-
mentioned in commit d3e11255
-
mentioned in commit b81ff0ea
-
mentioned in commit 47c4d528
-
mentioned in commit f294c013
-
mentioned in commit 0c457134
-
mentioned in commit 303c098a
-
mentioned in commit 08f7fcc0
-
mentioned in commit 468cfeb3
-
mentioned in commit 9531b44b
-
mentioned in commit 4f3364b4
-
mentioned in commit 737f03fc
-
mentioned in commit 97903e9b
-
mentioned in commit 6b3d1f96
Please sign in to comment