Commit dd821e0c authored by Pavel Begunkov's avatar Pavel Begunkov Committed by Jens Axboe
Browse files

io_uring: fix missing msg_name assignment 



Ensure to set msg.msg_name for the async portion of send/recvmsg,
as the header copy will copy to/from it.

Cc: stable@vger.kernel.org # v5.5+
Signed-off-by: default avatarPavel Begunkov <asml.silence@gmail.com>
Signed-off-by: default avatarJens Axboe <axboe@kernel.dk>
parent 309fc03a

fs/io_uring.c

+2 −0
Original line number Diff line number Diff line
@@ -3553,6 +3553,7 @@ static int io_sendmsg_prep(struct io_kiocb *req, const struct io_uring_sqe *sqe) 
	if (req->flags & REQ_F_NEED_CLEANUP)

		return 0;



	io->msg.msg.msg_name = &io->msg.addr;

	io->msg.iov = io->msg.fast_iov;

	ret = sendmsg_copy_msghdr(&io->msg.msg, sr->msg, sr->msg_flags,

					&io->msg.iov);
@@ -3734,6 +3735,7 @@ static int __io_compat_recvmsg_copy_hdr(struct io_kiocb *req, 


static int io_recvmsg_copy_hdr(struct io_kiocb *req, struct io_async_ctx *io)

{

	io->msg.msg.msg_name = &io->msg.addr;

	io->msg.iov = io->msg.fast_iov;



#ifdef CONFIG_COMPAT

CRA Git | Maintained and supported by SUSTech CRA and CCSE