Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9ba28194 authored by Jens Axboe's avatar Jens Axboe Committed by Greg Kroah-Hartman
Browse files

io_uring: have io_kill_timeout() honor the request references 



No upstream commit exists for this patch.

Don't free the request unconditionally, if the request is issued async
then someone else may be holding a submit reference to it.

Reported-and-tested-by: default avatarLee Jones <lee@kernel.org>
Signed-off-by: default avatarJens Axboe <axboe@kernel.dk>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 6de3014d

fs/io_uring.c

+2 −1
Original line number Diff line number Diff line
@@ -551,6 +551,7 @@ static void io_kill_timeout(struct io_kiocb *req) 
		atomic_inc(&req->ctx->cq_timeouts);

		list_del(&req->list);

		io_cqring_fill_event(req->ctx, req->user_data, 0);

		if (refcount_dec_and_test(&req->refs))

			__io_free_req(req);

	}

}