io_uring: don't read user-shared sqe flags twice
authorPavel Begunkov <asml.silence@gmail.com>
Wed, 8 Apr 2020 05:58:46 +0000 (08:58 +0300)
committerJens Axboe <axboe@kernel.dk>
Wed, 8 Apr 2020 15:26:51 +0000 (09:26 -0600)
commit9c280f9087118099f50566e906b9d9d5a0fb4529
treed3554b855fc22b0c0caa3bf3ff478ebf2db90d27
parent0553b8bda8709c47863eab3fff7ac32ad04ca52b
io_uring: don't read user-shared sqe flags twice

Don't re-read userspace-shared sqe->flags, it can be exploited.
sqe->flags are copied into req->flags in io_submit_sqe(), check them
there instead.

Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c