From mboxrd@z Thu Jan 1 00:00:00 1970 From: Al Viro Subject: Re: [PATCH v2 0/5] pid: add pidfd_open() Date: Mon, 1 Apr 2019 07:41:53 +0100 Message-ID: <20190401064153.GI2217@ZenIV.linux.org.uk> References: <132107F4-F56B-4D6E-9E00-A6F7C092E6BD@amacapital.net> <20190331211041.vht7dnqg4e4bilr2@brauner.io> <20190331220259.qntxynluk765hpnt@brauner.io> <20190401000937.GG2217@ZenIV.linux.org.uk> <20190401063741.GH2217@ZenIV.linux.org.uk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Content-Disposition: inline In-Reply-To: <20190401063741.GH2217@ZenIV.linux.org.uk> Sender: linux-kernel-owner@vger.kernel.org To: Linus Torvalds Cc: Christian Brauner , Andy Lutomirski , Daniel Colascione , Jann Horn , Andrew Lutomirski , David Howells , "Serge E. Hallyn" , Linux API , Linux List Kernel Mailing , Arnd Bergmann , "Eric W. Biederman" , Konstantin Khlebnikov , Kees Cook , Alexey Dobriyan , Thomas Gleixner , Michael Kerrisk-manpages , Jonathan Kowalski , "Dmitry V. Levin" , Andrew Morton List-Id: linux-api@vger.kernel.org On Mon, Apr 01, 2019 at 07:37:42AM +0100, Al Viro wrote: > On Sun, Mar 31, 2019 at 05:18:10PM -0700, Linus Torvalds wrote: > > > Yeah, I would like to see the actual aio.c pull request and the > > use-after-free fixes. All the patches look fine, I just don't have the > > final end result.. > > use-after-free fixes: ceph is already in mainline, Daniel's bpf fix is in > bpf tree (1da6c4d9140c "bpf: fix use after free in bpf_evict_inode"), > the rest is in vfs.git#fixes. ... and aio stuff is The following changes since commit 9e98c678c2d6ae3a17cb2de55d17f69dddaa231b: Linux 5.1-rc1 (2019-03-17 14:22:26 -0700) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs.git work.aio for you to fetch changes up to 7316b49c2a117ca0611bc9af779d2108b764a7f9: aio: move sanity checks and request allocation to io_submit_one() (2019-03-17 20:52:32 -0400) ---------------------------------------------------------------- Al Viro (8): aio: fold lookup_kiocb() into its sole caller aio: keep io_event in aio_kiocb aio: store event at final iocb_put() Fix aio_poll() races make aio_read()/aio_write() return int aio: move dropping ->ki_eventfd into iocb_destroy() deal with get_reqs_available() in aio_get_req() itself aio: move sanity checks and request allocation to io_submit_one() Linus Torvalds (1): pin iocb through aio. fs/aio.c | 338 ++++++++++++++++++++++++++++----------------------------------- 1 file changed, 150 insertions(+), 188 deletions(-)