io_uring: fix removing the wrong file in __io_sqe_files_update()
authorJiufei Xue <jiufei.xue@linux.alibaba.com>
Tue, 1 Sep 2020 05:35:02 +0000 (13:35 +0800)
committerJens Axboe <axboe@kernel.dk>
Tue, 1 Sep 2020 14:04:58 +0000 (08:04 -0600)
commit98dfd5024a2e9e170b85c07078e2d89f20a5dfbd
tree84aedd19ec15ce61c55093cf6ed3adf7078d0736
parentfdee946d0925f971f167d2606984426763355e4f
io_uring: fix removing the wrong file in __io_sqe_files_update()

Index here is already the position of the file in fixed_file_table, we
should not use io_file_from_index() again to get it. Otherwise, the
wrong file which still in use may be released unexpectedly.

Cc: stable@vger.kernel.org # v5.6
Fixes: 05f3fb3c5397 ("io_uring: avoid ring quiesce for fixed file set unregister and update")
Signed-off-by: Jiufei Xue <jiufei.xue@linux.alibaba.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
fs/io_uring.c