[GIT PULL] io_uring fixes for 5.6-rc

From: Jens Axboe
Date: Sat Mar 21 2020 - 14:38:41 EST


Hi Linus,

Two different fixes in here:

- Fix for a potential NULL pointer deref for links with async or drain
marked (Pavel)

- Fix for not properly checking RLIMIT_NOFILE for async punted
operations. This affects openat/openat2, which were added this cycle,
and accept4. I did a full audit of other cases where we might check
current->signal->rlim[] and found only RLIMIT_FSIZE for buffered
writes and fallocate. That one is fixed and queued for 5.7 and marked
stable.

Please pull!


git://git.kernel.dk/linux-block.git tags/io_uring-5.6-20200320


----------------------------------------------------------------
Jens Axboe (2):
io_uring: make sure openat/openat2 honor rlimit nofile
io_uring: make sure accept honor rlimit nofile

Pavel Begunkov (1):
io_uring: NULL-deref for IOSQE_{ASYNC,DRAIN}

fs/file.c | 7 ++++++-
fs/io_uring.c | 18 ++++++++++++++++--
include/linux/file.h | 1 +
include/linux/socket.h | 3 ++-
net/socket.c | 8 +++++---
5 files changed, 30 insertions(+), 7 deletions(-)

--
Jens Axboe