diff options
| author | Omar Sandoval | 2017-09-20 14:24:34 -0700 |
|---|---|---|
| committer | Jens Axboe | 2017-09-25 08:56:05 -0600 |
| commit | e5313c141b49c1b1af43d1ca81398185d66ad1a6 (patch) | |
| tree | 0e2440f48680900a99bcd9e3e9b3333f11b1a000 /net/ipv4/esp4.c | |
| parent | 5acb3cc2c2e9d3020a4fee43763c6463767f1572 (diff) | |
loop: remove union of use_aio and ref in struct loop_cmd
When the request is completed, lo_complete_rq() checks cmd->use_aio.
However, if this is in fact an aio request, cmd->use_aio will have
already been reused as cmd->ref by lo_rw_aio*. Fix it by not using a
union. On x86_64, there's a hole after the union anyways, so this
doesn't make struct loop_cmd any bigger.
Fixes: 92d773324b7e ("block/loop: fix use after free")
Signed-off-by: Omar Sandoval <osandov@fb.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Diffstat (limited to 'net/ipv4/esp4.c')
0 files changed, 0 insertions, 0 deletions