aio: fix aio request leak when events are reaped by userspace
authorBenjamin LaHaise <bcrl@kvack.org>
Tue, 24 Jun 2014 17:12:55 +0000 (13:12 -0400)
committerBenjamin LaHaise <bcrl@kvack.org>
Tue, 24 Jun 2014 17:32:27 +0000 (13:32 -0400)
commitf8567a3845ac05bb28f3c1b478ef752762bd39ef
tree2b84f49db85647fc69e7e00f41281ef3101a6fd8
parent8b8f5d9715845f9ae2b89ce406e71877965b29ca
aio: fix aio request leak when events are reaped by userspace

The aio cleanups and optimizations by kmo that were merged into the 3.10
tree added a regression for userspace event reaping.  Specifically, the
reference counts are not decremented if the event is reaped in userspace,
leading to the application being unable to submit further aio requests.
This patch applies to 3.12+.  A separate backport is required for 3.10/3.11.
This issue was uncovered as part of CVE-2014-0206.

Signed-off-by: Benjamin LaHaise <bcrl@kvack.org>
Cc: stable@vger.kernel.org
Cc: Kent Overstreet <kmo@daterainc.com>
Cc: Mateusz Guzik <mguzik@redhat.com>
Cc: Petr Matousek <pmatouse@redhat.com>
fs/aio.c