| commit | 842f96124c5617b060cc0f071dcfb6ab24bdd042 | [log] [tgz] |
|---|---|---|
| author | Jens Axboe <axboe@kernel.dk> | Tue Oct 29 12:34:10 2019 -0600 |
| committer | Jens Axboe <axboe@kernel.dk> | Tue Oct 29 15:43:30 2019 -0600 |
| tree | 2cd9617a5a7f63c53262dbd7aee1b5aefdaa3af7 | |
| parent | 65e19f54d29cd8559ce60cfd0d751bef7afbdc5c [diff] |
io_uring: fix race with canceling timeouts
If we get -1 from hrtimer_try_to_cancel(), we know that the timer
is running. Hence leave all completion to the timeout handler. If
we don't, we can corrupt the list and miss a completion.
Fixes: 11365043e527 ("io_uring: add support for canceling timeout requests")
Reported-by: Hrvoje Zeba <zeba.hrvoje@gmail.com>
Tested-by: Hrvoje Zeba <zeba.hrvoje@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>