From 36dba9e49c51d4908d713a0fe3fe1c91d9588071 Mon Sep 17 00:00:00 2001
From: Bing-Jhong Billy Jheng <billy@starlabs.sg>
Date: Thu, 15 Dec 2022 06:43:56 -0800
Subject: [PATCH] io_uring: add missing item types for splice request

stable inclusion
from stable-v5.10.160
commit 75454b4bbfc7e6a4dd8338556f36ea9107ddf61a
category: bugfix
issue: I6ANAQ
CVE: CVE-2022-4696

Signed-off-by: gaochao <gaochao49@huawei.com>
---------------------------------------

Splice is like read/write and should grab current->nsproxy, denoted by
IO_WQ_WORK_FILES as it refers to current->files as well

Signed-off-by: Bing-Jhong Billy Jheng <billy@starlabs.sg>
Reviewed-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
 fs/io_uring.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/fs/io_uring.c b/fs/io_uring.c
index 8b0f67489fff..55166d9d7d13 100644
--- a/fs/io_uring.c
+++ b/fs/io_uring.c
@@ -935,7 +935,7 @@ static const struct io_op_def io_op_defs[] = {
 		.needs_file		= 1,
 		.hash_reg_file		= 1,
 		.unbound_nonreg_file	= 1,
-		.work_flags		= IO_WQ_WORK_BLKCG,
+		.work_flags		= IO_WQ_WORK_BLKCG | IO_WQ_WORK_FILES,
 	},
 	[IORING_OP_PROVIDE_BUFFERS] = {},
 	[IORING_OP_REMOVE_BUFFERS] = {},
-- 
Gitee