Re: [PATCH 1/2] io_uring/kbuf: fix signedness in this_len calculation

[Harshit Mogalapalli]

Hi Jens,


> > I see the Fixes tag documented is "Fixes: ae98dbf43d75
> > ("io_uring/kbuf: add support for incremental buffer consumption")"
> >
> > I think a more accurate Fixes tag is "Fixes: cf9536e550dd
> > ("io_uring/kbuf: enable bundles for incrementally consumed buffers")"
> > , Reason: Commit cf9536e550dd243a1681fdbf804221527da20a80 is the first
> > to move incremental-buffer accounting into the new helper
> > io_kbuf_inc_commit(), introducing this_len = min_t(int, len,
> > buf->len);. The signed int here is exactly what
> > c64eff368ac676e8540344d27a3de47e0ad90d21 corrects.
>
> I took a look, and indeed, it is mis-tagged. The correct fixes tag
> should've been for cf9536e550dd.

Thanks a lot for taking a look, will send a patch to vulns.git to get 
the CVE information corrected.

Regards,
Harshit