linux-master/io_uring/rsrc.c

354 				 struct io_uring_rsrc_update2 *up,
357 	u64 __user *tags = u64_to_user_ptr(up->tags);
358 	__s32 __user *fds = u64_to_user_ptr(up->data);
366 	if (up->offset + nr_args > ctx->nr_user_files)
384 		i = array_index_nospec(up->offset + done, ctx->nr_user_files);
419 				   struct io_uring_rsrc_update2 *up,
422 	u64 __user *tags = u64_to_user_ptr(up->tags);
423 	struct iovec iov, __user *iovs = u64_to_user_ptr(up->data);
430 	if (up->offset + nr_args > ctx->nr_user_bufs)
455 		i = array_index_nospec(up->offset + done, ctx->nr_user_bufs);
473 				     struct io_uring_rsrc_update2 *up,
480 	if (check_add_overflow(up->offset, nr_args, &tmp))
485 		return __io_sqe_files_update(ctx, up, nr_args);
487 		return __io_sqe_buffers_update(ctx, up, nr_args);
495 	struct io_uring_rsrc_update2 up;
499 	memset(&up, 0, sizeof(up));
500 	if (copy_from_user(&up, arg, sizeof(struct io_uring_rsrc_update)))
502 	if (up.resv || up.resv2)
504 	return __io_register_rsrc_update(ctx, IORING_RSRC_FILE, &up, nr_args);
510 	struct io_uring_rsrc_update2 up;
512 	if (size != sizeof(up))
514 	if (copy_from_user(&up, arg, sizeof(up)))
516 	if (!up.nr || up.resv || up.resv2)
518 	return __io_register_rsrc_update(ctx, type, &up, up.nr);
555 	struct io_rsrc_update *up = io_kiocb_to_cmd(req, struct io_rsrc_update);
562 	up->offset = READ_ONCE(sqe->off);
563 	up->nr_args = READ_ONCE(sqe->len);
564 	if (!up->nr_args)
566 	up->arg = READ_ONCE(sqe->addr);
573 	struct io_rsrc_update *up = io_kiocb_to_cmd(req, struct io_rsrc_update);
574 	__s32 __user *fds = u64_to_user_ptr(up->arg);
582 	for (done = 0; done < up->nr_args; done++) {
611 	struct io_rsrc_update *up = io_kiocb_to_cmd(req, struct io_rsrc_update);
616 	up2.offset = up->offset;
617 	up2.data = up->arg;
623 	if (up->offset == IORING_FILE_INDEX_ALLOC) {
628 						&up2, up->nr_args);
1051 		 * 1) it's a BVEC iter, we set it up