Skip to content

Commit 0bade23

Browse files
committed
eventpoll: rename ep_remove_safe() back to ep_remove()
The current name is just confusing and doesn't clarify anything. Link: https://patch.msgid.link/20260423-work-epoll-uaf-v1-4-2470f9eec0f5@kernel.org Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
1 parent 0feaf64 commit 0bade23

1 file changed

Lines changed: 8 additions & 8 deletions

File tree

fs/eventpoll.c

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -882,7 +882,7 @@ static bool ep_remove_epi(struct eventpoll *ep, struct epitem *epi)
882882
/*
883883
* ep_remove variant for callers owing an additional reference to the ep
884884
*/
885-
static void ep_remove_safe(struct eventpoll *ep, struct epitem *epi)
885+
static void ep_remove(struct eventpoll *ep, struct epitem *epi)
886886
{
887887
struct file *file = epi->ffd.file;
888888

@@ -929,7 +929,7 @@ static void ep_clear_and_put(struct eventpoll *ep)
929929

930930
/*
931931
* Walks through the whole tree and try to free each "struct epitem".
932-
* Note that ep_remove_safe() will not remove the epitem in case of a
932+
* Note that ep_remove() will not remove the epitem in case of a
933933
* racing eventpoll_release_file(); the latter will do the removal.
934934
* At this point we are sure no poll callbacks will be lingering around.
935935
* Since we still own a reference to the eventpoll struct, the loop can't
@@ -938,7 +938,7 @@ static void ep_clear_and_put(struct eventpoll *ep)
938938
for (rbp = rb_first_cached(&ep->rbr); rbp; rbp = next) {
939939
next = rb_next(rbp);
940940
epi = rb_entry(rbp, struct epitem, rbn);
941-
ep_remove_safe(ep, epi);
941+
ep_remove(ep, epi);
942942
cond_resched();
943943
}
944944

@@ -1631,21 +1631,21 @@ static int ep_insert(struct eventpoll *ep, const struct epoll_event *event,
16311631
mutex_unlock(&tep->mtx);
16321632

16331633
/*
1634-
* ep_remove_safe() calls in the later error paths can't lead to
1634+
* ep_remove() calls in the later error paths can't lead to
16351635
* ep_free() as the ep file itself still holds an ep reference.
16361636
*/
16371637
ep_get(ep);
16381638

16391639
/* now check if we've created too many backpaths */
16401640
if (unlikely(full_check && reverse_path_check())) {
1641-
ep_remove_safe(ep, epi);
1641+
ep_remove(ep, epi);
16421642
return -EINVAL;
16431643
}
16441644

16451645
if (epi->event.events & EPOLLWAKEUP) {
16461646
error = ep_create_wakeup_source(epi);
16471647
if (error) {
1648-
ep_remove_safe(ep, epi);
1648+
ep_remove(ep, epi);
16491649
return error;
16501650
}
16511651
}
@@ -1669,7 +1669,7 @@ static int ep_insert(struct eventpoll *ep, const struct epoll_event *event,
16691669
* high memory pressure.
16701670
*/
16711671
if (unlikely(!epq.epi)) {
1672-
ep_remove_safe(ep, epi);
1672+
ep_remove(ep, epi);
16731673
return -ENOMEM;
16741674
}
16751675

@@ -2364,7 +2364,7 @@ int do_epoll_ctl(int epfd, int op, int fd, struct epoll_event *epds,
23642364
* The eventpoll itself is still alive: the refcount
23652365
* can't go to zero here.
23662366
*/
2367-
ep_remove_safe(ep, epi);
2367+
ep_remove(ep, epi);
23682368
error = 0;
23692369
} else {
23702370
error = -ENOENT;

0 commit comments

Comments
 (0)