diff options
| author | Tony Battersby <[email protected]> | 2015-07-16 15:40:41 +0000 |
|---|---|---|
| committer | James Bottomley <[email protected]> | 2015-07-30 17:40:33 +0000 |
| commit | 0c958ecc69c277b25f38f72bc6d18ab145e8167c (patch) | |
| tree | bc2bad55954762cbafac0651b2250675762e890b /drivers/gpu/drm/i915/intel_dp_mst.c | |
| parent | ipr: Fix invalid array indexing for HRRQ (diff) | |
| download | kernel-0c958ecc69c277b25f38f72bc6d18ab145e8167c.tar.gz kernel-0c958ecc69c277b25f38f72bc6d18ab145e8167c.zip | |
scsi: fix memory leak with scsi-mq
Fix a memory leak with scsi-mq triggered by commands with large data
transfer length.
__sg_alloc_table() sets both table->nents and table->orig_nents to the
same value. When the scatterlist is DMA-mapped, table->nents is
overwritten with the (possibly smaller) size of the DMA-mapped
scatterlist, while table->orig_nents retains the original size of the
allocated scatterlist. scsi_free_sgtable() should therefore check
orig_nents instead of nents, and all code that initializes sdb->table
without calling __sg_alloc_table() should set both nents and orig_nents.
Fixes: d285203cf647 ("scsi: add support for a blk-mq based I/O path.")
Cc: <[email protected]> # 3.17+
Signed-off-by: Tony Battersby <[email protected]>
Reviewed-by: Christoph Hellwig <[email protected]>
Reviewed-by: Ewan D. Milne <[email protected]>
Signed-off-by: James Bottomley <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/i915/intel_dp_mst.c')
0 files changed, 0 insertions, 0 deletions