diff options
| author | Christoph Hellwig <[email protected]> | 2014-04-15 10:24:56 +0000 |
|---|---|---|
| committer | James Bottomley <[email protected]> | 2014-04-21 14:57:22 +0000 |
| commit | 68c03d9193f55dad93036f439b94912c5003a173 (patch) | |
| tree | 86dfc9927fe8b45aed7be80ec589231c3573c835 /lib/dump_stack.c | |
| parent | [SCSI] don't reference freed command in scsi_init_sgtable (diff) | |
| download | kernel-68c03d9193f55dad93036f439b94912c5003a173.tar.gz kernel-68c03d9193f55dad93036f439b94912c5003a173.zip | |
[SCSI] don't reference freed command in scsi_prep_return
Patch
commit 0479633686d370303e3430256ace4bd5f7f138dc
Author: Christoph Hellwig <[email protected]>
Date: Thu Feb 20 14:20:55 2014 -0800
[SCSI] do not manipulate device reference counts in scsi_get/put_command
Introduced a use after free:I in the kill case of scsi_prep_return we have to
release our device reference, but we do this trying to reference the just
freed command. Use the local sdev pointer instead.
Fixes: 0479633686d370303e3430256ace4bd5f7f138dc
Reported-by: Joe Lawrence <[email protected]>
Signed-off-by: Christoph Hellwig <[email protected]>
Signed-off-by: James Bottomley <[email protected]>
Diffstat (limited to 'lib/dump_stack.c')
0 files changed, 0 insertions, 0 deletions