diff options
| author | Damien Le Moal <[email protected]> | 2023-03-06 01:13:13 +0000 |
|---|---|---|
| committer | Christoph Hellwig <[email protected]> | 2023-03-15 13:58:53 +0000 |
| commit | 6173a77b7e9d3e202bdb9897b23f2a8afe7bf286 (patch) | |
| tree | 706cc3488fc991687413ee9496eaea9661fcc29e /tools/perf/scripts/python/bin/export-to-postgresql-report | |
| parent | nvme-trace: show more opcode names (diff) | |
| download | kernel-6173a77b7e9d3e202bdb9897b23f2a8afe7bf286.tar.gz kernel-6173a77b7e9d3e202bdb9897b23f2a8afe7bf286.zip | |
nvmet: avoid potential UAF in nvmet_req_complete()
An nvme target ->queue_response() operation implementation may free the
request passed as argument. Such implementation potentially could result
in a use after free of the request pointer when percpu_ref_put() is
called in nvmet_req_complete().
Avoid such problem by using a local variable to save the sq pointer
before calling __nvmet_req_complete(), thus avoiding dereferencing the
req pointer after that function call.
Fixes: a07b4970f464 ("nvmet: add a generic NVMe target")
Signed-off-by: Damien Le Moal <[email protected]>
Reviewed-by: Chaitanya Kulkarni <[email protected]>
Signed-off-by: Christoph Hellwig <[email protected]>
Diffstat (limited to 'tools/perf/scripts/python/bin/export-to-postgresql-report')
0 files changed, 0 insertions, 0 deletions