diff options
| author | Daniel Gryniewicz <dang@linuxbox.com> | 2014-09-16 16:41:13 +0200 |
|---|---|---|
| committer | James Bottomley <JBottomley@Parallels.com> | 2014-09-19 14:23:33 +0200 |
| commit | f81426a84bef870d26e5e752772d8ca203cd4aed (patch) | |
| tree | 83463b74b0232ec854ed7dc79341c2d3ba836265 /MAINTAINERS | |
| parent | [SCSI] fix regression that accidentally disabled block-based tcq (diff) | |
| download | linux-f81426a84bef870d26e5e752772d8ca203cd4aed.tar.xz linux-f81426a84bef870d26e5e752772d8ca203cd4aed.zip | |
[SCSI] fix for bidi use after free
When ending a bi-directionional SCSI request, blk_finish_request()
cleans up and frees the request, but scsi_release_bidi_buffers() tries
to indirect through the request to find it's data buffers. This causes
a panic due to a null pointer dereference.
Move the call to scsi_release_bidi_buffers() before the call to
blk_finish_request().
Signed-off-by: Daniel Gryniewicz <dang@linuxbox.com>
Reviewed-by: Webb Scales <webbnh@hp.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Diffstat (limited to 'MAINTAINERS')
0 files changed, 0 insertions, 0 deletions