diff options
| author | Bart Van Assche <bvanassche@acm.org> | 2019-04-17 23:44:25 +0200 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2019-04-29 23:24:50 +0200 |
| commit | d8f945bf8096375f458683b5718722a2d5dda2f0 (patch) | |
| tree | 16e4abb84efc04039aec9d9ce7781b067c013a30 /drivers/scsi/zorro7xx.c | |
| parent | scsi: qla2xxx: Fix a qla24xx_enable_msix() error path (diff) | |
| download | linux-d8f945bf8096375f458683b5718722a2d5dda2f0.tar.xz linux-d8f945bf8096375f458683b5718722a2d5dda2f0.zip | |
scsi: qla2xxx: Fix use-after-free issues in qla2xxx_qpair_sp_free_dma()
The current order for freeing memory is as follows:
- struct crc_context itself.
- struct crc_context member pointers.
Change the freeing order into the following:
- struct crc_context member pointers.
- struct crc_context itself.
Detected by Coverity.
Cc: Himanshu Madhani <hmadhani@marvell.com>
Cc: Giridhar Malavali <gmalavali@marvell.com>
Fixes: 50b812755e97 ("scsi: qla2xxx: Fix DMA error when the DIF sg buffer crosses 4GB boundary") # v5.1-rc1.
Fixes: d74595278f4a ("scsi: qla2xxx: Add multiple queue pair functionality.") # v4.10.
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Acked-by: Himanshu Madhani <hmadhani@marvell.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'drivers/scsi/zorro7xx.c')
0 files changed, 0 insertions, 0 deletions