diff options
| author | Brian King <brking@us.ibm.com> | 2005-12-12 20:05:08 +0100 |
|---|---|---|
| committer | James Bottomley <jejb@mulgrave.(none)> | 2005-12-12 21:27:05 +0100 |
| commit | 1a68de5c08be8c77c4ad208306187bd95107c7cd (patch) | |
| tree | 27069553f2a991578355a26bddff2528014dc6fd /drivers | |
| parent | [SCSI] fix panic when ejecting ieee1394 ipod (diff) | |
| download | linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.tar.xz linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.zip | |
[SCSI] fix double free of scsi request queue
Current scsi scanning code appears to have a use after free
bug is a LLDD's slave_alloc fails. Remove the redundant
scsi_free_queue.
Signed-off-by: Brian King <brking@us.ibm.com>
Signed-off-by: James Bottomley <James.Bottomley@SteelEye.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/scsi/scsi_scan.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/scsi/scsi_scan.c b/drivers/scsi/scsi_scan.c index 374853df9cca..be276ea8f033 100644 --- a/drivers/scsi/scsi_scan.c +++ b/drivers/scsi/scsi_scan.c @@ -279,7 +279,6 @@ static struct scsi_device *scsi_alloc_sdev(struct scsi_target *starget, out_device_destroy: transport_destroy_device(&sdev->sdev_gendev); - scsi_free_queue(sdev->request_queue); put_device(&sdev->sdev_gendev); out: if (display_failure_msg) |