diff options
| author | Varun Prakash <varun@chelsio.com> | 2017-05-16 15:53:44 +0200 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2017-05-24 04:39:14 +0200 |
| commit | 75b61250bf687c686ba6850c34eccc1303b0b827 (patch) | |
| tree | adf54de459a66c5a251df5bb5bcd6bd72da132d2 /kernel/events/callchain.c | |
| parent | scsi: qedi: Fix endpoint NULL panic during recovery. (diff) | |
| download | linux-75b61250bf687c686ba6850c34eccc1303b0b827.tar.xz linux-75b61250bf687c686ba6850c34eccc1303b0b827.zip | |
scsi: libcxgbi: fix skb use after free
skb->data is assigned to task->hdr in cxgbi_conn_alloc_pdu(),
skb gets freed after tx but task->hdr is still dereferenced in
iscsi_tcp_task_xmit() to avoid this call skb_get() after allocating skb
and free the skb in cxgbi_cleanup_task() or before allocating new skb in
cxgbi_conn_alloc_pdu().
Signed-off-by: Varun Prakash <varun@chelsio.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'kernel/events/callchain.c')
0 files changed, 0 insertions, 0 deletions