| commit | 75b61250bf687c686ba6850c34eccc1303b0b827 | [log] [tgz] |
|---|---|---|
| author | Varun Prakash <varun@chelsio.com> | Tue May 16 19:23:44 2017 +0530 |
| committer | Martin K. Petersen <martin.petersen@oracle.com> | Tue May 23 22:39:14 2017 -0400 |
| tree | adf54de459a66c5a251df5bb5bcd6bd72da132d2 | |
| parent | b19775e4785996503b106e59d9d3a8839e677afd [diff] |
scsi: libcxgbi: fix skb use after free skb->data is assigned to task->hdr in cxgbi_conn_alloc_pdu(), skb gets freed after tx but task->hdr is still dereferenced in iscsi_tcp_task_xmit() to avoid this call skb_get() after allocating skb and free the skb in cxgbi_cleanup_task() or before allocating new skb in cxgbi_conn_alloc_pdu(). Signed-off-by: Varun Prakash <varun@chelsio.com> Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>