| commit | 9b796d06d5d1b1e85ae2316a283ea11dd739ef96 | [log] [tgz] |
|---|---|---|
| author | Bart Van Assche <bvanassche@acm.org> | Fri Aug 24 10:27:54 2012 +0000 |
| committer | Roland Dreier <roland@purestorage.com> | Sun Sep 30 20:36:47 2012 -0700 |
| tree | bc3a48847b26bc54d3d87f0ae6d264a0ed4ff681 | |
| parent | 979570e02981d4a8fc20b3cc8fd651856c98ee9d [diff] |
IB/srp: Fix use-after-free in srp_reset_req() srp_free_req() uses the scsi_cmnd structure contents to unmap buffers, so we must invoke srp_free_req() before we release ownership of that structure. Signed-off-by: Bart Van Assche <bvanassche@acm.org> Acked-by: David Dillow <dillowda@ornl.gov> Cc: <stable@vger.kernel.org> Signed-off-by: Roland Dreier <roland@purestorage.com>