tree bc3a48847b26bc54d3d87f0ae6d264a0ed4ff681
parent 979570e02981d4a8fc20b3cc8fd651856c98ee9d
author Bart Van Assche <bvanassche@acm.org> 1345804074 +0000
committer Roland Dreier <roland@purestorage.com> 1349062607 -0700

IB/srp: Fix use-after-free in srp_reset_req()

srp_free_req() uses the scsi_cmnd structure contents to unmap
buffers, so we must invoke srp_free_req() before we release
ownership of that structure.

Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Acked-by: David Dillow <dillowda@ornl.gov>
Cc: <stable@vger.kernel.org>
Signed-off-by: Roland Dreier <roland@purestorage.com>