tree 97f509245721305049e85f45a57552d2548a1270
parent 0bc4da0bc776d0940aed94f65b7fff462f7bd649
author Nicholas Bellinger <nab@linux-iscsi.org> 1410979517 -0700
committer chrmhoffmann <chrmhoffmann@gmail.com> 1586074844 +0200

iscsi-target: Fix memory corruption in iscsit_logout_post_handler_diffcid

commit b53b0d99d6fbf7d44330395349a895521cfdbc96 upstream.

This patch fixes a bug in iscsit_logout_post_handler_diffcid() where
a pointer used as storage for list_for_each_entry() was incorrectly
being used to determine if no matching entry had been found.

This patch changes iscsit_logout_post_handler_diffcid() to key off
bool conn_found to determine if the function needs to exit early.

Reported-by: Joern Engel <joern@logfs.org>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: Zefan Li <lizefan@huawei.com>