iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/target
History
Dan Carpenter 9d7464b188 scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd() 
The pr_debug() dereferences "cmd" after we already freed it by calling
tcmu_free_cmd(cmd).  The debug printk needs to be done earlier.

Link: https://lore.kernel.org/r/20200523101129.GB98132@mwanda
Fixes: 61fb24822166 ("scsi: target: tcmu: Userspace must not complete queued commands")
Reviewed-by: Mike Christie <mchristi@redhat.com>
Reviewed-by: David Disseldorp <ddiss@suse.de>
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
2020-05-26 15:54:39 -04:00
..
iscsi
scsi: target: iscsi: Remove the iscsi_data_count structure
2020-04-24 18:21:15 -04:00
loopback
scsi: target: loopback: Fix READ with data and sensebytes
2020-05-11 22:20:19 -04:00
sbp
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
tcm_fc
scsi: libfc: remove unnecessary assertion on ep variable
2019-12-19 22:08:55 -05:00
Kconfig
treewide: Add SPDX license identifier - Makefile/Kconfig
2019-05-21 10:50:46 +02:00
Makefile
…
target_core_alua.c
scsi: target: Make transport_flags per device
2020-05-07 22:39:21 -04:00
target_core_alua.h
…
target_core_configfs.c
scsi: target: tcmu: Make pgr_support and alua_support attributes writable
2020-05-07 22:39:22 -04:00
target_core_device.c
scsi: target: core: Add initiatorname to NON_EXISTENT_LUN error
2020-05-19 21:27:10 -04:00
target_core_fabric_configfs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
target_core_fabric_lib.c
scsi: target: core: Fix a pr_debug() argument
2019-11-19 21:41:11 -05:00
target_core_file.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
target_core_file.h
scsi: target: target/file: Add support of direct and async I/O
2018-05-14 22:40:08 -04:00
target_core_hba.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
target_core_iblock.c
scsi: target/iblock: Fix protection error with blocks greater than 512B
2019-12-19 18:50:34 -05:00
target_core_iblock.h
scsi: target/core: Use the SECTOR_SHIFT constant
2018-10-16 01:13:35 -04:00
target_core_internal.h
scsi: target/core: Make ABORT and LUN RESET handling synchronous
2018-12-07 21:22:55 -05:00
target_core_pr.c
scsi: target: Make transport_flags per device
2020-05-07 22:39:21 -04:00
target_core_pr.h
scsi: target/core: Rework the SPC-2 reservation handling code
2019-04-12 20:20:05 -04:00
target_core_pscsi.c
scsi: target: Make transport_flags per device
2020-05-07 22:39:21 -04:00
target_core_pscsi.h
…
target_core_rd.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
target_core_rd.h
…
target_core_sbc.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
target_core_spc.c
scsi: target: use an enum to track emulate_ua_intlck_ctrl
2020-02-21 17:37:16 -05:00
target_core_stat.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
target_core_tmr.c
scsi: target: convert boolean se_dev_attrib types to bool
2020-02-21 17:37:14 -05:00
target_core_tpg.c
scsi: target: Make transport_flags per device
2020-05-07 22:39:21 -04:00
target_core_transport.c
scsi: target: Make transport_flags per device
2020-05-07 22:39:21 -04:00
target_core_ua.c
scsi: target: use an enum to track emulate_ua_intlck_ctrl
2020-02-21 17:37:16 -05:00
target_core_ua.h
scsi: target: Fix handling of removed LUNs
2018-07-02 16:44:32 -04:00
target_core_user.c
scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd()
2020-05-26 15:54:39 -04:00
target_core_xcopy.c
scsi: target: use the stack for XCOPY passthrough cmds
2020-03-29 18:10:59 -04:00
target_core_xcopy.h
scsi: target: use the stack for XCOPY passthrough cmds
2020-03-29 18:10:59 -04:00