Pan Bian 1a4c4df217 scsi: fnic: fix use after free ...

[ Upstream commit ec990306f77fd4c58c3b27cc3b3c53032d6e6670 ]

The memory chunk io_req is released by mempool_free. Accessing
io_req->start_time will result in a use after free bug. The variable
start_time is a backup of the timestamp. So, use start_time here to
avoid use after free.

Link: https://lore.kernel.org/r/1572881182-37664-1-git-send-email-bianpan2016@163.com
Signed-off-by: Pan Bian <bianpan2016@163.com>
Reviewed-by: Satish Kharat <satishkh@cisco.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-10-01 13:17:14 +02:00

..

cq_desc.h

…

cq_enet_desc.h

…

cq_exch_desc.h

…

fcpio.h

…

fnic_attrs.c

…

fnic_debugfs.c

…

fnic_fcs.c

…

fnic_fip.h

…

fnic_io.h

…

fnic_isr.c

scsi: fnic: fix msix interrupt allocation

2019-09-07 15:29:12 -04:00

fnic_main.c

…

fnic_res.c

…

fnic_res.h

…

fnic_scsi.c

scsi: fnic: fix use after free

2020-10-01 13:17:14 +02:00

fnic_stats.h

…

fnic_trace.c

…

fnic_trace.h

…

fnic.h

…

Makefile

…

rq_enet_desc.h

…

vnic_cq_copy.h

…

vnic_cq.c

…

vnic_cq.h

…

vnic_dev.c

scsi: fnic: fix invalid stack access

2020-01-23 08:22:35 +01:00

vnic_dev.h

…

vnic_devcmd.h

…

vnic_intr.c

…

vnic_intr.h

…

vnic_nic.h

…

vnic_resource.h

…

vnic_rq.c

…

vnic_rq.h

…

vnic_scsi.h

…

vnic_stats.h

…

vnic_wq_copy.c

…

vnic_wq_copy.h

…

vnic_wq.c

…

vnic_wq.h

…

wq_enet_desc.h

…