Paolo Bonzini
e4594bb505
[SCSI] virtio_scsi: fix TMF use-after-free
...
Fix a use-after-free in the TMF path, where cmd may have been already
freed by virtscsi_complete_free when wait_for_completion restarts
executing virtscsi_tmf. Technically a race, but in practice the command
will always be freed long before the completion waiter is awoken.
The fix is to make callers specifying a completion responsible for
freeing the command in all cases.
Signed-off-by: Hu Tao <hutao@cn.fujitsu.com >
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com >
Signed-off-by: James Bottomley <JBottomley@Parallels.com >
2012-05-10 08:27:06 +01:00
..
2012-03-30 16:03:15 -07:00
2012-03-28 18:30:03 +01:00
2012-03-28 15:58:21 -07:00
2012-03-28 10:02:46 +01:00
2012-03-31 13:31:23 -07:00
2012-03-23 10:07:16 -07:00
2012-03-22 12:55:29 -07:00
2012-03-31 13:31:23 -07:00
2012-03-28 11:33:24 +11:00
2012-03-22 12:55:29 -07:00
2012-04-25 08:46:29 +01:00
2012-04-23 12:15:53 +01:00
2012-04-05 15:30:34 -07:00
2012-03-31 13:31:23 -07:00
2012-03-22 12:55:29 -07:00
2012-03-31 13:31:23 -07:00
2012-05-10 08:19:10 +01:00
2012-03-31 13:31:23 -07:00
2012-03-27 08:26:28 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-31 13:31:23 -07:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-05-10 08:24:13 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-04-23 12:11:47 +01:00
2012-03-28 15:09:28 +01:00
2012-03-31 13:31:23 -07:00
2012-03-22 12:55:29 -07:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-31 13:31:23 -07:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-31 13:31:23 -07:00
2012-04-15 11:08:53 -07:00
2012-04-22 18:56:18 +01:00
2012-03-27 08:26:36 +01:00
2012-03-31 13:31:23 -07:00
2012-03-31 13:31:23 -07:00
2012-03-27 08:26:34 +01:00
2012-03-21 09:40:26 -07:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-03-28 18:30:03 +01:00
2012-05-10 08:27:06 +01:00
2012-03-27 08:26:36 +01:00
2012-03-27 08:26:36 +01:00
2012-03-28 18:30:03 +01:00