diff options
author | Nicholas Bellinger <nab@linux-iscsi.org> | 2015-02-23 11:57:51 +0300 |
---|---|---|
committer | Nicholas Bellinger <nab@linux-iscsi.org> | 2015-03-20 09:10:01 +0300 |
commit | f068fbc82e7696d67b1bb8189306865bedf368b6 (patch) | |
tree | a726bc81c1007691a0387ae254335b9763b27e09 /drivers/scsi/53c700.c | |
parent | 2a03ee8c5677acd7ab61b0be7b880b3d3de1bcf2 (diff) | |
download | linux-f068fbc82e7696d67b1bb8189306865bedf368b6.tar.xz |
iscsi-target: Avoid early conn_logout_comp for iser connections
This patch fixes a iser specific logout bug where early complete()
of conn->conn_logout_comp in iscsit_close_connection() was causing
isert_wait4logout() to complete too soon, triggering a use after
free NULL pointer dereference of iscsi_conn memory.
The complete() was originally added for traditional iscsi-target
when a ISCSI_LOGOUT_OP failed in iscsi_target_rx_opcode(), but given
iser-target does not wait in logout failure, this special case needs
to be avoided.
Reported-by: Sagi Grimberg <sagig@mellanox.com>
Cc: Sagi Grimberg <sagig@mellanox.com>
Cc: Slava Shwartsman <valyushash@gmail.com>
Cc: <stable@vger.kernel.org> # v3.10+
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Diffstat (limited to 'drivers/scsi/53c700.c')
0 files changed, 0 insertions, 0 deletions