Re: [BUG] Yet another scsi_cmnd leak?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 29 Sep 2005, Mike Christie wrote:

> Alan Stern wrote:
> > James:
> > 
> > This report is based on 2.6.14-rc2-git6.  The code in your scsi-misc-2.6 
> > git tree is somewhat different (and I don't know which is more current), 
> > but it still contains the same bug.
> > 
> > 
> > In scsi_prep_fn, a request can get deferred if scsi_init_io fails to 
> > allocate an sg table.  When this happens, the scsi_cmnd isn't released and 
> > the request is not marked DONTPREP.
> > 
> > Then when scsi_prep_fn is called again, the request may be killed for 
> > a number of reasons.  The code branches to the kill: label near the end of 
> > the routine, which returns BLKPREP_KILL.
> > 
> > Isn't it true that when this happens, the scsi_cmnd allocated during the
> > original prep will never be released?
> > 
> > It appears that scsi_prep_fn is undecided about whether or not the request
> > is allowed to have a scsi_cmnd already.  The jumps to kill: seem to assume
> > that it isn't, but the code for allocating a new scsi_cmnd tests for an
> > existing one first.
> > 
> 
> The gotos used to be just a return BLKPREP* and were added so I did not 
> have to write DID_NO_CONNECT or unplug multiple times :) I think you are 
> right and we need to further unwind what a previous prep had done 
> becuase when we return with BLKPREP_KILL we only hear about this command 
> again if it's request has a end_io function or waiting completion.

I'm still not very clear about the conditions under which a request on the
queue can be partially prepared -- for example, scsi_cmnd assigned but 
not the sg table.  For the normal submission pathways, it looks like this 
happens only when the sg allocation fails.  In those cases it wouldn't 
hurt to release the scsi_cmnd before deferring.  Or before returning 
BLKPREP_KILL.

But what about other pathways?  As long as the special scsi_request things 
exist, I don't know what should be done.  I saw you had submitted patches 
to get rid of them; how far has that progressed?

Alan Stern

-
: send the line "unsubscribe linux-scsi" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [SCSI Target Devel]     [Linux SCSI Target Infrastructure]     [Kernel Newbies]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Linux IIO]     [Samba]     [Device Mapper]
  Powered by Linux