On Mon, 18 May 2020 18:48:33 +0200, Bodo Stroesser wrote:
> When tcmu queues a new command - no matter whether in command
> ring or in qfull_queue - a cmd_id from IDR udev->commands is
> assigned to the command.
>
> If userspaces sends a wrong command completion containing the
> cmd_id of a command on the qfull_queue, tcmu_handle_completions()
> finds the command in the IDR and calls tcmu_handle_completion()
> for it. This might do some nasty things, because commands in
> qfull_queue do not have a valid dbi list.
>
> [...]
Applied to 5.8/scsi-queue, thanks!
[1/1] scsi: target: tcmu: Userspace must not complete queued commands
https://git.kernel.org/mkp/scsi/c/61fb24822166
PS. Please run checkpatch. Had to fix a bunch of whitespace errors.
--
Martin K. Petersen Oracle Linux Engineering
