Jianglei, > fc_exch_release(ep) will decrease the ep's reference count. When the > reference count reaches zero, it is freed. But ep is still used in the > following code, which will lead to a use after free. Applied to 5.18/scsi-staging, thanks! -- Martin K. Petersen Oracle Linux Engineering
