On Tue, 13 Jun 2023 09:43:00 -0500, Bob Pearson wrote:
> In the error exits in target_setup_session, if a branch is taken
> to free_sess: transport_free_session may call to target_free_cmd_counter
> and then fall through to call target_free_cmd_counter a second time.
> This can, and does, sometimes cause seg faults since the data field
> in cmd_cnt->refcnt has been freed in the first call. This patch
> fixes this problem by simply returning after the call to
> transport_free_session. The second call is redundant for those
> cases.
>
> [...]
Applied to 6.4/scsi-fixes, thanks!
[1/1] drivers: target: Fix error path in target_setup_session
https://git.kernel.org/mkp/scsi/c/91271699228b
--
Martin K. Petersen Oracle Linux Engineering
