On Sep 23, 2009, at 7:15 AM, Jiri Slaby wrote: > Stanse found a NULL-ptr dereference on one fail path in > qla25xx_create_rsp_que. It jumps to que_failed label and > qla25xx_free_rsp_que there dereferences rsp which is NULL. > > Return with ENOMEM directly instead. > Thanks for pointing it out. There is another code path (create_req_que) where the same bug exists. I will send a patch that takes care of the both. -Anirban -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html