Re: [PATCH] target/user: Fix use-after-free of tcmu_cmds if they are expired

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/22/2016 01:35 AM, Andy Grover wrote:
> Don't free the cmd in tcmu_check_expired_cmd, it's still referenced by
> an entry in our cmd_id->cmd idr. If userspace ever resumes processing,
> tcmu_handle_completions() will use the now-invalid cmd pointer.
> 
> Instead, don't free cmd. It will be freed by tcmu_handle_completion() if
> userspace ever recovers, or tcmu_free_device if not.

Thanks for the patch. It has been applied on my for-v4.10 branch.

Bart.
--
To unsubscribe from this list: send the line "unsubscribe target-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux SCSI]     [Kernel Newbies]     [Linux SCSI Target Infrastructure]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Linux IIO]     [Device Mapper]

  Powered by Linux