diff options
| author | Mike Christie <michael.christie@oracle.com> | 2021-07-01 14:08:40 -0500 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2021-07-18 21:19:14 -0400 |
| commit | 7b0ddc1346089b62b45e688e350c9e1c3f7a3ab2 (patch) | |
| tree | e9f64cafbac0380d293d9ef23bdcbeb5cf35a898 /tools/perf/scripts/python/bin/stackcollapse-record | |
| parent | 1c0810e79cb3d2c46bb8f2a3e98609de1f009f3e (diff) | |
| download | linux-7b0ddc1346089b62b45e688e350c9e1c3f7a3ab2.tar.gz linux-7b0ddc1346089b62b45e688e350c9e1c3f7a3ab2.zip | |
scsi: be2iscsi: Fix use-after-free during IP updates
This fixes a bug found by Lv Yunlong where, because beiscsi_exec_nemb_cmd()
frees memory for the be_dma_mem cmd(), we can access freed memory when
beiscsi_if_clr_ip()/beiscsi_if_set_ip()'s call to beiscsi_exec_nemb_cmd()
fails and we access the freed req. This fixes the issue by having the
caller free the cmd's memory.
Link: https://lore.kernel.org/r/20210701190840.175120-1-michael.christie@oracle.com
Reported-by: Lv Yunlong <lyl2019@mail.ustc.edu.cn>
Signed-off-by: Mike Christie <michael.christie@oracle.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-record')
0 files changed, 0 insertions, 0 deletions