Messages in this thread | | | From | Paolo Bonzini <> | Subject | [PATCH 3.6 0/3] Fix use-after-free in PSCSI | Date | Wed, 5 Sep 2012 17:09:12 +0200 |
| |
Hi,
this series fixes the bug I reported with wrong sense data. The memory corruption is caused by using the sense data after freeing it. The series corrects it by moving the copy of the sense data earlier, to the transport_complete callback.
Please review and be kind on my first lio patches! :)
Paolo
Paolo Bonzini (3): target: move transport_get_sense_data target: simplify code around transport_get_sense_data target: fix use-after-free with PSCSI sense data
drivers/target/target_core_pscsi.c | 21 ++---- drivers/target/target_core_transport.c | 117 ++++++++++++-------------------- include/target/target_core_backend.h | 4 +- 3 files changed, 53 insertions(+), 89 deletions(-)
| |