OSDN Git Service

scsi: lpfc: Use after free in lpfc_rq_buf_free()
authorDan Carpenter <dan.carpenter@oracle.com>
Wed, 22 Nov 2017 08:58:03 +0000 (11:58 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 25 Feb 2018 10:08:01 +0000 (11:08 +0100)
commitdd079e26a0e488267af0aeae1317245d60433111
treea5b64e61f9351f2afd05d6d277d2c7dd7c43bdea
parent9b8ffbead22d93673ac41b60eeb73869be20c860
scsi: lpfc: Use after free in lpfc_rq_buf_free()

[ Upstream commit 9816ef6ecbc102b9bcbb1d83e12c7fb19924f38c ]

The error message dereferences "rqb_entry" so we need to print it first
and then free the buffer.

Fixes: 6c621a2229b0 ("scsi: lpfc: Separate NVMET RQ buffer posting from IO resources SGL/iocbq/context")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Dick Kennedy <dick.kennedy@broadcom.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/scsi/lpfc/lpfc_mem.c