1
0
Fork 0
remarkable-linux/drivers/xen
Bart Van Assche 71b1caea95 xen/scsiback: Fix a TMR related use-after-free
commit 9f4ab18ac5 upstream.

scsiback_release_cmd() must not dereference se_cmd->se_tmr_req
because that memory is freed by target_free_cmd_mem() before
scsiback_release_cmd() is called. Fix this use-after-free by
inlining struct scsiback_tmr into struct vscsibk_pend.

Signed-off-by: Bart Van Assche <bart.vanassche@sandisk.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Hannes Reinecke <hare@suse.com>
Cc: David Disseldorp <ddiss@suse.de>
Cc: xen-devel@lists.xenproject.org
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-07-27 15:07:59 -07:00
..
events xen: Revert commits da72ff5bfc and 72a9b18629 2017-05-14 14:00:22 +02:00
xen-pciback xen/pciback: support driver_override 2016-09-30 11:49:02 +01:00
xenbus xen: fixes for 4.9-rc2 2016-10-24 19:52:24 -07:00
xenfs xen: audit usages of module.h ; remove unnecessary instances 2016-03-21 15:13:32 +00:00
Kconfig ARM64: XEN: Add a function to initialize Xen specific UEFI runtime services 2016-07-06 10:34:46 +01:00
Makefile Xen: ARM: Add support for mapping platform device mmio 2016-07-06 10:34:43 +01:00
acpi.c xen: rename dom0_op to platform_op 2015-12-21 14:40:55 +00:00
arm-device.c Xen: ARM: Add support for mapping AMBA device mmio 2016-07-06 10:34:43 +01:00
balloon.c xen/balloon: Fix declared-but-not-defined warning 2016-06-23 11:36:15 +01:00
biomerge.c xen/biomerge: Don't allow biovec's to be merged when Linux is not using 4KB pages 2015-10-23 14:20:36 +01:00
cpu_hotplug.c xen, cpu_hotplug: call device_offline instead of cpu_down 2015-10-23 14:20:48 +01:00
dbgp.c xen: Use dev_is_pci() to check whether it is pci device 2014-01-07 09:53:33 -05:00
efi.c XEN: EFI: Move x86 specific codes to architecture directory 2016-07-06 10:34:46 +01:00
evtchn.c xen/evtchn: use xen_vcpu_id mapping 2016-07-25 13:34:18 +01:00
fallback.c xen-pciback: notify hypervisor about devices intended to be assigned to guests 2013-03-22 10:20:55 -04:00
features.c xen: audit usages of module.h ; remove unnecessary instances 2016-03-21 15:13:32 +00:00
gntalloc.c xen: use vma_pages(). 2016-07-06 10:34:47 +01:00
gntdev.c xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing 2017-01-06 10:40:17 +01:00
grant-table.c xen: audit usages of module.h ; remove unnecessary instances 2016-03-21 15:13:32 +00:00
manage.c xenbus: advertise control feature flags 2016-10-24 15:48:40 +01:00
mcelog.c xen/mce: fix up xen_late_init_mcelog() error handling 2015-03-16 14:49:15 +00:00
pci.c xen/pci: Try harder to get PXM information for Xen 2015-04-15 10:57:28 +01:00
pcpu.c xen: rename dom0_op to platform_op 2015-12-21 14:40:55 +00:00
platform-pci.c xen: Revert commits da72ff5bfc and 72a9b18629 2017-05-14 14:00:22 +02:00
preempt.c xen/preempt: use need_resched() instead of should_resched() 2015-08-20 12:24:14 +01:00
privcmd.c xen/privcmd: Support correctly 64KB page granularity when mapping memory 2017-06-14 15:05:58 +02:00
privcmd.h
swiotlb-xen.c swiotlb-xen: update dev_addr after swapping pages 2017-07-05 14:40:22 +02:00
sys-hypervisor.c xen: rename xen_pmu_init() in sys-hypervisor.c 2016-08-24 18:45:25 +01:00
time.c xen: add static initialization of steal_clock op to xen_time_ops 2016-07-26 14:07:06 +01:00
tmem.c cleancache: constify cleancache_ops structure 2016-01-27 09:09:57 -05:00
xen-acpi-cpuhotplug.c xen: rename dom0_op to platform_op 2015-12-21 14:40:55 +00:00
xen-acpi-memhotplug.c ACPICA: Resources: Provide common part for struct acpi_resource_address structures. 2015-01-26 16:09:56 +01:00
xen-acpi-pad.c xen: rename dom0_op to platform_op 2015-12-21 14:40:55 +00:00
xen-acpi-processor.c xen/acpi: upload PM state from init-domain to Xen 2017-03-30 09:41:26 +02:00
xen-balloon.c drivers/xen: make [xen-]ballon explicitly non-modular 2016-03-21 15:13:44 +00:00
xen-scsiback.c xen/scsiback: Fix a TMR related use-after-free 2017-07-27 15:07:59 -07:00
xen-selfballoon.c mm, frontswap: convert frontswap_enabled to static key 2016-07-26 16:19:19 -07:00
xen-stub.c xen/acpi: remove redundant acpi/acpi_drivers.h include 2013-03-11 13:53:02 -04:00
xlate_mmu.c Xen: xlate: Use page_to_xen_pfn instead of page_to_pfn 2016-07-06 10:34:42 +01:00