Paolo Bonzini d5829eac5f target: fix use-after-free with PSCSI sense data ...

The pointer to the sense buffer is fetched by transport_get_sense_data,
but this is called by target_complete_ok_work long after pscsi_req_done
has freed the struct that contains it.

Pass instead the fabric's sense buffer to transport_complete,
and copy the data to it directly in transport_complete.  Setting
SCF_TRANSPORT_TASK_SENSE also becomes a duty of transport_complete.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>

2012-09-05 17:20:28 -07:00

..

acpi

Merge branches 'delete-gts-bfs', 'misc', 'novell-bugzilla-757888-numa' and 'osc-pcie' into base

2012-08-03 00:31:23 -04:00

asm-generic

Merge branch 'akpm' (Andrew's patch-bomb)

2012-07-30 17:25:34 -07:00

crypto

…

drm

drm/radeon/kms: implement timestamp userspace query (v2)

2012-08-13 10:50:56 -04:00

keys

…

linux

Merge tag 'vfio-for-v3.6-rc1' of git://github.com/awilliam/linux-vfio

2012-08-16 11:47:42 -07:00

math-emu

…

media

[media] v4l2: add core support for the new VIDIOC_ENUM_FREQ_BANDS ioctl

2012-07-30 20:23:05 -03:00

memory

…

misc

…

mtd

UBI: amend commentaries WRT dtype

2012-05-20 20:25:59 +03:00

net

codel: refine one condition to avoid a nul rec_inv_sqrt

2012-08-10 16:52:54 -07:00

pcmcia

…

ras

RAS: Add a tracepoint for reporting memory controller events

2012-06-11 11:55:52 -03:00

rdma

Merge branches 'cma', 'cxgb4', 'misc', 'mlx4-sriov', 'mlx-cleanups', 'ocrdma' and 'qib' into for-linus

2012-07-22 23:26:17 -07:00

rxrpc

…

scsi

Merge branch 'master' [vanilla Linus master] into libata-dev.git/upstream

2012-07-25 15:58:48 -04:00

sound

Merge tag 'sound-3.6' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

2012-08-01 10:42:26 -07:00

target

target: fix use-after-free with PSCSI sense data

2012-09-05 17:20:28 -07:00

trace

Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2012-08-03 10:57:20 -07:00

video

video: da8xx-fb: configure FIFO threshold to reduce underflow errors

2012-07-29 01:11:09 +00:00

xen

xen PVonHVM: move shared_info to MMIO before kexec

2012-07-19 15:52:05 -04:00

Kbuild

…