On 24/05/17 01:48, Bart Van Assche wrote: > scsiback_release_cmd() must not dereference se_cmd->se_tmr_req > because that memory is freed by target_free_cmd_mem() before > scsiback_release_cmd() is called. Fix this use-after-free by > inlining struct scsiback_tmr into struct vscsibk_pend. > > Signed-off-by: Bart Van Assche <bart.vanass...@sandisk.com> > Cc: Juergen Gross <jgr...@suse.com> > Cc: Christoph Hellwig <h...@lst.de> > Cc: Hannes Reinecke <h...@suse.com> > Cc: David Disseldorp <dd...@suse.de> > Cc: xen-de...@lists.xenproject.org
Reviewed-by: Juergen Gross <jgr...@suse.com> Juergen _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org https://lists.xen.org/xen-devel
