kernel_optimize_test/drivers/target
Paolo Bonzini d5829eac5f target: fix use-after-free with PSCSI sense data
The pointer to the sense buffer is fetched by transport_get_sense_data,
but this is called by target_complete_ok_work long after pscsi_req_done
has freed the struct that contains it.

Pass instead the fabric's sense buffer to transport_complete,
and copy the data to it directly in transport_complete.  Setting
SCF_TRANSPORT_TASK_SENSE also becomes a duty of transport_complete.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
2012-09-05 17:20:28 -07:00
..
iscsi target: Check idr_get_new return value in iscsi_login_zero_tsih_s1 2012-08-26 23:27:08 -07:00
loopback target: remove transport_generic_process_write 2012-07-16 17:35:16 -07:00
sbp target: Allow for target_submit_cmd() returning errors 2012-07-17 17:05:05 -07:00
tcm_fc tcm_fc: rcu_deref outside rcu lock/unlock section 2012-08-20 14:52:15 -07:00
Kconfig sbp-target: Initial merge of firewire/ieee-1394 target mode support 2012-05-09 15:25:17 -07:00
Makefile target: move code for CDB emulation 2012-07-16 17:27:45 -07:00
target_core_alua.c target: Return error to initiator if SET TARGET PORT GROUPS emulation fails 2012-06-12 20:12:25 -07:00
target_core_alua.h target: Add MI_REPORT_TARGET_PGS ext. header + implict_trans_secs attribute 2012-05-17 00:45:58 -07:00
target_core_configfs.c Revert "target: Do not special-case loop and iscsi fabric module loads" 2012-07-16 17:35:14 -07:00
target_core_device.c target: Make unnecessarily global se_dev_align_max_sectors() static 2012-07-16 17:35:35 -07:00
target_core_fabric_configfs.c target: Remove hba param from core_dev_add_lun 2012-07-16 17:35:22 -07:00
target_core_fabric_lib.c target: remove useless casts 2011-12-14 11:28:07 +00:00
target_core_file.c Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs 2012-08-01 10:26:23 -07:00
target_core_file.h target/file: Use O_DSYNC by default for FILEIO backends 2012-06-02 23:47:20 -07:00
target_core_hba.c target: header reshuffle, part2 2011-12-14 11:26:05 +00:00
target_core_iblock.c target: Check number of unmap descriptors against our limit 2012-07-16 17:35:36 -07:00
target_core_iblock.h target/iblock: Add parameter to specify read-only devices 2012-07-16 17:29:11 -07:00
target_core_internal.h target: refactor core_update_device_list_for_node() 2012-07-16 17:35:24 -07:00
target_core_pr.c target: Remove unneeded double parentheses 2012-07-16 17:35:22 -07:00
target_core_pr.h target: replace ->execute_task with ->execute_cmd 2012-05-06 15:11:14 -07:00
target_core_pscsi.c target: fix use-after-free with PSCSI sense data 2012-09-05 17:20:28 -07:00
target_core_pscsi.h target: remove struct se_task 2012-05-06 15:11:26 -07:00
target_core_rd.c target: add struct spc_ops + initial ->execute_rw pointer usage 2012-07-16 17:29:12 -07:00
target_core_rd.h target: don't limit transfer sizes for the ramdisk backend 2012-04-14 17:40:30 -07:00
target_core_sbc.c target: move unmap to struct spc_ops 2012-07-16 17:35:14 -07:00
target_core_spc.c target: Move MAINTENANCE_[IN,OUT] from pscsi_parse_cdb -> spc_parse_cdb 2012-07-16 17:28:40 -07:00
target_core_stat.c target: remove obvious warnings 2012-03-15 19:16:09 -07:00
target_core_tmr.c target: replace the processing thread with a TMR work queue 2012-07-16 17:35:21 -07:00
target_core_tpg.c target: refactor core_update_device_list_for_node() 2012-07-16 17:35:24 -07:00
target_core_transport.c target: fix use-after-free with PSCSI sense data 2012-09-05 17:20:28 -07:00
target_core_ua.c target: Use array_zalloc for device_list 2012-03-15 19:15:51 -07:00
target_core_ua.h