android_kernel_xiaomi_sm8350/drivers/scsi/qla2xxx
Andrew Vasquez 715848ca6f [SCSI] qla2xxx: Correct use-after-free issue in terminate_rport_io callback.
The explicit logout (LOGO) issued at the end of the callback will
flush (via normal scsi_cmnd->done()) any outstanding commands
(FCP2) the firmware is holding.  While iterating through the
outstanding_cmnd array in qla2x00_abort_fcport_cmds(), locking
and unlocking of the hardware spinlock, opens-up the driver to
cases where the processed SRB (sp) could be used after the
command completed from interrupt context.

Cc: stable@kernel.org
Signed-off-by: Andrew Vasquez <andrew.vasquez@qlogic.com>
Signed-off-by: Giridhar Malavali <giridhar.malavali@qlogic.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>
2010-02-19 10:46:35 -06:00
..
Kconfig
Makefile
qla_attr.c [SCSI] qla2xxx: Correct use-after-free issue in terminate_rport_io callback. 2010-02-19 10:46:35 -06:00
qla_dbg.c [SCSI] qla2xxx: Add firmware-dump kobject uevent notification. 2009-12-04 12:00:10 -06:00
qla_dbg.h [SCSI] qla2xxx: Extend base EEH support in qla2xxx. 2009-12-30 11:09:49 -06:00
qla_def.h [SCSI] qla2xxx: Add BSG support for FC ELS/CT passthrough and vendor commands. 2010-01-18 16:51:05 -06:00
qla_devtbl.h
qla_dfs.c
qla_fw.h [SCSI] qla2xxx: Add BSG support for FC ELS/CT passthrough and vendor commands. 2010-01-18 16:51:05 -06:00
qla_gbl.h [SCSI] qla2xxx: Correct use-after-free issue in terminate_rport_io callback. 2010-02-19 10:46:35 -06:00
qla_gs.c [SCSI] qla2xxx: ISP21xx/22xx do not support FDMI registrations. 2009-08-22 17:52:19 -05:00
qla_init.c [SCSI] qla2xxx: Add BSG support for FC ELS/CT passthrough and vendor commands. 2010-01-18 16:51:05 -06:00
qla_inline.h
qla_iocb.c [SCSI] qla2xxx: Add BSG support for FC ELS/CT passthrough and vendor commands. 2010-01-18 16:51:05 -06:00
qla_isr.c [SCSI] qla2xxx: Add BSG support for FC ELS/CT passthrough and vendor commands. 2010-01-18 16:51:05 -06:00
qla_mbx.c [SCSI] qla2xxx: Add BSG support for FC ELS/CT passthrough and vendor commands. 2010-01-18 16:51:05 -06:00
qla_mid.c [SCSI] qla2xxx: Fix for a multiqueue bug in CPU affinity mode 2009-12-30 11:09:47 -06:00
qla_os.c [SCSI] qla2xxx: Correct use-after-free issue in terminate_rport_io callback. 2010-02-19 10:46:35 -06:00
qla_settings.h
qla_sup.c [SCSI] qla2xxx: Perform fast mailbox read of flash regardless of size nor address alignment. 2010-01-17 12:36:31 -06:00
qla_version.h [SCSI] qla2xxx: Update version number to 8.03.02-k0. 2010-01-18 16:51:59 -06:00