android_kernel_sony_sdm845/drivers/scsi/libfc
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Jianglei Nie 4a131d4ea8 scsi: libfc: Fix use after free in fc_exch_abts_resp()
[ Upstream commit 271add11994ba1a334859069367e04d2be2ebdd4 ]

fc_exch_release(ep) will decrease the ep's reference count. When the
reference count reaches zero, it is freed. But ep is still used in the
following code, which will lead to a use after free.

Return after the fc_exch_release() call to avoid use after free.

Link: https://lore.kernel.org/r/20220303015115.459778-1-niejianglei2021@163.com
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Jianglei Nie <niejianglei2021@163.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-20 09:06:42 +02:00
..
fc_disc.c scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases 2020-08-26 10:29:05 +02:00
fc_elsct.c
fc_exch.c scsi: libfc: Fix use after free in fc_exch_abts_resp() 2022-04-20 09:06:42 +02:00
fc_fcp.c
fc_frame.c
fc_libfc.c
fc_libfc.h
fc_lport.c scsi: libfc: Fix a format specifier 2021-05-22 10:40:18 +02:00
fc_npiv.c
fc_rport.c scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure 2019-08-11 12:22:12 +02:00
Makefile