diff options
| author | Steffen Maier <maier@linux.vnet.ibm.com> | 2011-11-18 20:00:40 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@suse.de> | 2012-01-06 14:13:47 -0800 |
| commit | 3b538a7aaf6468c40a1faa559417e6165456b8e3 (patch) | |
| tree | 0ea642cd792b23e8b2425a776b2e322c97a0fb8a /drivers/scsi | |
| parent | cec3c159f674367def095745a72ac6150f889243 (diff) | |
| download | kernel_samsung_smdk4412-3b538a7aaf6468c40a1faa559417e6165456b8e3.zip kernel_samsung_smdk4412-3b538a7aaf6468c40a1faa559417e6165456b8e3.tar.gz kernel_samsung_smdk4412-3b538a7aaf6468c40a1faa559417e6165456b8e3.tar.bz2 | |
SCSI: zfcp: return early from slave_destroy if slave_alloc returned early
commit 44f747fff6e9f027a4866c1a6864e26ae7c510c8 upstream.
zfcp_scsi_slave_destroy erroneously always tried to finish its task
even if the corresponding previous zfcp_scsi_slave_alloc returned
early. This can lead to kernel page faults on accessing uninitialized
fields of struct zfcp_scsi_dev in zfcp_erp_lun_shutdown_wait. Take the
port field of the struct to determine if slave_alloc returned early.
This zfcp bug is exposed by 4e6c82b (in turn fixing f7c9c6b to be
compatible with 21208ae) which can call slave_destroy for a
corresponding previous slave_alloc that did not finish.
This patch is based on James Bottomley's fix suggestion in
http://www.spinics.net/lists/linux-scsi/msg55449.html.
Signed-off-by: Steffen Maier <maier@linux.vnet.ibm.com>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Diffstat (limited to 'drivers/scsi')
0 files changed, 0 insertions, 0 deletions