Commit 53fb698a authored Jan 31, 2023 by Maurizio Lombardi Committed by Greg Kroah-Hartman Feb 22, 2023

nvme: clear the request_queue pointers on failure in nvme_alloc_io_tag_set



[ Upstream commit 6fbf13c0 ]

In nvme_alloc_io_tag_set(), the connect_q pointer should be set to NULL
in case of error to avoid potential invalid pointer dereferences.

Signed-off-by: Maurizio Lombardi <mlombard@redhat.com>
Reviewed-by: Chaitanya Kulkarni <kch@nvidia.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

parent 84ea5242

drivers/nvme/host/core.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -4933,6 +4933,7 @@ int nvme_alloc_io_tag_set(struct nvme_ctrl ctrl, struct blk_mq_tag_set set,

		out_free_tag_set:
		blk_mq_free_tag_set(set);
		ctrl->connect_q = NULL;
		return ret;
		}
		EXPORT_SYMBOL_GPL(nvme_alloc_io_tag_set);