Unverified Commit 88cf3950 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!12450 Fix CVE-2024-26917 and CVE-2024-50025 

Merge Pull Request from: @ci-robot 
 
PR sync from: Li Lingfeng <lilingfeng3@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/TDIUZMUADE6WWFENOTWTFW22MQVFEBF6/ 
Lee Duncan (1):
  scsi: fnic: Move fnic_fnic_flush_tx() to a work queue

Martin Wilck (1):
  scsi: fnic: Move flush_work initialization out of if block


-- 
2.31.1
 
https://gitee.com/src-openeuler/kernel/issues/IAYRJ6
https://gitee.com/src-openeuler/kernel/issues/I9HL6L 
 
Link:https://gitee.com/openeuler/kernel/pulls/12450

 

Reviewed-by: default avatarYu Kuai <yukuai3@huawei.com>
Reviewed-by: default avatarYang Yingliang <yangyingliang@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parents 7362b512 c146b493

drivers/scsi/fnic/fnic.h

+2 −1
Original line number Diff line number Diff line
@@ -281,6 +281,7 @@ struct fnic { 


	struct work_struct link_work;

	struct work_struct frame_work;

	struct work_struct flush_work;

	struct sk_buff_head frame_queue;

	struct sk_buff_head tx_queue;
@@ -336,7 +337,7 @@ void fnic_handle_event(struct work_struct *work); 
int fnic_rq_cmpl_handler(struct fnic *fnic, int);

int fnic_alloc_rq_frame(struct vnic_rq *rq);

void fnic_free_rq_buf(struct vnic_rq *rq, struct vnic_rq_buf *buf);

void fnic_flush_tx(struct fnic *);

void fnic_flush_tx(struct work_struct *work);

void fnic_eth_send(struct fcoe_ctlr *, struct sk_buff *skb);

void fnic_set_port_id(struct fc_lport *, u32, struct fc_frame *);

void fnic_update_mac(struct fc_lport *, u8 *new);

drivers/scsi/fnic/fnic_fcs.c

+3 −2
Original line number Diff line number Diff line
@@ -1184,7 +1184,7 @@ int fnic_send(struct fc_lport *lp, struct fc_frame *fp) 


/**

 * fnic_flush_tx() - send queued frames.

 * @fnic: fnic device

 * @work: pointer to work element

 *

 * Send frames that were waiting to go out in FC or Ethernet mode.

 * Whenever changing modes we purge queued frames, so these frames should
@@ -1192,8 +1192,9 @@ int fnic_send(struct fc_lport *lp, struct fc_frame *fp) 
 *

 * Called without fnic_lock held.

 */

void fnic_flush_tx(struct fnic *fnic)

void fnic_flush_tx(struct work_struct *work)

{

	struct fnic *fnic = container_of(work, struct fnic, flush_work);

	struct sk_buff *skb;

	struct fc_frame *fp;

drivers/scsi/fnic/fnic_main.c

+1 −0
Original line number Diff line number Diff line
@@ -876,6 +876,7 @@ static int fnic_probe(struct pci_dev *pdev, const struct pci_device_id *ent) 


	INIT_WORK(&fnic->link_work, fnic_handle_link);

	INIT_WORK(&fnic->frame_work, fnic_handle_frame);

	INIT_WORK(&fnic->flush_work, fnic_flush_tx);

	skb_queue_head_init(&fnic->frame_queue);

	skb_queue_head_init(&fnic->tx_queue);

drivers/scsi/fnic/fnic_scsi.c

+2 −2
Original line number Diff line number Diff line
@@ -695,7 +695,7 @@ static int fnic_fcpio_fw_reset_cmpl_handler(struct fnic *fnic, 


	spin_unlock_irqrestore(&fnic->fnic_lock, flags);



	fnic_flush_tx(fnic);

	queue_work(fnic_event_queue, &fnic->flush_work);



 reset_cmpl_handler_end:

	fnic_clear_state_flags(fnic, FNIC_FLAGS_FWRESET);
@@ -751,7 +751,7 @@ static int fnic_fcpio_flogi_reg_cmpl_handler(struct fnic *fnic, 
		}

		spin_unlock_irqrestore(&fnic->fnic_lock, flags);



		fnic_flush_tx(fnic);

		queue_work(fnic_event_queue, &fnic->flush_work);

		queue_work(fnic_event_queue, &fnic->frame_work);

	} else {

		spin_unlock_irqrestore(&fnic->fnic_lock, flags);