Unverified Commit b5eba3a5 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15275 scsi: libfc: Fix use after free in fc_exch_abts_resp() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Baokun Li <libaokun1@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/KUEJVEE7BXDQZLC3Z56BMWVTCZJGJNKJ/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBPBYM 
 
Link:https://gitee.com/openeuler/kernel/pulls/15275

 

Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents 72d43b22 1897a9e8

drivers/scsi/libfc/fc_exch.c

+1 −0
Original line number Original line Diff line number Diff line
@@ -1703,6 +1703,7 @@ static void fc_exch_abts_resp(struct fc_exch *ep, struct fc_frame *fp) 
	if (cancel_delayed_work_sync(&ep->timeout_work)) {

	if (cancel_delayed_work_sync(&ep->timeout_work)) {

		FC_EXCH_DBG(ep, "Exchange timer canceled due to ABTS response\n");

		FC_EXCH_DBG(ep, "Exchange timer canceled due to ABTS response\n");

		fc_exch_release(ep);	/* release from pending timer hold */

		fc_exch_release(ep);	/* release from pending timer hold */

		return;

	}

	}





	spin_lock_bh(&ep->ex_lock);

	spin_lock_bh(&ep->ex_lock);