Paolo Bonzini 35e4e96c4d virtio-scsi: fix use-after-free of VirtIOSCSIReq ...

scsi_req_continue can complete the request and cause the VirtIOSCSIReq
to be freed.  Fetch req->sreq just once to avoid the bug.

Reported-by: Richard Jones <rjones@redhat.com>
Tested-by: Richard Jones <rjones@redhat.com>
Reviewed-by: Fam Zheng <famz@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

2014-10-09 15:36:15 +02:00

..

esp-pci.c

memory: remove memory_region_destroy

2014-08-18 12:06:21 +02:00

esp.c

…

lsi53c895a.c

scsi-bus: Convert DeviceClass init to realize

2014-08-26 13:20:44 +02:00

Makefile.objs

virtio-scsi-dataplane: Code to run virtio-scsi on iothread

2014-09-30 11:11:20 +02:00

megasas.c

memory: remove memory_region_destroy

2014-08-18 12:06:21 +02:00

mfi.h

…

scsi-bus.c

scsi: Introduce scsi_req_cancel_async

2014-09-30 13:30:51 +02:00

scsi-disk.c

scsi: Introduce scsi_req_cancel_complete

2014-09-30 13:30:51 +02:00

scsi-generic.c

scsi: Introduce scsi_req_cancel_complete

2014-09-30 13:30:51 +02:00

spapr_vscsi.c

scsi: Drop scsi_req_abort

2014-09-30 13:30:50 +02:00

srp.h

…

vhost-scsi.c

vhost-scsi: use virtio_ldl_p

2014-09-23 15:40:51 +02:00

viosrp.h

…

virtio-scsi-dataplane.c

virtio-scsi: Batched prepare for cmd reqs

2014-09-30 11:11:20 +02:00

virtio-scsi.c

virtio-scsi: fix use-after-free of VirtIOSCSIReq

2014-10-09 15:36:15 +02:00

vmw_pvscsi.c

memory: remove memory_region_destroy

2014-08-18 12:06:21 +02:00

vmw_pvscsi.h

…