Steffen Maier 4e8a616fae SCSI: zfcp: return early from slave_destroy if slave_alloc returned early ...

commit 44f747fff6 upstream.

zfcp_scsi_slave_destroy erroneously always tried to finish its task
even if the corresponding previous zfcp_scsi_slave_alloc returned
early. This can lead to kernel page faults on accessing uninitialized
fields of struct zfcp_scsi_dev in zfcp_erp_lun_shutdown_wait. Take the
port field of the struct to determine if slave_alloc returned early.

This zfcp bug is exposed by 4e6c82b (in turn fixing f7c9c6b to be
compatible with 21208ae) which can call slave_destroy for a
corresponding previous slave_alloc that did not finish.

This patch is based on James Bottomley's fix suggestion in
http://www.spinics.net/lists/linux-scsi/msg55449.html.

Signed-off-by: Steffen Maier <maier@linux.vnet.ibm.com>
Signed-off-by: James Bottomley <JBottomley@Parallels.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2012-01-06 14:16:53 -08:00

..

block

[S390] drivers/s390/block/dasd_ioctl.c: add missing kfree

2011-08-24 17:15:23 +02:00

char

[S390] memory hotplug: only unassign assigned increments

2011-08-24 17:15:24 +02:00

cio

ccwgroup: move attributes to attribute group

2011-11-11 09:43:22 -08:00

crypto

atomic: use <linux/atomic.h>

2011-07-26 16:49:47 -07:00

kvm

[S390] irq: merge irq.c and s390_ext.c

2011-05-26 09:48:24 +02:00

net

qeth: l3 fix rcu splat in xmit

2011-12-09 08:55:59 -08:00

scsi

SCSI: zfcp: return early from slave_destroy if slave_alloc returned early

2012-01-06 14:16:53 -08:00

Makefile

[S390] split/move machine check handler code

2009-03-26 15:24:10 +01:00