https://github.com/torvalds/linux
Revision d48756228ee9161ac8836b346589a43fabdc9f3c authored by Keith Busch on 15 November 2016, 20:56:26 UTC, committed by Jens Axboe on 16 November 2016, 19:39:57 UTC
The nvme_remove function tears down all allocated resources in the correct
order, so no need to free queues on error during initialization. This
fixes possible use-after-free errors when queues are still associated
with a blk-mq hctx.

Reported-by: Scott Bauer <scott.bauer@intel.com>
Tested-by: Scott Bauer <scott.bauer@intel.com>
Signed-off-by: Keith Busch <keith.busch@intel.com>
Reviewed-by: Sagi Grimberg <sagi@grimbeg.me>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Cc: stable@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>
1 parent 959401a
History
Tip revision: d48756228ee9161ac8836b346589a43fabdc9f3c authored by Keith Busch on 15 November 2016, 20:56:26 UTC
nvme/pci: Don't free queues on error
Tip revision: d487562
File Mode Size
6lowpan_i.h -rw-r--r-- 970 bytes
Kconfig -rw-r--r-- 2.7 KB
Makefile -rw-r--r-- 831 bytes
core.c -rw-r--r-- 4.3 KB
debugfs.c -rw-r--r-- 8.0 KB
iphc.c -rw-r--r-- 36.1 KB
ndisc.c -rw-r--r-- 6.7 KB
nhc.c -rw-r--r-- 5.3 KB
nhc.h -rw-r--r-- 4.3 KB
nhc_dest.c -rw-r--r-- 860 bytes
nhc_fragment.c -rw-r--r-- 868 bytes
nhc_ghc_ext_dest.c -rw-r--r-- 880 bytes
nhc_ghc_ext_frag.c -rw-r--r-- 892 bytes
nhc_ghc_ext_hop.c -rw-r--r-- 868 bytes
nhc_ghc_ext_route.c -rw-r--r-- 885 bytes
nhc_ghc_icmpv6.c -rw-r--r-- 823 bytes
nhc_ghc_udp.c -rw-r--r-- 781 bytes
nhc_hop.c -rw-r--r-- 843 bytes
nhc_ipv6.c -rw-r--r-- 807 bytes
nhc_mobility.c -rw-r--r-- 868 bytes
nhc_routing.c -rw-r--r-- 855 bytes
nhc_udp.c -rw-r--r-- 5.7 KB

back to top