https://github.com/torvalds/linux
Revision d48756228ee9161ac8836b346589a43fabdc9f3c authored by Keith Busch on 15 November 2016, 20:56:26 UTC, committed by Jens Axboe on 16 November 2016, 19:39:57 UTC
The nvme_remove function tears down all allocated resources in the correct
order, so no need to free queues on error during initialization. This
fixes possible use-after-free errors when queues are still associated
with a blk-mq hctx.

Reported-by: Scott Bauer <scott.bauer@intel.com>
Tested-by: Scott Bauer <scott.bauer@intel.com>
Signed-off-by: Keith Busch <keith.busch@intel.com>
Reviewed-by: Sagi Grimberg <sagi@grimbeg.me>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Cc: stable@vger.kernel.org
Signed-off-by: Jens Axboe <axboe@fb.com>
1 parent 959401a
History
Tip revision: d48756228ee9161ac8836b346589a43fabdc9f3c authored by Keith Busch on 15 November 2016, 20:56:26 UTC
nvme/pci: Don't free queues on error
Tip revision: d487562
File Mode Size
Makefile -rw-r--r-- 254 bytes
af_rose.c -rw-r--r-- 37.4 KB
rose_dev.c -rw-r--r-- 3.1 KB
rose_in.c -rw-r--r-- 7.5 KB
rose_link.c -rw-r--r-- 6.7 KB
rose_loopback.c -rw-r--r-- 2.7 KB
rose_out.c -rw-r--r-- 2.8 KB
rose_route.c -rw-r--r-- 31.3 KB
rose_subr.c -rw-r--r-- 12.3 KB
rose_timer.c -rw-r--r-- 4.9 KB
sysctl_net_rose.c -rw-r--r-- 3.3 KB

back to top