Mike Krinkin 21974061cf null_blk: fix use-after-free problem ...

end_cmd finishes request associated with nullb_cmd struct, so we
should save pointer to request_queue in a local variable before
calling end_cmd.

The problem was causes general protection fault with slab poisoning
enabled.

Fixes: 8b70f45e2e ("null_blk: restart request processing on completion handler")
Tested-by: Akinobu Mita <[email protected]>
Signed-off-by: Mike Krinkin <[email protected]>
Signed-off-by: Jens Axboe <[email protected]>

2015-07-22 13:30:20 -06:00

..

aoe

…

drbd

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-07-04 19:36:06 -07:00

mtip32xx

mtip32xx: Fix accessing freed memory

2015-06-24 08:48:46 -06:00

paride

Merge tag 'char-misc-4.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2015-06-26 14:51:15 -07:00

rsxx

…

xen-blkback

Merge tag 'for-linus-4.2-rc0-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

2015-07-01 11:53:46 -07:00

zram

zram: check comp algorithm availability earlier

2015-06-25 17:00:37 -07:00

amiflop.c

…

ataflop.c

…

brd.c

…

cciss_cmd.h

…

cciss_scsi.c

scsi: Do not set cmd_per_lun to 1 in the host template

2015-05-31 18:06:28 -07:00

cciss_scsi.h

…

cciss.c

cciss: correct the non-resettable board list

2015-05-31 11:14:34 -07:00

cciss.h

…

cpqarray.c

…

cpqarray.h

…

cryptoloop.c

…

DAC960.c

…

DAC960.h

…

floppy.c

…

hd.c

…

ida_cmd.h

…

ida_ioctl.h

…

Kconfig

libnvdimm, pmem: move pmem to drivers/nvdimm/

2015-06-24 21:24:10 -04:00

loop.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2015-07-04 19:36:06 -07:00

loop.h

block: loop: don't hold lo_ctl_mutex in lo_open

2015-05-20 09:06:09 -06:00

Makefile

libnvdimm, pmem: move pmem to drivers/nvdimm/

2015-06-24 21:24:10 -04:00

mg_disk.c

…

nbd.c

block: nbd: convert to blkdev_reread_part()

2015-05-20 09:06:13 -06:00

null_blk.c

null_blk: fix use-after-free problem

2015-07-22 13:30:20 -06:00

nvme-core.c

NVMe: Reread partitions on metadata formats

2015-07-15 15:36:47 -06:00

nvme-scsi.c

Merge branch 'for-4.2/drivers' of git://git.kernel.dk/linux-block

2015-06-25 15:12:50 -07:00

osdblk.c

…

pktcdvd.c

writeback: separate out include/linux/backing-dev-defs.h

2015-06-02 08:33:34 -06:00

ps3disk.c

…

ps3vram.c

block/ps3vram: Remove obsolete reference to MTD

2015-06-10 14:06:55 -06:00

rbd_types.h

…

rbd.c

rbd: use GFP_NOIO in rbd_obj_request_create()

2015-07-01 00:46:46 +03:00

skd_main.c

…

skd_s1120.h

…

smart1,2.h

…

sunvdc.c

…

swim3.c

…

swim_asm.S

…

swim.c

…

sx8.c

block: rename REQ_TYPE_SPECIAL to REQ_TYPE_DRV_PRIV

2015-05-05 13:40:03 -06:00

umem.c

…

umem.h

…

virtio_blk.c

block: rename REQ_TYPE_SPECIAL to REQ_TYPE_DRV_PRIV

2015-05-05 13:40:03 -06:00

xen-blkfront.c

Merge tag 'for-linus-4.2-rc0-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

2015-07-01 11:53:46 -07:00

xsysace.c

…

z2ram.c

…