Paolo Bonzini 35e4e96c4d virtio-scsi: fix use-after-free of VirtIOSCSIReq ... scsi_req_continue can complete the request and cause the VirtIOSCSIReq to be freed. Fetch req->sreq just once to avoid the bug. Reported-by: Richard Jones <rjones@redhat.com> Tested-by: Richard Jones <rjones@redhat.com> Reviewed-by: Fam Zheng <famz@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2014-10-09 15:36:15 +02:00
..
esp-pci.c	memory: remove memory_region_destroy	2014-08-18 12:06:21 +02:00
esp.c	savevm: Remove all the unneeded version_minimum_id_old (rest)	2014-05-14 15:24:51 +02:00
lsi53c895a.c	scsi-bus: Convert DeviceClass init to realize	2014-08-26 13:20:44 +02:00
Makefile.objs	virtio-scsi-dataplane: Code to run virtio-scsi on iothread	2014-09-30 11:11:20 +02:00
megasas.c	memory: remove memory_region_destroy	2014-08-18 12:06:21 +02:00
mfi.h	megasas: Implement LD_LIST_QUERY	2014-04-28 13:48:41 +02:00
scsi-bus.c	scsi: Introduce scsi_req_cancel_async	2014-09-30 13:30:51 +02:00
scsi-disk.c	scsi: Introduce scsi_req_cancel_complete	2014-09-30 13:30:51 +02:00
scsi-generic.c	scsi: Introduce scsi_req_cancel_complete	2014-09-30 13:30:51 +02:00
spapr_vscsi.c	scsi: Drop scsi_req_abort	2014-09-30 13:30:50 +02:00
srp.h	spapr-vscsi: add task management	2013-09-12 08:46:21 +02:00
vhost-scsi.c	vhost-scsi: use virtio_ldl_p	2014-09-23 15:40:51 +02:00
viosrp.h	hw: move private headers to hw/ subdirectories.	2013-04-08 18:13:16 +02:00
virtio-scsi-dataplane.c	virtio-scsi: Batched prepare for cmd reqs	2014-09-30 11:11:20 +02:00
virtio-scsi.c	virtio-scsi: fix use-after-free of VirtIOSCSIReq	2014-10-09 15:36:15 +02:00
vmw_pvscsi.c	memory: remove memory_region_destroy	2014-08-18 12:06:21 +02:00
vmw_pvscsi.h	scsi: VMWare PVSCSI paravirtual device implementation	2013-04-19 10:44:17 +02:00