qemu/hw/scsi
Paolo Bonzini 35e4e96c4d virtio-scsi: fix use-after-free of VirtIOSCSIReq
scsi_req_continue can complete the request and cause the VirtIOSCSIReq
to be freed.  Fetch req->sreq just once to avoid the bug.

Reported-by: Richard Jones <rjones@redhat.com>
Tested-by: Richard Jones <rjones@redhat.com>
Reviewed-by: Fam Zheng <famz@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2014-10-09 15:36:15 +02:00
..
esp-pci.c
esp.c
lsi53c895a.c
Makefile.objs virtio-scsi-dataplane: Code to run virtio-scsi on iothread 2014-09-30 11:11:20 +02:00
megasas.c
mfi.h
scsi-bus.c scsi: Introduce scsi_req_cancel_async 2014-09-30 13:30:51 +02:00
scsi-disk.c scsi: Introduce scsi_req_cancel_complete 2014-09-30 13:30:51 +02:00
scsi-generic.c scsi: Introduce scsi_req_cancel_complete 2014-09-30 13:30:51 +02:00
spapr_vscsi.c scsi: Drop scsi_req_abort 2014-09-30 13:30:50 +02:00
srp.h
vhost-scsi.c vhost-scsi: use virtio_ldl_p 2014-09-23 15:40:51 +02:00
viosrp.h
virtio-scsi-dataplane.c virtio-scsi: Batched prepare for cmd reqs 2014-09-30 11:11:20 +02:00
virtio-scsi.c virtio-scsi: fix use-after-free of VirtIOSCSIReq 2014-10-09 15:36:15 +02:00
vmw_pvscsi.c
vmw_pvscsi.h