diff options
| author | Bart Van Assche <bvanassche@acm.org> | 2019-04-02 12:58:05 -0700 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2019-04-12 20:20:05 -0400 |
| commit | 63f7479439c95bcd49b7dd4af809862c316c71a3 (patch) | |
| tree | c7c5509ade07fa7f5a6a01ff1bb7e40bfdeecb70 /drivers/target/target_core_tmr.c | |
| parent | a6a6d0589ac4ff3e1eb962f6c53e67d8f6386c18 (diff) | |
| download | linux-63f7479439c95bcd49b7dd4af809862c316c71a3.tar.gz linux-63f7479439c95bcd49b7dd4af809862c316c71a3.tar.bz2 linux-63f7479439c95bcd49b7dd4af809862c316c71a3.zip | |
scsi: target/core: Fix a race condition in the LUN lookup code
The rcu_dereference(deve->se_lun) expression occurs twice in the LUN lookup
functions. Since these expressions are not serialized against deve->se_lun
assignments each of these expressions may yield a different result. Avoid
that the wrong LUN pointer is stored in se_cmd by reading deve->se_lun only
once.
Cc: Mike Christie <mchristi@redhat.com>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Hannes Reinecke <hare@suse.com>
Cc: Nicholas Bellinger <nab@linux-iscsi.org>
Fixes: 29a05deebf6c ("target: Convert se_node_acl->device_list[] to RCU hlist") # v4.10
Signed-off-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'drivers/target/target_core_tmr.c')
0 files changed, 0 insertions, 0 deletions