diff options
| author | Brian King <brking@us.ibm.com> | 2005-12-12 13:05:08 -0600 |
|---|---|---|
| committer | James Bottomley <jejb@mulgrave.(none)> | 2005-12-12 14:27:05 -0600 |
| commit | 1a68de5c08be8c77c4ad208306187bd95107c7cd (patch) | |
| tree | 27069553f2a991578355a26bddff2528014dc6fd /drivers | |
| parent | a8c730e85e80734412f4f73ab28496a0e8b04a7b (diff) | |
| download | linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.tar.gz linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.tar.bz2 linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.zip | |
[SCSI] fix double free of scsi request queue
Current scsi scanning code appears to have a use after free
bug is a LLDD's slave_alloc fails. Remove the redundant
scsi_free_queue.
Signed-off-by: Brian King <brking@us.ibm.com>
Signed-off-by: James Bottomley <James.Bottomley@SteelEye.com>
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/scsi/scsi_scan.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/scsi/scsi_scan.c b/drivers/scsi/scsi_scan.c index 374853df9cca..be276ea8f033 100644 --- a/drivers/scsi/scsi_scan.c +++ b/drivers/scsi/scsi_scan.c @@ -279,7 +279,6 @@ static struct scsi_device *scsi_alloc_sdev(struct scsi_target *starget, out_device_destroy: transport_destroy_device(&sdev->sdev_gendev); - scsi_free_queue(sdev->request_queue); put_device(&sdev->sdev_gendev); out: if (display_failure_msg) |