scsi: sg: don't return bogus Sg_requests
authorJohannes Thumshirn <jthumshirn@suse.de>
Wed, 10 May 2017 07:53:40 +0000 (09:53 +0200)
committerMartin K. Petersen <martin.petersen@oracle.com>
Fri, 12 May 2017 03:14:36 +0000 (23:14 -0400)
commit48ae8484e9fc324b4968d33c585e54bc98e44d61
treef0a770257ef7f82b44468acfe3923a2fd48d3c80
parented44fd7fd8a6785b73cfc6d44594c434e578d724
scsi: sg: don't return bogus Sg_requests

If the list search in sg_get_rq_mark() fails to find a valid request, we
return a bogus element. This then can later lead to a GPF in
sg_remove_scat().

So don't return bogus Sg_requests in sg_get_rq_mark() but NULL in case
the list search doesn't find a valid request.

Signed-off-by: Johannes Thumshirn <jthumshirn@suse.de>
Reported-by: Andrey Konovalov <andreyknvl@google.com>
Cc: Hannes Reinecke <hare@suse.de>
Cc: Christoph Hellwig <hch@lst.de>
Cc: Doug Gilbert <dgilbert@interlog.com>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Acked-by: Doug Gilbert <dgilbert@interlog.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
drivers/scsi/sg.c