[SCSI] fix use-after-free in scsi_init_io()
authorJames Bottomley <James.Bottomley@suse.de>
Mon, 16 Aug 2010 15:06:26 +0000 (10:06 -0500)
committerJames Bottomley <James.Bottomley@suse.de>
Thu, 9 Sep 2010 14:58:18 +0000 (09:58 -0500)
commit3a5c19c23db65a554f2e4f5df5f307c668277056
treeeb89ea587d49af31eb21ba2c08824c0b9cf056b0
parent7e443312403ad1ff40ef3177590e96d1fe747c79
[SCSI] fix use-after-free in scsi_init_io()

we're using a pointer through a freed command to reset the request,
which has shown up as an oops with slab poisoning:

Reported-by: Tejun Heo <tj@kernel.org>
Reported-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>
drivers/scsi/scsi_lib.c