iscsi-target: Fix NULL pointer dereference in iscsit_send_reject
authorNicholas Bellinger <nab@linux-iscsi.org>
Fri, 3 May 2013 23:46:41 +0000 (16:46 -0700)
committerNicholas Bellinger <nab@linux-iscsi.org>
Fri, 3 May 2013 23:46:41 +0000 (16:46 -0700)
Fix up a NULL pointer dereference regression in iscsit_send_reject()
introduced by from commit 2ec5a8c11.

Reported-by: Geert Uytterhoeven <geert@linux-m68k.org>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
drivers/target/iscsi/iscsi_target.c

index ffbc6a94be522abd396a50b90ccb47e9c202a76f..c230eacc6cedd45ff77ca8e73ae588cf69f2c239 100644 (file)
@@ -3557,11 +3557,11 @@ static int iscsit_send_reject(
        struct iscsi_cmd *cmd,
        struct iscsi_conn *conn)
 {
-       u32 iov_count = 0, tx_size = 0;
-       struct iscsi_reject *hdr;
+       struct iscsi_reject *hdr = (struct iscsi_reject *)&cmd->pdu[0];
        struct kvec *iov;
+       u32 iov_count = 0, tx_size;
 
-       iscsit_build_reject(cmd, conn, (struct iscsi_reject *)&cmd->pdu[0]);
+       iscsit_build_reject(cmd, conn, hdr);
 
        iov = &cmd->iov_misc[0];
        iov[iov_count].iov_base = cmd->pdu;