diff options
author | Yaniv Gardi <[email protected]> | 2016-02-01 15:02:39 +0200 |
---|---|---|
committer | Martin K. Petersen <[email protected]> | 2016-02-23 21:27:02 -0500 |
commit | 14497328b6a628cedafdd2df1bb8d3e9d1d5338f (patch) | |
tree | 197639caef71a4938c4360ce0df68d5566419334 /drivers/fpga/fpga-mgr.c | |
parent | 51047266f7a8f513418a387474be47a3ff2c1718 (diff) |
scsi: ufs: verify command tag validity
A race condition appear to exist between request completion when
scsi_done() is called to end the request and set the tag back to -1 (at
blk_queue_end_tag() scsi_end_request), and scsi layer error handling
which aborts the command and reuses it to request sense data. Sending
the request sense is done with tag which was set to -1 and so it is
invalid. Assert command tag passed from scsi layer is valid.
Reviewed-by: Subhash Jadavani <[email protected]>
Reviewed-by: Dolev Raviv <[email protected]>
Signed-off-by: Gilad Broner <[email protected]>
Signed-off-by: Yaniv Gardi <[email protected]>
Signed-off-by: Martin K. Petersen <[email protected]>
Diffstat (limited to 'drivers/fpga/fpga-mgr.c')
0 files changed, 0 insertions, 0 deletions