diff options
author | Ming Lei <[email protected]> | 2013-06-15 16:36:38 +0800 |
---|---|---|
committer | Greg Kroah-Hartman <[email protected]> | 2013-06-18 10:41:55 -0700 |
commit | 875979368eb4cfecff9f0e97625b90cc6009269d (patch) | |
tree | e10845e63381a741f60465d808d9b39f18217c6f /drivers/scsi/mpt2sas/mpi/mpi2_raid.h | |
parent | 7d132055814ef17a6c7b69f342244c410a5e000f (diff) |
firmware loader: fix use-after-free by double abort
fw_priv->buf is accessed in both request_firmware_load() and
writing to sysfs file of 'loading' context, but not protected
by 'fw_lock' entirely. The patch makes sure that access on
'fw_priv->buf' is protected by the lock.
So fixes the double abort problem reported by nirinA raseliarison:
http://lkml.org/lkml/2013/6/14/188
Reported-and-tested-by: nirinA raseliarison <[email protected]>
Cc: Guenter Roeck <[email protected]>
Cc: Bjorn Helgaas <[email protected]>
Cc: stable <[email protected]> # 3.9
Signed-off-by: Ming Lei <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Diffstat (limited to 'drivers/scsi/mpt2sas/mpi/mpi2_raid.h')
0 files changed, 0 insertions, 0 deletions