diff options
| author | Nicholas Bellinger <nab@linux-iscsi.org> | 2014-09-17 11:45:17 -0700 |
|---|---|---|
| committer | Zefan Li <lizefan@huawei.com> | 2014-12-01 18:02:33 +0800 |
| commit | bce95d5d5ce5d57e72da6ab6dda819c4d79cbb52 (patch) | |
| tree | 04e00e67bf5bd6f9f1f80b486caa6fbe1e8bc768 /drivers/target/iscsi/iscsi_target_nego.c | |
| parent | c0efaae65f73e201a2a06f9eb407e2a442279a78 (diff) | |
iscsi-target: Fix memory corruption in iscsit_logout_post_handler_diffcid
commit b53b0d99d6fbf7d44330395349a895521cfdbc96 upstream.
This patch fixes a bug in iscsit_logout_post_handler_diffcid() where
a pointer used as storage for list_for_each_entry() was incorrectly
being used to determine if no matching entry had been found.
This patch changes iscsit_logout_post_handler_diffcid() to key off
bool conn_found to determine if the function needs to exit early.
Reported-by: Joern Engel <joern@logfs.org>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: Zefan Li <lizefan@huawei.com>
Diffstat (limited to 'drivers/target/iscsi/iscsi_target_nego.c')
0 files changed, 0 insertions, 0 deletions