Re: [PATCH] st: fix race in st_scsi_execute_end

From: James Bottomley
Date: Wed Mar 21 2012 - 06:09:45 EST


On Fri, 2011-10-21 at 13:31 +0200, Petr Uzel wrote:
> The call to complete() in st_scsi_execute_end() wakes up sleeping thread
> in write_behind_check(), which frees the st_request, thus invalidating
> the pointer to the associated bio structure, which is then passed to the
> blk_rq_unmap_user(). Fix by storing pointer to bio structure into
> temporary local variable.
>
> This bug is present since at least linux-2.6.32.

This patch isn't applyable. That's because gpg has mangled it. You
either need to turn it off or do detached signatures.

Thanks,

James


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/