Re: [PATCH for v4.3-rc] scsi_dh: fix use-after-free when removing scsi device

2015-10-20 Thread Junichi Nomura
On 10/06/15 13:32, Junichi Nomura wrote: > The commit 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device > handlers") removed reference counting of attached scsi device handler. > As a result, handler data is freed immediately via scsi_dh->detach() > in the context of

[PATCH for v4.3-rc] scsi_dh: fix use-after-free when removing scsi device

2015-10-05 Thread Junichi Nomura
The commit 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device handlers") removed reference counting of attached scsi device handler. As a result, handler data is freed immediately via scsi_dh->detach() in the context of scsi_remove_device() where activation request can be still in