On 2/12/19, 6:30 AM, "Bill Kuzeja" <[email protected]> wrote:

    External Email
    
    ---
    In qla2x00_async_tm_cmd, we reference off sp after it has been freed.
    This caused a panic on a system running a slub debug kernel. Since
    fcport is passed in anyways, just use that instead.
    
    Signed-off-by: Bill Kuzeja <[email protected]>
    ---
     drivers/scsi/qla2xxx/qla_init.c | 4 ++--
     1 file changed, 2 insertions(+), 2 deletions(-)
    
    diff --git a/drivers/scsi/qla2xxx/qla_init.c 
b/drivers/scsi/qla2xxx/qla_init.c
    index aeeb014..8d1acc8 100644
    --- a/drivers/scsi/qla2xxx/qla_init.c
    +++ b/drivers/scsi/qla2xxx/qla_init.c
    @@ -1785,13 +1785,13 @@ void qla_rscn_replay(fc_port_t *fcport)
    
                    /* Issue Marker IOCB */
                    qla2x00_marker(vha, vha->hw->req_q_map[0],
    -                   vha->hw->rsp_q_map[0], sp->fcport->loop_id, lun,
    +                   vha->hw->rsp_q_map[0], fcport->loop_id, lun,
                        flags == TCF_LUN_RESET ? MK_SYNC_ID_LUN : MK_SYNC_ID);
            }
    
     done_free_sp:
            sp->free(sp);
    -       sp->fcport->flags &= ~FCF_ASYNC_SENT;
    +       fcport->flags &= ~FCF_ASYNC_SENT;
     done:
            return rval;
     }
    --

Acked-by: Giridhar Malavali <[email protected]>

    1.8.3.1
    
    

Reply via email to