Re: svn commit: r298669 - head/sys/dev/iscsi_initiator

2016-04-26 Thread Conrad Meyer
On Tue, Apr 26, 2016 at 2:59 PM, Oliver Pinter wrote: > On Tue, Apr 26, 2016 at 11:44 PM, Conrad E. Meyer wrote: >> Author: cem >> Date: Tue Apr 26 21:44:08 2016 >> New Revision: 298669 >> URL: https://svnweb.freebsd.org/changeset/base/298669 >> ... > > MFC of this commit? You can do it whenever

Re: svn commit: r298669 - head/sys/dev/iscsi_initiator

2016-04-26 Thread Oliver Pinter
On Tue, Apr 26, 2016 at 11:44 PM, Conrad E. Meyer wrote: > Author: cem > Date: Tue Apr 26 21:44:08 2016 > New Revision: 298669 > URL: https://svnweb.freebsd.org/changeset/base/298669 > > Log: > iscsi_initiator(4): Fix use-after-free, double-free > > ism_stop() already destroys and frees 'sp',

svn commit: r298669 - head/sys/dev/iscsi_initiator

2016-04-26 Thread Conrad E. Meyer
Author: cem Date: Tue Apr 26 21:44:08 2016 New Revision: 298669 URL: https://svnweb.freebsd.org/changeset/base/298669 Log: iscsi_initiator(4): Fix use-after-free, double-free ism_stop() already destroys and frees 'sp', including a call to ic_destroy(). Don't dereference 'sp' after ism_sto