Dan Carpenter 69dc8473b7 target/iscsi: Fix double free in lio_target_tiqn_addtpg() ...

commit a91918cd3ea11f91c68e08e1e8ce1b560447a80e upstream.

This iscsit_tpg_add_portal_group() function is only called from
lio_target_tiqn_addtpg().  Both functions free the "tpg" pointer on
error so it's a double free bug.  The memory is allocated in the caller
so it should be freed in the caller and not here.

Fixes: e48354ce07 ("iscsi-target: Add iSCSI fabric support for target v4.1")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: David Disseldorp <ddiss@suse.de>
[ bvanassche: Added "Fix" at start of patch title ]
Signed-off-by: Bart Van Assche <bart.vanassche@sandisk.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-01-12 11:22:49 +01:00

..

iscsi

target/iscsi: Fix double free in lio_target_tiqn_addtpg()

2017-01-12 11:22:49 +01:00

loopback

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2015-11-13 20:35:54 -08:00

sbp

target: use per-attribute show and store methods

2015-10-13 22:17:49 -07:00

tcm_fc

target: use per-attribute show and store methods

2015-10-13 22:17:49 -07:00

Kconfig

…

Makefile

…

target_core_alua.c

…

target_core_alua.h

…

target_core_configfs.c

target: use per-attribute show and store methods

2015-10-13 22:17:49 -07:00

target_core_device.c

target: Fix max_unmap_lba_count calc overflow

2016-08-20 18:09:26 +02:00

target_core_fabric_configfs.c

target: use per-attribute show and store methods

2015-10-13 22:17:49 -07:00

target_core_fabric_lib.c

…

target_core_file.c

target: Fix max_unmap_lba_count calc overflow

2016-08-20 18:09:26 +02:00

target_core_file.h

…

target_core_hba.c

target: Fix target_sense_desc_format NULL pointer dereference

2015-09-24 23:17:23 -07:00

target_core_iblock.c

target: Fix max_unmap_lba_count calc overflow

2016-08-20 18:09:26 +02:00

target_core_iblock.h

…

target_core_internal.h

target: Fix ordered task target_setup_cmd_from_cdb exception hang

2016-08-20 18:09:26 +02:00

target_core_pr.c

target: Fix PR registration + APTPL RCU conversion regression

2015-09-24 23:17:07 -07:00

target_core_pr.h

…

target_core_pscsi.c

…

target_core_pscsi.h

…

target_core_rd.c

Merge branch 'for-4.3/sg' of git://git.kernel.dk/linux-block

2015-09-02 13:22:38 -07:00

target_core_rd.h

…

target_core_sbc.c

target: Fix ordered task target_setup_cmd_from_cdb exception hang

2016-08-20 18:09:26 +02:00

target_core_spc.c

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

2015-09-11 19:00:42 -07:00

target_core_stat.c

target/stat: print full t10_wwn.model buffer

2015-11-28 21:23:13 -08:00

target_core_tmr.c

target: Drop incorrect ABORT_TASK put for completed commands

2016-03-16 08:43:01 -07:00

target_core_tpg.c

target: Propigate backend read-only to core_tpg_add_lun

2015-09-24 23:17:21 -07:00

target_core_transport.c

target: Make EXTENDED_COPY 0xe4 failure return COPY TARGET DEVICE NOT REACHABLE

2016-10-28 03:01:36 -04:00

target_core_ua.c

…

target_core_ua.h

…

target_core_user.c

target/user: Fix use-after-free of tcmu_cmds if they are expired

2017-01-09 08:07:53 +01:00

target_core_xcopy.c

target: Don't override EXTENDED_COPY xcopy_pt_cmd SCSI status code

2016-10-28 03:01:36 -04:00

target_core_xcopy.h

…