Nicholas Bellinger b04cb59bad iscsi-target: Fix memory corruption in iscsit_logout_post_handler_diffcid ...

commit b53b0d99d6 upstream.

This patch fixes a bug in iscsit_logout_post_handler_diffcid() where
a pointer used as storage for list_for_each_entry() was incorrectly
being used to determine if no matching entry had been found.

This patch changes iscsit_logout_post_handler_diffcid() to key off
bool conn_found to determine if the function needs to exit early.

Reported-by: Joern Engel <joern@logfs.org>
Signed-off-by: Nicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-10-05 14:54:12 -07:00

..

iscsi

iscsi-target: Fix memory corruption in iscsit_logout_post_handler_diffcid

2014-10-05 14:54:12 -07:00

loopback

tcm: switch to ->show_info()

2013-04-09 14:13:19 -04:00

sbp

Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

2013-03-02 11:43:27 -08:00

tcm_fc

target/tcm_fc: Fix use-after-free of ft_tpg

2014-05-06 07:55:30 -07:00

Kconfig

sbp-target: Initial merge of firewire/ieee-1394 target mode support

2012-05-09 15:25:17 -07:00

Makefile

target: move code for CDB emulation

2012-07-16 17:27:45 -07:00

target_core_alua.c

target: Allow READ_CAPACITY opcode in ALUA Standby access state

2014-06-16 13:42:53 -07:00

target_core_alua.h

target: pass sense_reason as a return value

2012-11-06 20:55:46 -08:00

target_core_configfs.c

target: Fix alua_access_state attribute OOPs for un-configured devices

2014-06-16 13:42:53 -07:00

target_core_device.c

target: Fix left-over se_lun->lun_sep pointer OOPs

2014-07-06 18:54:13 -07:00

target_core_fabric_configfs.c

target: Add missing mapped_lun bounds checking during make_mappedlun setup

2013-02-18 18:47:28 -08:00

target_core_fabric_lib.c

target: Update copyright information to 2012

2012-11-27 22:47:02 -08:00

target_core_file.c

target/file: Update hw_max_sectors based on current block_size

2014-01-09 12:24:20 -08:00

target_core_file.h

target/file: Update hw_max_sectors based on current block_size

2014-01-09 12:24:20 -08:00

target_core_hba.c

target: Update copyright information to 2012

2012-11-27 22:47:02 -08:00

target_core_iblock.c

target/iblock: Fix WCE=1 + DPOFUA=1 backend WRITE regression

2013-05-15 01:46:34 -07:00

target_core_iblock.h

target: kill struct se_subsystem_dev

2012-11-06 20:55:43 -08:00

target_core_internal.h

target: Remove unused struct members in se_dev_entry

2013-05-03 16:42:18 -07:00

target_core_pr.c

target: Fix >= v3.9+ regression in PR APTPL + ALUA metadata write-out

2013-09-26 17:18:27 -07:00

target_core_pr.h

target: pass sense_reason as a return value

2012-11-06 20:55:46 -08:00

target_core_pscsi.c

target/pscsi: fix return value check

2013-11-13 12:05:32 +09:00

target_core_pscsi.h

target: kill struct se_subsystem_dev

2012-11-06 20:55:43 -08:00

target_core_rd.c

target: Explicitly clear ramdisk_mcp backend pages

2014-06-30 20:09:45 -07:00

target_core_rd.h

target/rd: Add ramdisk bit for NULLIO operation

2013-05-11 16:22:39 -07:00

target_core_sbc.c

target: Report correct response length for some commands

2014-06-30 20:09:45 -07:00

target_core_spc.c

target: Report correct response length for some commands

2014-06-30 20:09:45 -07:00

target_core_stat.c

target: Update copyright information to 2012

2012-11-27 22:47:02 -08:00

target_core_tmr.c

target: Remove useless if statement

2013-02-13 11:27:22 -08:00

target_core_tpg.c

target: fix possible memory leak in core_tpg_register()

2013-03-18 12:45:52 -07:00

target_core_transport.c

target: Report correct response length for some commands

2014-06-30 20:09:45 -07:00

target_core_ua.c

target: Update copyright information to 2012

2012-11-27 22:47:02 -08:00

target_core_ua.h

target: pass sense_reason as a return value

2012-11-06 20:55:46 -08:00