mirror of https://github.com/torvalds/linux.git
When abort failed, the driver gets reset handleer called. In the reset handler, driver calls 'scsi_done()' callback for same SCSI command packet (struct scsi_cmnd) multiple times if there are multiple SCSI command packet in the pend_list. More over, if there are entry in the pend_lsit with IOCTL packet associated, the driver returns it to wrong free_list so that, in turn, the driver could end up with 'NULL pointer dereference..' during I/O command building with incorrect resource. Also, the patch contains several minor/cosmetic changes besides this. Signed-off-by: Seokmann Ju <seokmann.ju@lsil.com> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: James Bottomley <James.Bottomley@SteelEye.com> |
||
|---|---|---|
| .. | ||
| 00-INDEX | ||
| 53c700.txt | ||
| BusLogic.txt | ||
| ChangeLog.1992-1997 | ||
| ChangeLog.ips | ||
| ChangeLog.lpfc | ||
| ChangeLog.megaraid | ||
| ChangeLog.megaraid_sas | ||
| ChangeLog.ncr53c8xx | ||
| ChangeLog.sym53c8xx | ||
| ChangeLog.sym53c8xx_2 | ||
| FlashPoint.txt | ||
| LICENSE.FlashPoint | ||
| LICENSE.qla2xxx | ||
| Mylex.txt | ||
| NinjaSCSI.txt | ||
| aacraid.txt | ||
| aha152x.txt | ||
| aic7xxx.txt | ||
| aic7xxx_old.txt | ||
| aic79xx.txt | ||
| cpqfc.txt | ||
| dc395x.txt | ||
| dpti.txt | ||
| dtc3x80.txt | ||
| g_NCR5380.txt | ||
| ibmmca.txt | ||
| in2000.txt | ||
| lpfc.txt | ||
| megaraid.txt | ||
| ncr53c7xx.txt | ||
| ncr53c8xx.txt | ||
| osst.txt | ||
| ppa.txt | ||
| qlogicfas.txt | ||
| scsi-changer.txt | ||
| scsi-generic.txt | ||
| scsi.txt | ||
| scsi_eh.txt | ||
| scsi_mid_low_api.txt | ||
| st.txt | ||
| sym53c8xx_2.txt | ||
| sym53c500_cs.txt | ||
| tmscsim.txt | ||