summaryrefslogtreecommitdiffstats
path: root/drivers/scsi
diff options
context:
space:
mode:
authorBrian King2005-12-12 20:05:08 +0100
committerJames Bottomley2005-12-12 21:27:05 +0100
commit1a68de5c08be8c77c4ad208306187bd95107c7cd (patch)
tree27069553f2a991578355a26bddff2528014dc6fd /drivers/scsi
parent[SCSI] fix panic when ejecting ieee1394 ipod (diff)
downloadkernel-qcow2-linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.tar.gz
kernel-qcow2-linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.tar.xz
kernel-qcow2-linux-1a68de5c08be8c77c4ad208306187bd95107c7cd.zip
[SCSI] fix double free of scsi request queue
Current scsi scanning code appears to have a use after free bug is a LLDD's slave_alloc fails. Remove the redundant scsi_free_queue. Signed-off-by: Brian King <brking@us.ibm.com> Signed-off-by: James Bottomley <James.Bottomley@SteelEye.com>
Diffstat (limited to 'drivers/scsi')
-rw-r--r--drivers/scsi/scsi_scan.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/scsi/scsi_scan.c b/drivers/scsi/scsi_scan.c
index 374853df9cca..be276ea8f033 100644
--- a/drivers/scsi/scsi_scan.c
+++ b/drivers/scsi/scsi_scan.c
@@ -279,7 +279,6 @@ static struct scsi_device *scsi_alloc_sdev(struct scsi_target *starget,
out_device_destroy:
transport_destroy_device(&sdev->sdev_gendev);
- scsi_free_queue(sdev->request_queue);
put_device(&sdev->sdev_gendev);
out:
if (display_failure_msg)