blk-mq: clearing flush request reference in tags->rqs[]
authorMing Lei <ming.lei@redhat.com>
Tue, 11 May 2021 15:22:36 +0000 (23:22 +0800)
committerJens Axboe <axboe@kernel.dk>
Mon, 24 May 2021 12:47:22 +0000 (06:47 -0600)
commit364b61818f65045479e42e76ed8dd6f051778280
tree0457d1bbba7f4e9f8d0077974c580b84b7d3d2bf
parentbd63141d585bef14f4caf111f6d0e27fe2300ec6
blk-mq: clearing flush request reference in tags->rqs[]

Before we free request queue, clearing flush request reference in
tags->rqs[], so that potential UAF can be avoided.

Based on one patch written by David Jeffery.

Tested-by: John Garry <john.garry@huawei.com>
Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Reviewed-by: David Jeffery <djeffery@redhat.com>
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Link: https://lore.kernel.org/r/20210511152236.763464-5-ming.lei@redhat.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
block/blk-mq.c