scsi: ufs: verify command tag validity
A race condition appear to exist between request completion when scsi_done() is called to end the request and set the tag back to -1 (at blk_queue_end_tag() scsi_end_request), and scsi layer error handling which aborts the command and reuses it to request sense data. Sending the request sense is done with tag which was set to -1 and so it is invalid. Assert command tag passed from scsi layer is valid. Reviewed-by:Subhash Jadavani <subhashj@codeaurora.org> Reviewed-by:
Dolev Raviv <draviv@codeaurora.org> Signed-off-by:
Gilad Broner <gbroner@codeaurora.org> Signed-off-by:
Yaniv Gardi <ygardi@codeaurora.org> Signed-off-by:
Martin K. Petersen <martin.petersen@oracle.com>
Showing
Please register or sign in to comment