Commit 6fbf13c0 authored by Maurizio Lombardi's avatar Maurizio Lombardi Committed by Christoph Hellwig

nvme: clear the request_queue pointers on failure in nvme_alloc_io_tag_set

In nvme_alloc_io_tag_set(), the connect_q pointer should be set to NULL
in case of error to avoid potential invalid pointer dereferences.
Signed-off-by: default avatarMaurizio Lombardi <mlombard@redhat.com>
Reviewed-by: default avatarChaitanya Kulkarni <kch@nvidia.com>
Signed-off-by: default avatarChristoph Hellwig <hch@lst.de>
parent fd62678a
...@@ -4956,6 +4956,7 @@ int nvme_alloc_io_tag_set(struct nvme_ctrl *ctrl, struct blk_mq_tag_set *set, ...@@ -4956,6 +4956,7 @@ int nvme_alloc_io_tag_set(struct nvme_ctrl *ctrl, struct blk_mq_tag_set *set,
out_free_tag_set: out_free_tag_set:
blk_mq_free_tag_set(set); blk_mq_free_tag_set(set);
ctrl->connect_q = NULL;
return ret; return ret;
} }
EXPORT_SYMBOL_GPL(nvme_alloc_io_tag_set); EXPORT_SYMBOL_GPL(nvme_alloc_io_tag_set);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment