tree 0457d1bbba7f4e9f8d0077974c580b84b7d3d2bf
parent bd63141d585bef14f4caf111f6d0e27fe2300ec6
author Ming Lei <ming.lei@redhat.com> 1620746556 +0800
committer Jens Axboe <axboe@kernel.dk> 1621860442 -0600

blk-mq: clearing flush request reference in tags->rqs[]

Before we free request queue, clearing flush request reference in
tags->rqs[], so that potential UAF can be avoided.

Based on one patch written by David Jeffery.

Tested-by: John Garry <john.garry@huawei.com>
Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Reviewed-by: David Jeffery <djeffery@redhat.com>
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Link: https://lore.kernel.org/r/20210511152236.763464-5-ming.lei@redhat.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>