Alexey Kuznetsov 4e46bf8997 [SCSI] fix crash when disconnecting usb storage ... __scsi_remove_device() in scsi_forget_host() is executed out of scan_mutex and races with scsi_destroy_sdev() <- scsi_sysfs_add_devices() <- scsi_finish_async_scan(). The result is use after free and/or double free, oops. The fix is simple, move scsi_forget_host() under scan_mutex. scsi_forget_host() is just sequence of __scsi_remove_device(). All another calls of __scsi_remove_device() are made under scan_mutex. So that it is safe. Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru> Signed-off-by: Denis V. Lunev <den@openvz.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: James Bottomley <James.Bottomley@suse.de>		2009-11-26 10:04:22 -06:00
..
aacraid
aic7xxx	trivial: fix typo in aic7xxx comment	2009-09-21 15:15:53 +02:00
aic7xxx_old
aic94xx
arcmsr
arm
be2iscsi	[SCSI] be2iscsi: Moving to pci_pools v3	2009-10-02 14:01:55 -05:00
bfa	[SCSI] bfa: declare MODULE_FIRMWARE	2009-11-11 12:21:06 -05:00
bnx2i	[SCSI] libiscsi: iscsi_session_setup to allow for private space	2009-10-02 14:01:39 -05:00
cxgb3i	[SCSI] libiscsi: iscsi_session_setup to allow for private space	2009-10-02 14:01:39 -05:00
device_handler	[SCSI] scsi_dh_rdac: Fix for returning correct mode select cmd return info	2009-10-02 09:45:09 -05:00
dpt
fcoe	includecheck fix: drivers/scsi, libfcoe.c	2009-09-20 16:01:02 +05:30
fnic	[SCSI] fcoe, fnic, libfc: modifies current code paths to use EM anchor list	2009-08-22 17:52:08 -05:00
ibmvscsi	includecheck fix: drivers/scsi, ibmvscsi.c	2009-09-20 16:01:29 +05:30
libfc	[SCSI] libfc: don't swap OX_ID and RX_ID when sending BA_RJT	2009-09-10 12:08:03 -05:00
libsas	[SCSI] libsas: do not set res = 0 in sas_ex_discover_dev()	2009-11-06 13:10:42 -06:00
lpfc	[SCSI] Deprecate SCSI_PROT_*_CONVERT operations	2009-10-02 09:46:25 -05:00
megaraid	trivial: fix typo "to to" in multiple files	2009-09-21 15:14:55 +02:00
mpt2sas	[SCSI] mpt2sas: Bump version 02.100.03.00	2009-10-02 09:49:24 -05:00
mvsas	[SCSI] mvsas: Support Areca SAS/SATA HBA, ARC-1300/1320	2009-10-02 09:44:45 -05:00
osd
pcmcia	[SCSI] nsp_cs: fix buf overflow	2009-08-22 17:52:22 -05:00
qla2xxx	[SCSI] qla2xxx: Fix NULL ptr deref bug in fail path during queue create	2009-10-02 14:13:04 -05:00
qla4xxx	trivial: fix typo "to to" in multiple files	2009-09-21 15:14:55 +02:00
sym53c8xx_2
.gitignore
3w-9xxx.c
3w-9xxx.h
3w-xxxx.c
3w-xxxx.h
53c700_d.h_shipped
53c700.c
53c700.h
53c700.scr
a100u2w.c
a100u2w.h
a2091.c
a2091.h
a3000.c
a3000.h
a4000t.c
advansys.c
aha152x.c
aha152x.h
aha1542.c
aha1542.h
aha1740.c
aha1740.h
aic7xxx_old.c
atari_NCR5380.c
atari_scsi.c
atari_scsi.h
atp870u.c
atp870u.h
BusLogic.c
BusLogic.h
bvme6000_scsi.c
ch.c	[SCSI] ch: Check NULL for kmalloc() return	2009-08-22 17:52:22 -05:00
constants.c	[SCSI] update scsi/constants.c	2009-08-22 17:51:50 -05:00
dc395x.c
dc395x.h
dmx3191d.c
dpt_i2o.c	dpt_i2o: Fix typo of EINVAL	2009-10-31 12:11:38 -07:00
dpti.h
dtc.c
dtc.h
eata_generic.h
eata_pio.c
eata_pio.h
eata.c
esp_scsi.c
esp_scsi.h
fd_mcs.c
fdomain.c
fdomain.h
FlashPoint.c
g_NCR5380_mmio.c
g_NCR5380.c
g_NCR5380.h
gdth_ioctl.h
gdth_proc.c
gdth_proc.h
gdth.c	[SCSI] gdth: Prevent negative offsets in ioctl CVE-2009-3080	2009-11-11 12:14:21 -05:00
gdth.h
gvp11.c
gvp11.h
hosts.c	[SCSI] fix crash when disconnecting usb storage	2009-11-26 10:04:22 -06:00
hptiop.c	[SCSI] hptiop: Add RR44xx adapter support	2009-10-02 09:45:22 -05:00
hptiop.h	[SCSI] hptiop: Add RR44xx adapter support	2009-10-02 09:45:22 -05:00
ibmmca.c
imm.c
imm.h
in2000.c
in2000.h
initio.c
initio.h
ipr.c	[SCSI] ipr: add workaround for MSI interrupts on P7	2009-11-06 11:09:27 -06:00
ipr.h	[SCSI] ipr: add workaround for MSI interrupts on P7	2009-11-06 11:09:27 -06:00
ips.c
ips.h
iscsi_tcp.c	[SCSI] libiscsi: iscsi_session_setup to allow for private space	2009-10-02 14:01:39 -05:00
iscsi_tcp.h
jazz_esp.c
Kconfig	[SCSI] be2iscsi: add 10Gbps iSCSI - BladeEngine 2 driver	2009-10-02 09:50:33 -05:00
lasi700.c
libiscsi_tcp.c
libiscsi.c	[SCSI] libiscsi: iscsi_session_setup to allow for private space	2009-10-02 14:01:39 -05:00
libsrp.c	[SCSI] libsrp: fix memory leak in srp_ring_free()	2009-09-12 09:35:34 -05:00
mac53c94.c
mac53c94.h
mac_esp.c
mac_scsi.c
mac_scsi.h
Makefile	[SCSI] be2iscsi: add 10Gbps iSCSI - BladeEngine 2 driver	2009-10-02 09:50:33 -05:00
megaraid.c
megaraid.h
mesh.c
mesh.h
mvme16x_scsi.c
mvme147.c
mvme147.h
ncr53c8xx.c
ncr53c8xx.h
NCR53c406a.c
NCR5380.c
NCR5380.h
NCR_D700.c
NCR_D700.h
NCR_Q720.c
NCR_Q720.h
nsp32_debug.c
nsp32_io.h
nsp32.c
nsp32.h
osst_detect.h
osst_options.h
osst.c
osst.h
pas16.c
pas16.h
pmcraid.c	[SCSI] pmcraid: Fix ppc64 driver build for using cpu_to_le32 on U8 data type	2009-11-06 11:09:28 -06:00
pmcraid.h	headers: kref.h redux	2009-09-26 10:17:19 -07:00
ppa.c
ppa.h
ps3rom.c
qla1280.c
qla1280.h
qlogicfas408.c
qlogicfas408.h
qlogicfas.c
qlogicpti.c
qlogicpti.h
raid_class.c
script_asm.pl
scsi_debug.c	[SCSI] scsi_debug: Implement support for DIF Type 2	2009-10-02 09:47:17 -05:00
scsi_devinfo.c
scsi_error.c	[SCSI] Retry ADD_TO_MLQUEUE return value for EH commands	2009-10-02 09:46:11 -05:00
scsi_ioctl.c
scsi_lib_dma.c
scsi_lib.c	Merge branch 'for-2.6.32' of git://git.kernel.dk/linux-2.6-block	2009-09-14 17:55:15 -07:00
scsi_logging.h
scsi_module.c
scsi_netlink.c
scsi_priv.h	driver model: constify attribute groups	2009-09-15 09:50:47 -07:00
scsi_proc.c
scsi_sas_internal.h
scsi_scan.c	[SCSI] fix async scan add/remove race resulting in an oops	2009-11-26 09:43:39 -06:00
scsi_sysctl.c
scsi_sysfs.c	[SCSI] fix async scan add/remove race resulting in an oops	2009-11-26 09:43:39 -06:00
scsi_tgt_if.c
scsi_tgt_lib.c
scsi_tgt_priv.h
scsi_transport_api.h
scsi_transport_fc_internal.h
scsi_transport_fc.c	[SCSI] scsi_transport_fc: Fix WARN message for FC passthru failure paths	2009-11-06 11:09:26 -06:00
scsi_transport_iscsi.c	[SCSI] iscsi class: Add logging to scsi_transport_iscsi.c	2009-09-05 09:42:45 -05:00
scsi_transport_sas.c	[SCSI] scsi_transport_sas: fix incorrect duplicate setup of max_phys	2009-08-22 17:52:01 -05:00
scsi_transport_spi.c
scsi_transport_srp_internal.h
scsi_transport_srp.c
scsi_typedefs.h
scsi_wait_scan.c
scsi.c	[SCSI] Fix protection scsi_data_buffer leak	2009-10-02 09:46:52 -05:00
scsi.h
scsicam.c
sd_dif.c	[SCSI] sd: Return correct error code for DIF	2009-11-26 08:54:46 -06:00
sd.c	[SCSI] sd: Support disks formatted with DIF Type 2	2009-10-02 09:47:04 -05:00
sd.h	[SCSI] sd: Support disks formatted with DIF Type 2	2009-10-02 09:47:04 -05:00
ses.c	[SCSI] ses: update enclosure data on hot add	2009-08-22 17:52:14 -05:00
sg.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-rc-fixes-2.6	2009-10-11 11:12:33 -07:00
sgiwd93.c
sim710.c
sni_53c710.c
sr_ioctl.c
sr_vendor.c
sr.c	[SCSI] sr: consider the last written sector when determining media size	2009-10-02 09:45:46 -05:00
sr.h
st_options.h
st.c	[SCSI] st: fix possible memory use after free after MTSETBLK ioctl	2009-10-02 14:11:58 -05:00
st.h
stex.c	[SCSI] stex: Add reset code for st_yel (v2)	2009-09-05 08:50:41 -05:00
sun3_NCR5380.c
sun3_scsi_vme.c
sun3_scsi.c
sun3_scsi.h
sun3x_esp.c
sun_esp.c
sym53c416.c
sym53c416.h
t128.c
t128.h
tmscsim.c
tmscsim.h
u14-34f.c
ultrastor.c
ultrastor.h
wd33c93.c
wd33c93.h
wd7000.c
zalon.c
zorro7xx.c