Re: [PATCH] target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT

Hi Spencer & Alexei, On Tue, 2015-07-21 at 15:07 -0700, Spencer Baugh wrote: > From: Alexei Potashnik > > Make sure all non-READ SCSI commands get targ_xfer_tag initialized > to 0x, not just WRITEs. > > Double-free of a TUR cmd object occurs under the following scenario: > > 1. TUR rec

[PATCH] target/iscsi: Fix double free of a TUR followed by a solicited NOPOUT

From: Alexei Potashnik Make sure all non-READ SCSI commands get targ_xfer_tag initialized to 0x, not just WRITEs. Double-free of a TUR cmd object occurs under the following scenario: 1. TUR received (targ_xfer_tag is uninitialized and left at 0) 2. TUR status sent 3. First unsolicited N