From: David S. Miller <davem@davemloft.net>
Date: Wed, 18 Jun 2008 06:53:22 +0000 (-0700)
Subject: [SCSI] esp: Fix OOPS in esp_reset_cleanup().
X-Git-Tag: v2.6.26-rc9~80^2~1
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=eadc49b1a8d09480f14caea292142f103a89c77a;p=pandora-kernel.git

[SCSI] esp: Fix OOPS in esp_reset_cleanup().

OOPS reported by Friedrich Oslage <bluebird@porno-bullen.de>

The problem here is that tp->starget is set every time a lun
is allocated for a particular target so we can catch the
sdev_target parent value.

The reset handler uses the NULL'ness of this value to determine
which targets are active.

But esp_slave_destroy() does not NULL out this value when appropriate.

So for every target that doesn't respond, the SCSI bus scan causes
a stale pointer to be left here, with ensuing crashes like you're
seeing.

Signed-off-by: David S. Miller <davem@davemloft.net>
Cc: Stable Tree <stable@kernel.org>
Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
---

Reading git-diff-tree failed