Dan Carpenter 6075e944fe target/iscsi: Fix double free in lio_target_tiqn_addtpg() ...

commit a91918cd3ea11f91c68e08e1e8ce1b560447a80e upstream.

This iscsit_tpg_add_portal_group() function is only called from
lio_target_tiqn_addtpg().  Both functions free the "tpg" pointer on
error so it's a double free bug.  The memory is allocated in the caller
so it should be freed in the caller and not here.

Fixes: e48354ce07 ("iscsi-target: Add iSCSI fabric support for target v4.1")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: David Disseldorp <ddiss@suse.de>
[ bvanassche: Added "Fix" at start of patch title ]
Signed-off-by: Bart Van Assche <bart.vanassche@sandisk.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>

2017-06-08 00:46:53 +02:00

..

iscsi

target/iscsi: Fix double free in lio_target_tiqn_addtpg()

2017-06-08 00:46:53 +02:00

loopback

tcm_loop: Fix wrong I_T nexus association

2015-02-05 22:35:40 -08:00

sbp

…

tcm_fc

tcm_fc: missing curly braces in ft_invl_hw_context()

2015-04-13 14:02:11 +02:00

Kconfig

…

Makefile

…

target_core_alua.c

target: Allow READ_CAPACITY opcode in ALUA Standby access state

2014-06-16 13:42:53 -07:00

target_core_alua.h

…

target_core_configfs.c

target: Fix alua_access_state attribute OOPs for un-configured devices

2014-06-16 13:42:53 -07:00

target_core_device.c

target: Drop arbitrary maximum I/O size limit

2015-02-05 22:35:41 -08:00

target_core_fabric_configfs.c

…

target_core_fabric_lib.c

…

target_core_file.c

target: Drop arbitrary maximum I/O size limit

2015-02-05 22:35:41 -08:00

target_core_file.h

target/file: Update hw_max_sectors based on current block_size

2014-01-09 12:24:20 -08:00

target_core_hba.c

…

target_core_iblock.c

target: Drop arbitrary maximum I/O size limit

2015-02-05 22:35:41 -08:00

target_core_iblock.h

…

target_core_internal.h

target: Remove unused struct members in se_dev_entry

2013-05-03 16:42:18 -07:00

target_core_pr.c

target: Allow Write Exclusive non-reservation holders to READ

2015-03-26 15:01:02 +01:00

target_core_pr.h

target: Fix APTPL metadata handling for dynamic MappedLUNs

2014-11-14 08:47:57 -08:00

target_core_pscsi.c

target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST

2015-06-05 23:19:55 -07:00

target_core_pscsi.h

target/pscsi: Don't leak scsi_host if hba is VIRTUAL_HOST

2015-06-05 23:19:55 -07:00

target_core_rd.c

target: Explicitly clear ramdisk_mcp backend pages

2014-06-30 20:09:45 -07:00

target_core_rd.h

target/rd: Add ramdisk bit for NULLIO operation

2013-05-11 16:22:39 -07:00

target_core_sbc.c

target: Check for LBA + sectors wrap-around in sbc_parse_cdb

2015-03-18 13:22:28 +01:00

target_core_spc.c

target: Drop arbitrary maximum I/O size limit

2015-02-05 22:35:41 -08:00

target_core_stat.c

…

target_core_tmr.c

…

target_core_tpg.c

target: Fix APTPL metadata handling for dynamic MappedLUNs

2014-11-14 08:47:57 -08:00

target_core_transport.c

target: Fix reference leak in target_get_sess_cmd() error path

2015-03-26 15:01:01 +01:00

target_core_ua.c

…

target_core_ua.h

…