NetBSD/src Ny1UWb7 — sys/dev/pci vioscsi.c
Pull up following revision(s) (requested by maxv in ticket #1289):
sys/dev/pci/vioscsi.c: revision 1.21
Fix use-after-free. If we're not polling, virtio_enqueue_commit() will send
the transaction, and it means 'xs' can be immediately freed. So, save the
value of xs_control beforehand.
Detected by KASAN, ok jdolecek@.
Fixes PR/54008
| Version | Delta | File | |
|---|---|---|---|
| 1.19.2.1 | +5 | -3 | sys/dev/pci/vioscsi.c |
| +5 | -3 | 1 files | |
