PR/54008 CVS commit: [netbsd-8] src/sys/dev/pci

["Martin Husemann" <martin%netbsd.org@localhost>]

The following reply was made to PR kern/54008; it has been noted by GNATS.

From: "Martin Husemann" <martin%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/54008 CVS commit: [netbsd-8] src/sys/dev/pci
Date: Mon, 15 Jul 2019 08:23:23 +0000

 Module Name:	src
 Committed By:	martin
 Date:		Mon Jul 15 08:23:23 UTC 2019
 
 Modified Files:
 	src/sys/dev/pci [netbsd-8]: vioscsi.c
 
 Log Message:
 Pull up following revision(s) (requested by maxv in ticket #1289):
 
 	sys/dev/pci/vioscsi.c: revision 1.21
 
 Fix use-after-free. If we're not polling, virtio_enqueue_commit() will send
 the transaction, and it means 'xs' can be immediately freed. So, save the
 value of xs_control beforehand.
 
 Detected by KASAN, ok jdolecek@.
 Fixes PR/54008
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.19 -r1.19.2.1 src/sys/dev/pci/vioscsi.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.