Spdk/lib/nvmf
Daniel Verkamp 8af4b6c40f nvmf: fix potential use-after-free in hot remove
The subsystem->ns array may be resized with realloc(), so old ns
pointers can become invalid.

To fix this, allocate each ns as a separate object, and change the
subsystem->ns[] array to point to the namespaces rather than containing
them.

Change-Id: I873502fa90cf840e4eaa9b1abd94a95afe0f737f
Signed-off-by: Daniel Verkamp <daniel.verkamp@intel.com>
Reviewed-on: https://review.gerrithub.io/399726
Tested-by: SPDK Automated Test System <sys_sgsw@intel.com>
Reviewed-by: Jim Harris <james.r.harris@intel.com>
Reviewed-by: Shuhei Matsumoto <shuhei.matsumoto.xt@hitachi.com>
2018-02-16 13:06:11 -05:00
..
ctrlr_bdev.c nvmf: Hot plug notifications now use the subsystem pause functionality 2018-01-17 17:28:13 -05:00
ctrlr_discovery.c nvmf: add support of hotplug for nvmf. 2017-12-15 16:14:02 -05:00
ctrlr.c nvmf: Solve the coredump issue when client conduct nvme disconnect 2018-02-15 13:19:08 -05:00
Makefile build: remove $(ENV_CFLAGS) where not necessary 2018-01-03 12:05:59 -05:00
nvmf_internal.h nvmf: fix potential use-after-free in hot remove 2018-02-16 13:06:11 -05:00
nvmf.c nvmf: fix potential use-after-free in hot remove 2018-02-16 13:06:11 -05:00
rdma.c nvmf_tgt: add IPv6 listen address support 2018-01-29 12:41:57 -05:00
request.c nvmf: remove spdk_nvmf_qpair::type field 2018-02-07 12:21:54 -05:00
subsystem.c nvmf: fix potential use-after-free in hot remove 2018-02-16 13:06:11 -05:00
transport.c nvmf: Remove poll group from controller 2017-12-12 15:01:17 -05:00
transport.h nvmf: Remove poll group from controller 2017-12-12 15:01:17 -05:00