iSCSI generally includes a full SCSI response only when an error occurs. iscsi_scsi_done() currently passes the NULL response through to scsi_response(), which ends up causing scsicmd_response() to dereference a NULL pointer. Fix by calling scsi_response() only if we have a non-NULL response. Reported-by: Brendon Walsh <brendonwalsh@niamu.com> Tested-by: Brendon Walsh <brendonwalsh@niamu.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>tags/v1.20.1
|
||
337 | 337 |
|
338 | 338 |
|
339 | 339 |
|
340 |
|
|
340 |
|
|
341 |
|
|
341 | 342 |
|
342 | 343 |
|
343 | 344 |
|