iSCSI generally includes a full SCSI response only when an error occurs. iscsi_scsi_done() currently passes the NULL response through to scsi_response(), which ends up causing scsicmd_response() to dereference a NULL pointer. Fix by calling scsi_response() only if we have a non-NULL response. Reported-by: Brendon Walsh <brendonwalsh@niamu.com> Tested-by: Brendon Walsh <brendonwalsh@niamu.com> Signed-off-by: Michael Brown <mcb30@ipxe.org>tags/v1.20.1
|
|
||
337 |
|
337 |
|
338 |
|
338 |
|
339 |
|
339 |
|
340 |
|
|
|
|
340 |
|
|
|
341 |
|
|
341 |
|
342 |
|
342 |
|
343 |
|
343 |
|
344 |
|