| commit | 429bef6912bd3d504593b9aefdbcb39e981d387e | |
| author | Hervé Poussineau <hpoussin@reactos.org> | |
| Sat, 9 Jul 2011 14:44:41 +0000 (9 16:44 +0200) | ||
| committer | Blue Swirl <blauwirbel@gmail.com> | |
| Tue, 12 Jul 2011 21:29:39 +0000 (12 21:29 +0000) | ||
| tree | 9dc0f51af1225be4cacaf1560769d9f91cfca256 | treesnapshot (tar.gz zip) |
| parent | f5fc40bb8133849618e0d05adc798c5f07f7b17f | commitdiff |
esp: cancel current request only if some request is in flight
This bug was introduced in 94d3f98a3f3caddd7875f9a11776daeb84962a7b:
scsi_cancel_io was checking if some request was pending before trying
to cancel it, while scsi_req_cancel always cancels the request.
This may lead to a crash of Qemu due to dereferencing a NULL pointer,
as exhibited by NetBSD 5.1 installer on MIPS Magnum emulation.
Signed-off-by: Hervé Poussineau <hpoussin@reactos.org>
Signed-off-by: Blue Swirl <blauwirbel@gmail.com>
This bug was introduced in 94d3f98a3f3caddd7875f9a11776daeb84962a7b:
scsi_cancel_io was checking if some request was pending before trying
to cancel it, while scsi_req_cancel always cancels the request.
This may lead to a crash of Qemu due to dereferencing a NULL pointer,
as exhibited by NetBSD 5.1 installer on MIPS Magnum emulation.
Signed-off-by: Hervé Poussineau <hpoussin@reactos.org>
Signed-off-by: Blue Swirl <blauwirbel@gmail.com>
| hw/esp.c | diffblobblamehistory |