From: Lv Yunlong Date: Thu, 11 Mar 2021 06:46:36 +0000 (-0800) Subject: scsi: st: Fix a use after free in st_open() X-Git-Url: http://git.maquefel.me/?a=commitdiff_plain;h=c8c165dea4c8f5ad67b1240861e4f6c5395fa4ac;p=linux.git scsi: st: Fix a use after free in st_open() In st_open(), if STp->in_use is true, STp will be freed by scsi_tape_put(). However, STp is still used by DEBC_printk() after. It is better to DEBC_printk() before scsi_tape_put(). Link: https://lore.kernel.org/r/20210311064636.10522-1-lyl2019@mail.ustc.edu.cn Acked-by: Kai Mäkisara Signed-off-by: Lv Yunlong Signed-off-by: Martin K. Petersen --- diff --git a/drivers/scsi/st.c b/drivers/scsi/st.c index 841ad2fc369a0..9ca536aae7849 100644 --- a/drivers/scsi/st.c +++ b/drivers/scsi/st.c @@ -1269,8 +1269,8 @@ static int st_open(struct inode *inode, struct file *filp) spin_lock(&st_use_lock); if (STp->in_use) { spin_unlock(&st_use_lock); - scsi_tape_put(STp); DEBC_printk(STp, "Device already in use.\n"); + scsi_tape_put(STp); return (-EBUSY); }