tree eb89ea587d49af31eb21ba2c08824c0b9cf056b0
parent 7e443312403ad1ff40ef3177590e96d1fe747c79
author James Bottomley <James.Bottomley@suse.de> 1281971186 -0500
committer James Bottomley <James.Bottomley@suse.de> 1284044298 -0500

[SCSI] fix use-after-free in scsi_init_io()

we're using a pointer through a freed command to reset the request,
which has shown up as an oops with slab poisoning:

Reported-by: Tejun Heo <tj@kernel.org>
Reported-by: Alexey Dobriyan <adobriyan@gmail.com>
Signed-off-by: James Bottomley <James.Bottomley@suse.de>