Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 66e70bdc authored by Quinn Tran's avatar Quinn Tran Committed by Greg Kroah-Hartman
Browse files

qla2xxx: Fix request queue corruption. 



commit 8b666809e10cda9814af3e8be339d35b83909056 upstream.

When FW notify driver or driver detects low FW resource,
driver tries to send out Busy SCSI Status to tell Initiator
side to back off. During the send process, the lock was not held.

Signed-off-by: default avatarQuinn Tran <quinn.tran@qlogic.com>
Signed-off-by: default avatarHimanshu Madhani <himanshu.madhani@cavium.com>
Signed-off-by: default avatarNicholas Bellinger <nab@linux-iscsi.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent c5ad350d

drivers/scsi/qla2xxx/qla_target.c

+9 −3
Original line number Diff line number Diff line
@@ -5375,16 +5375,22 @@ qlt_send_busy(struct scsi_qla_host *vha, 


static int

qlt_chk_qfull_thresh_hold(struct scsi_qla_host *vha,

	struct atio_from_isp *atio)

	struct atio_from_isp *atio, bool ha_locked)

{

	struct qla_hw_data *ha = vha->hw;

	uint16_t status;

	unsigned long flags;



	if (ha->tgt.num_pend_cmds < Q_FULL_THRESH_HOLD(ha))

		return 0;



	if (!ha_locked)

		spin_lock_irqsave(&ha->hardware_lock, flags);

	status = temp_sam_status;

	qlt_send_busy(vha, atio, status);

	if (!ha_locked)

		spin_unlock_irqrestore(&ha->hardware_lock, flags);



	return 1;

}
@@ -5429,7 +5435,7 @@ static void qlt_24xx_atio_pkt(struct scsi_qla_host *vha, 




		if (likely(atio->u.isp24.fcp_cmnd.task_mgmt_flags == 0)) {

			rc = qlt_chk_qfull_thresh_hold(vha, atio);

			rc = qlt_chk_qfull_thresh_hold(vha, atio, ha_locked);

			if (rc != 0) {

				tgt->atio_irq_cmd_count--;

				return;
@@ -5552,7 +5558,7 @@ static void qlt_response_pkt(struct scsi_qla_host *vha, response_t *pkt) 
			break;

		}



		rc = qlt_chk_qfull_thresh_hold(vha, atio);

		rc = qlt_chk_qfull_thresh_hold(vha, atio, true);

		if (rc != 0) {

			tgt->irq_cmd_count--;

			return;