svn commit: r277647 - head/sys/cam/ctl

[Alexander Motin]

Author: mav
Date: Sat Jan 24 15:40:52 2015
New Revision: 277647
URL: https://svnweb.freebsd.org/changeset/base/277647

Log:
  Fix wrong LUN reference in XCOPY block-to-block operation.
  
  This could cause data corruption due to accessing wrong LUN in case of
  retries on write errors.  Failed writes were retried to read LUN.
  
  MFC after:	3 days

Modified:
  head/sys/cam/ctl/ctl_tpc.c

Modified: head/sys/cam/ctl/ctl_tpc.c
==============================================================================
--- head/sys/cam/ctl/ctl_tpc.c	Sat Jan 24 15:33:42 2015	(r277646)
+++ head/sys/cam/ctl/ctl_tpc.c	Sat Jan 24 15:40:52 2015	(r277647)
@@ -916,7 +916,7 @@ tpc_process_b2b(struct tpc_list *list)
 				    /*control*/ 0);
 		tiow->io->io_hdr.retries = 3;
 		tiow->lun = dl;
-		tiow->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tior;
+		tiow->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tiow;
 
 		TAILQ_INSERT_TAIL(&tior->run, tiow, rlinks);
 		TAILQ_INSERT_TAIL(prun, tior, rlinks);