git: db8082886fd8 - releng/13.1 - CAM: Keep periph_links when restoring CCB in camperiphdone().

From: Mark Johnston <markj_at_FreeBSD.org>
Date: Tue, 09 Aug 2022 20:01:20 UTC
The branch releng/13.1 has been updated by markj:

URL: https://cgit.FreeBSD.org/src/commit/?id=db8082886fd8cfbd8a3d533bb530ad392d0c4d85

commit db8082886fd8cfbd8a3d533bb530ad392d0c4d85
Author:     Alexander Motin <mav@FreeBSD.org>
AuthorDate: 2022-04-28 01:39:50 +0000
Commit:     Mark Johnston <markj@FreeBSD.org>
CommitDate: 2022-07-25 21:00:19 +0000

    CAM: Keep periph_links when restoring CCB in camperiphdone().
    
    While recovery command executed, some other commands from the periph
    may complete, that may affect periph_links of this CCB.  So restoring
    original CCB we must keep current periph_links as more up to date.
    
    I've found this triggering assertions with debug kernel and suspect
    some memory corruptions otherwise when spun down disk receives two
    or sometimes more concurrent requests.
    
    Approved by:    so
    Security:       FreeBSD-EN22:17.cam
    MFC after:      1 week
    Sponsored by:   iXsystems, Inc.
    
    (cherry picked from commit 404f001161b975164d8b52d9f404d07ac7584027)
    (cherry picked from commit 84849cfd1dc016917402511bc5a55d3d7317ce39)
---
 sys/cam/cam_periph.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sys/cam/cam_periph.c b/sys/cam/cam_periph.c
index d08adca0ea1c..9a4f4a2b160b 100644
--- a/sys/cam/cam_periph.c
+++ b/sys/cam/cam_periph.c
@@ -1421,6 +1421,7 @@ camperiphdone(struct cam_periph *periph, union ccb *done_ccb)
 	 * and the result will be the final one returned to the CCB owher.
 	 */
 	saved_ccb = (union ccb *)done_ccb->ccb_h.saved_ccb_ptr;
+	saved_ccb->ccb_h.periph_links = done_ccb->ccb_h.periph_links;
 	bcopy(saved_ccb, done_ccb, sizeof(*done_ccb));
 	xpt_free_ccb(saved_ccb);
 	if (done_ccb->ccb_h.cbfcnp != camperiphdone)