linux/drivers/infiniband
Zhu Yanjun a625ca30ef RDMA/rxe: Fix "kernel NULL pointer dereference" error
When rxe_queue_init in the function rxe_qp_init_req fails,
both qp->req.task.func and qp->req.task.arg are not initialized.

Because of creation of qp fails, the function rxe_create_qp will
call rxe_qp_do_cleanup to handle allocated resource.

Before calling __rxe_do_task, both qp->req.task.func and
qp->req.task.arg should be checked.

Fixes: 8700e3e7c4 ("Soft RoCE driver")
Link: https://lore.kernel.org/r/20220822011615.805603-2-yanjun.zhu@linux.dev
Reported-by: syzbot+ab99dc4c6e961eed8b8e@syzkaller.appspotmail.com
Signed-off-by: Zhu Yanjun <yanjun.zhu@linux.dev>
Reviewed-by: Li Zhijian <lizhijian@fujitsu.com>
Reviewed-by: Bob Pearson <rpearsonhpe@gmail.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
2022-08-31 09:53:12 +03:00
..
core IB/cm: Refactor cm_insert_listen() and cm_find_listen() 2022-08-30 12:14:23 +03:00
hw RDMA/hns: Remove redundant member doorbell_qpn of struct hns_roce_qp 2022-08-30 12:14:23 +03:00
sw RDMA/rxe: Fix "kernel NULL pointer dereference" error 2022-08-31 09:53:12 +03:00
ulp IB/cm: Remove the service_mask parameter from ib_cm_listen() 2022-08-30 12:14:23 +03:00
Kconfig RDMA/erdma: Add driver to kernel build environment 2022-07-27 16:04:05 -03:00
Makefile