linux/drivers/infiniband
Michael J. Ruhl b8f42738ac IB/hfi1: On error, fix use after free during user context setup
During base context setup, if setup_base_ctxt() fails, the context is
deallocated. This is incorrect because the context is referenced on
return, to notify any waiting subcontext.  If there are no subcontexts
the pointer will be invalid.

Reorganize the error path so that deallocate_ctxt() is called after all
the possible subcontexts have been notified.

Reviewed-by: Ira Weiny <ira.weiny@intel.com>
Signed-off-by: Michael J. Ruhl <michael.j.ruhl@intel.com>
Signed-off-by: Dennis Dalessandro <dennis.dalessandro@intel.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>
2017-09-27 11:10:36 -04:00
..
core IB/core: Fix qp_sec use after free access 2017-09-25 11:47:23 -04:00
hw IB/hfi1: On error, fix use after free during user context setup 2017-09-27 11:10:36 -04:00
sw IB/rxe: Handle NETDEV_CHANGE events 2017-08-28 19:12:36 -04:00
ulp Revert "IB/ipoib: Update broadcast object if PKey value was changed in index 0" 2017-09-27 11:10:36 -04:00
Kconfig IB/core: Expose ioctl interface through experimental Kconfig 2017-08-31 08:35:14 -04:00
Makefile IB/rdmavt: Create module framework and handle driver registration 2016-03-10 20:37:04 -05:00