Myungho Jung 5fc01fb846 RDMA/cma: Rollback source IP address if failing to acquire device ... If cma_acquire_dev_by_src_ip() returns error in addr_handler(), the device state changes back to RDMA_CM_ADDR_BOUND but the resolved source IP address is still left. After that, if rdma_destroy_id() is called after rdma_listen(), the device is freed without removed from listen_any_list in cma_cancel_operation(). Revert to the previous IP address if acquiring device fails. Reported-by: syzbot+f3ce716af730c8f96637@syzkaller.appspotmail.com Signed-off-by: Myungho Jung <mhjungk@gmail.com> Reviewed-by: Parav Pandit <parav@mellanox.com> Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>		2019-01-14 15:28:26 -07:00
..
core	RDMA/cma: Rollback source IP address if failing to acquire device	2019-01-14 15:28:26 -07:00
hw	RDMA/bnxt_re: fix a size calculation	2019-01-14 14:05:54 -07:00
sw	RDMA: Introduce and use rdma_device_to_ibdev()	2019-01-14 13:12:03 -07:00
ulp	IB/srp: Use struct_size() in kzalloc()	2019-01-08 15:46:59 -07:00
Kconfig	IB/{core,uverbs}: Move ib_umem_xxx functions from ib_core to ib_uverbs	2019-01-10 17:06:44 -07:00
Makefile