linux/drivers/infiniband
Jason Gunthorpe dd37d2f59e RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind
rdma_detroy_id() cannot be called under &lock - we must instead keep the
error'd ID around until &lock can be released, then destroy it.

This is complicated by the usual way listen IDs are destroyed through
cma_process_remove() which can run at any time and will asynchronously
destroy the same ID.

Remove the ID from visiblity of cma_process_remove() before going down the
destroy path outside the locking.

Fixes: c80a0c52d8 ("RDMA/cma: Add missing error handling of listen_id")
Link: https://lore.kernel.org/r/20201118133756.GK244516@ziepe.ca
Reported-by: syzbot+1bc48bf7f78253f664a9@syzkaller.appspotmail.com
Reviewed-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
2020-11-25 11:07:01 -04:00
..
core RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind 2020-11-25 11:07:01 -04:00
hw RDMA/hns: Refactor the hns_roce_buf allocation flow 2020-11-23 19:36:54 -04:00
sw RDMA/siw,rxe: Make emulated devices virtual in the device tree 2020-11-23 16:14:31 -04:00
ulp RDMA/ipoib: Distribute cq completion vector better 2020-11-20 16:18:59 -04:00
Kconfig RMDA/sw: Don't allow drivers using dma_virt_ops on highmem configs 2020-11-12 13:27:41 -04:00
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00