]> git.baikalelectronics.ru Git - kernel.git/commit
RDMA/irdma: Fix a user-after-free in add_pble_prm
authorShiraz Saleem <shiraz.saleem@intel.com>
Tue, 7 Dec 2021 15:21:36 +0000 (09:21 -0600)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 Dec 2021 09:30:13 +0000 (10:30 +0100)
commit24a73596c3bf4b78ed07eebefdc0257b1fce44b6
treecbc3fe2cd0485f52df27219099a787d53406dab7
parent7237cf14eaf37652592c6ddef52de021ff6002ee
RDMA/irdma: Fix a user-after-free in add_pble_prm

[ Upstream commit b5132a16bc07818cda39c0319ff99f339d79900e ]

When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE
info list.

Add the chunk entry to the PBLE info list only after successful setting of
the SD in irdma_hmc_sd_one.

Fixes: bfac1f2d8d76 ("RDMA/irdma: Add PBLE resource manager")
Link: https://lore.kernel.org/r/20211207152135.2192-1-shiraz.saleem@intel.com
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Shiraz Saleem <shiraz.saleem@intel.com>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/infiniband/hw/irdma/pble.c