]> git.baikalelectronics.ru Git - kernel.git/commit
RDMA/core: Fix unsafe linked list traversal after failing to allocate CQ
authorXi Wang <wangxi11@huawei.com>
Tue, 1 Sep 2020 12:38:55 +0000 (20:38 +0800)
committerJason Gunthorpe <jgg@nvidia.com>
Wed, 2 Sep 2020 18:56:40 +0000 (15:56 -0300)
commit8aa64be019567c4f90d45c5082a4b6f22e182d00
treeb7ba451adcccf7febccdc91709063f0f2c11132f
parent097a9d23b7250355b182c5fd47dd4c55b22b1c33
RDMA/core: Fix unsafe linked list traversal after failing to allocate CQ

It's not safe to access the next CQ in list_for_each_entry() after
invoking ib_free_cq(), because the CQ has already been freed in current
iteration.  It should be replaced by list_for_each_entry_safe().

Fixes: c7ff819aefea ("RDMA/core: Introduce shared CQ pool API")
Link: https://lore.kernel.org/r/1598963935-32335-1-git-send-email-liweihang@huawei.com
Signed-off-by: Xi Wang <wangxi11@huawei.com>
Signed-off-by: Weihang Li <liweihang@huawei.com>
Reviewed-by: Jason Gunthorpe <jgg@nvidia.com>
Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
drivers/infiniband/core/cq.c