]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8e87609) | patch
RDMA/iwcm: Don't access a cm_id after dropping reference
authorSteve Wise <swise@opengridcomputing.com>
Tue, 4 Mar 2008 22:44:52 +0000 (16:44 -0600)
committerRoland Dreier <rolandd@cisco.com>
Tue, 11 Mar 2008 04:22:22 +0000 (21:22 -0700)
commite89eb98ca302a7e761fc1b72415a25d661821b6e
tree0852af87269facc5f07f08bd20387f183976cca2tree | snapshot
parent8e87609c74480c4ab4f4a3ab3aa8ecdaba9749dbcommit | diff
RDMA/iwcm: Don't access a cm_id after dropping reference

cm_work_handler() can access cm_id_priv after it drops its reference
by calling iwch_deref_id(), which might cause it to be freed.  The fix
is to look at whether IWCM_F_CALLBACK_DESTROY is set _before_ dropping
the reference.  Then if it was set, free the cm_id on this thread.

Signed-off-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
drivers/infiniband/core/iwcm.c diff | blob | history
Linux Kernel Source Tree.