android_kernel_xiaomi_sm8350/drivers/infiniband/ulp/ipoib
Yossi Etigin ff79ae8083 IPoIB: Fix crash in path_rec_completion()
Fix a crash in path_rec_completion() during an SM up/down loop.  If
more than one path record request is issued, the first completion
releases path->done, allowing ipoib_flush_paths() to free the path,
and thus corrupting it for the second completion.

Commit ee1e2c82 ("IPoIB: Refresh paths instead of flushing them on SM
change events") added the field path->valid and changed the test "if
(!path)" to "if (!path || !path->valid)".  This change made it
possible for a path with an outstanding query to pass the test and
issue another query on the same path.  Having two queries on the same
path leads to a crash.

This fixes <https://bugs.openfabrics.org/show_bug.cgi?id=1325>.

Signed-off-by: Yossi Etigin <yosefe@voltaire.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
2008-11-12 10:24:39 -08:00
..
ipoib_cm.c IPoIB: Use netif_tx_lock() and get rid of private tx_lock, LLTX 2008-09-30 10:36:21 -07:00
ipoib_ethtool.c IPoIB: Clean up ethtool support 2008-10-22 15:49:29 -07:00
ipoib_fs.c RDMA: Remove subversion $Id tags 2008-07-14 23:48:44 -07:00
ipoib_ib.c IPoIB: Always initialize poll_timer to avoid crash on unload 2008-10-10 15:58:52 -07:00
ipoib_main.c IPoIB: Fix crash in path_rec_completion() 2008-11-12 10:24:39 -08:00
ipoib_multicast.c IPoIB: Use netif_tx_lock() and get rid of private tx_lock, LLTX 2008-09-30 10:36:21 -07:00
ipoib_verbs.c IPoIB: Get rid of ipoib_mcast_detach() wrapper 2008-07-14 23:48:50 -07:00
ipoib_vlan.c IPoIB: Set netdev offload features properly for child (VLAN) interfaces 2008-10-22 15:49:49 -07:00
ipoib.h IPoIB: Set netdev offload features properly for child (VLAN) interfaces 2008-10-22 15:49:49 -07:00
Kconfig IPoIB: Correct help text for INFINIBAND_IPOIB_DEBUG 2008-07-24 20:37:25 -07:00
Makefile