]> asedeno.scripts.mit.edu Git - linux.git/commit
nvmet-rdma: Fix use after free in nvmet_rdma_cm_handler()
authorIsrael Rukshin <israelr@mellanox.com>
Wed, 14 Mar 2018 10:22:45 +0000 (10:22 +0000)
committerJens Axboe <axboe@kernel.dk>
Mon, 26 Mar 2018 14:53:43 +0000 (08:53 -0600)
commite1a2ee249b19c3a65de893150d2045099c693bc3
treee9d55dd34bbf893c1ee150a3c341fa8e20b154e5
parentbe9bddeb0a3ff017d9f56db99d67518c8a1b29cf
nvmet-rdma: Fix use after free in nvmet_rdma_cm_handler()

We free nvmet rdma queues while handling rdma_cm events.
In order to avoid this we destroy the qp and the queue after destroying
the cm_id which guarantees that all rdma_cm events are done.

Signed-off-by: Israel Rukshin <israelr@mellanox.com>
Reviewed-by: Max Gurtovoy <maxg@mellanox.com>
Signed-off-by: Keith Busch <keith.busch@intel.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
drivers/nvme/target/rdma.c