diff options
| author | Sagi Grimberg <sagi@grimberg.me> | 2018-06-25 20:58:17 +0300 |
|---|---|---|
| committer | Christoph Hellwig <hch@lst.de> | 2018-06-28 16:29:54 +0200 |
| commit | 682630f00a219a1b0696abe9c0967e660068187b (patch) | |
| tree | 43a225e137266a0943308eca09fdfd62acf6638e /lib/net_utils.c | |
| parent | 15bfd21fbc5d35834b9ea383dc458a1f0c9e3434 (diff) | |
nvme-rdma: fix possible double free of controller async event buffer
If reconnect/reset failed where the controller async event buffer
was freed, we might end up freeing it again as we call
nvme_rdma_destroy_admin_queue again in the remove path. Given that
the sequence is guaranteed to serialize by .ctrl_stop, we simply
set ctrl->async_event_sqe.data to NULL and don't free it in future
visits.
Reported-by: Max Gurtovoy <maxg@mellanox.com>
Tested-by: Max Gurtovoy <maxg@mellanox.com>
Signed-off-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Diffstat (limited to 'lib/net_utils.c')
0 files changed, 0 insertions, 0 deletions