diff options
| author | Tom Rix <[email protected]> | 2020-12-29 18:46:53 -0800 |
|---|---|---|
| committer | Jason Gunthorpe <[email protected]> | 2021-01-07 16:37:11 -0400 |
| commit | f2bc3af6353cb2a33dfa9d270d999d839eef54cb (patch) | |
| tree | c6f158c01dc4919e6957b40be489d3e5684456b9 /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | a306aba9c8d869b1fdfc8ad9237f1ed718ea55e6 (diff) | |
RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd()
In ocrdma_dealloc_ucontext_pd() uctx->cntxt_pd is assigned to the variable
pd and then after uctx->cntxt_pd is freed, the variable pd is passed to
function _ocrdma_dealloc_pd() which dereferences pd directly or through
its call to ocrdma_mbx_dealloc_pd().
Reorder the free using the variable pd.
Cc: [email protected]
Fixes: 21a428a019c9 ("RDMA: Handle PD allocations by IB/core")
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Tom Rix <[email protected]>
Reviewed-by: Leon Romanovsky <[email protected]>
Signed-off-by: Jason Gunthorpe <[email protected]>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions