From: Krishna Kumar <krkumar2@in.ibm.com>
Date: Thu, 9 Nov 2006 04:00:34 +0000 (+0530)
Subject: RDMA/iwcm: Fix memory corruption bug in cm_work_handler()
X-Git-Tag: v2.6.20-rc1~34^2~40^2~471^2~13
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=33ba0fa9f315ce32fbb86fa671c131f5355b52a1;p=pandora-kernel.git

RDMA/iwcm: Fix memory corruption bug in cm_work_handler()

Possible memory corruption scenario: after putting the work entry back
on the work_free_list, we call process_event() which dereferences
work->event, which could have been modified to another value
meanwhile.

Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com>
Acked-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
---

Reading git-diff-tree failed