git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e54f818) | patch
RDMA/iwcm: Fix memory corruption bug in cm_work_handler()
authorKrishna Kumar <krkumar2@in.ibm.com>
Thu, 9 Nov 2006 04:00:34 +0000 (09:30 +0530)
committerRoland Dreier <rolandd@cisco.com>
Wed, 29 Nov 2006 23:33:07 +0000 (15:33 -0800)
commit33ba0fa9f315ce32fbb86fa671c131f5355b52a1
tree3b6bd7f9efe82fe4e7298497c312b9ee71f4911ctree | snapshot
parente54f81889cd5228e7087637c377d76301c7c5663commit | diff
RDMA/iwcm: Fix memory corruption bug in cm_work_handler()

Possible memory corruption scenario: after putting the work entry back
on the work_free_list, we call process_event() which dereferences
work->event, which could have been modified to another value
meanwhile.

Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com>
Acked-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
drivers/infiniband/core/iwcm.c diff | blob | history
Pandora Kernel Repository