summaryrefslogtreecommitdiff
path: root/drivers/nvme/host/rdma.c
diff options
context:
space:
mode:
authorIsrael Rukshin <israelr@mellanox.com>2017-11-05 08:43:01 +0000
committerJens Axboe <axboe@kernel.dk>2017-11-10 19:53:25 -0700
commit43b92fd27aaef0f529c9321cfebbaec1d7b8f503 (patch)
tree8709595d742fd21f2f0afa4e77b1610e1a3d62a1 /drivers/nvme/host/rdma.c
parent6ddcf0a30adc5080504ca66f474101e7ad247dd7 (diff)
nvmet-rdma: update queue list during ib_device removal
A NULL deref happens when nvmet_rdma_remove_one() is called more than once (e.g. while connected via 2 ports). The first call frees the queues related to the first ib_device but doesn't remove them from the queue list. While calling nvmet_rdma_remove_one() for the second ib_device it goes over the full queue list again and we get the NULL deref. Fixes: f1d4ef7d ("nvmet-rdma: register ib_client to not deadlock in device removal") Signed-off-by: Israel Rukshin <israelr@mellanox.com> Reviewed-by: Max Gurtovoy <maxg@mellanox.com> Reviewed-by: Sagi Grimberg <sagi@grmberg.me> Signed-off-by: Christoph Hellwig <hch@lst.de> Signed-off-by: Jens Axboe <axboe@kernel.dk>
Diffstat (limited to 'drivers/nvme/host/rdma.c')
0 files changed, 0 insertions, 0 deletions