diff options
| author | Leon Romanovsky <leonro@mellanox.com> | 2018-02-14 12:35:37 +0200 |
|---|---|---|
| committer | Jason Gunthorpe <jgg@mellanox.com> | 2018-02-15 15:31:26 -0700 |
| commit | 0cba0efcc7238d47a045a8d7a4079f6a22993546 (patch) | |
| tree | e35803a9f95ff2fc2f9188ab0f140819a878c1cc /drivers/slimbus/sched.c | |
| parent | 3f802b162dbf4a558ff98986449eddc717826209 (diff) | |
RDMA/restrack: Increment CQ restrack object before committing
Once the uobj is committed it is immediately possible another thread
could destroy it, which worst case, can result in a use-after-free
of the restrack objects.
Cc: syzkaller <syzkaller@googlegroups.com>
Fixes: 08f294a1524b ("RDMA/core: Add resource tracking for create and destroy CQs")
Reported-by: Noa Osherovich <noaos@mellanox.com>
Signed-off-by: Leon Romanovsky <leonro@mellanox.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Diffstat (limited to 'drivers/slimbus/sched.c')
0 files changed, 0 insertions, 0 deletions