linux/drivers/infiniband/hw/cxgb4
Steve Wise 8b1bbf36b7 iw_cxgb4: remove the stid on listen create failure
If a listen create fails, then the server tid (stid) is incorrectly left
in the stid idr table, which can cause a touch-after-free if the stid
is looked up and the already freed endpoint is touched.  So make sure
and remove it in the error path.

Cc: stable@vger.kernel.org
Signed-off-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>
2017-09-22 12:59:42 -04:00
..
Kconfig libcxgb,iw_cxgb4,cxgbit: add cxgb_get_4tuple() 2016-09-15 20:49:19 -04:00
Makefile libcxgb,iw_cxgb4,cxgbit: add cxgb_get_4tuple() 2016-09-15 20:49:19 -04:00
cm.c iw_cxgb4: remove the stid on listen create failure 2017-09-22 12:59:42 -04:00
cq.c cxgb4: Fix error codes in c4iw_create_cq() 2017-07-20 11:20:49 -04:00
device.c RDMA: Remove useless MODULE_VERSION 2017-07-24 08:45:11 -04:00
ev.c cxgb4: Convert PDBG to pr_debug 2017-04-20 16:14:13 -04:00
id_table.c drivers/infiniband/hw: rename random32() to prandom_u32() 2013-05-07 18:38:27 -07:00
iw_cxgb4.h cxgb4: Convert PDBG to pr_debug 2017-04-20 16:14:13 -04:00
mem.c iw_cxgb4: fix misuse of integer variable 2017-08-16 11:43:21 -04:00
provider.c RDMA: Simplify get firmware interface 2017-08-10 13:28:10 +03:00
qp.c iw_cxgb4: don't use WR keys/addrs for 0 byte reads 2017-07-20 11:20:50 -04:00
resource.c cxgb4: Convert PDBG to pr_debug 2017-04-20 16:14:13 -04:00
t4.h cxgb4: Convert PDBG to pr_debug 2017-04-20 16:14:13 -04:00
t4fw_ri_api.h iw_cxgb4: add fast-path for small REG_MR operations 2016-10-07 16:54:40 -04:00