linux/drivers/infiniband/hw
Michael S. Tsirkin bd18c11277 IB/mthca: Set cleaned CQEs back to HW ownership when cleaning CQ
mthca_cq_clean() updates the CQ consumer index without moving CQEs
back to HW ownership.  As a result, the same WRID might get reported
twice, resulting in a use-after-free.  This was observed in IPoIB CM.
Fix by moving all freed CQEs to HW ownership.

This fixes <https://bugs.openfabrics.org/show_bug.cgi?id=617>

Signed-off-by: Michael S. Tsirkin <mst@dev.mellanox.co.il>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
2007-05-14 14:10:34 -07:00
..
amso1100 IB/uverbs: Export ib_umem_get()/ib_umem_release() to modules 2007-05-08 18:00:37 -07:00
cxgb3 IB/uverbs: Export ib_umem_get()/ib_umem_release() to modules 2007-05-08 18:00:37 -07:00
ehca IB/ehca: Disable scaling code by default, bump version number 2007-05-14 13:41:40 -07:00
ipath IB/ipath: Shadow the gpio_mask register 2007-05-14 13:22:42 -07:00
mlx4 IB/mlx4: Fix uninitialized spinlock for 32-bit archs 2007-05-14 13:02:58 -07:00
mthca IB/mthca: Set cleaned CQEs back to HW ownership when cleaning CQ 2007-05-14 14:10:34 -07:00