diff options
| author | Mustafa Ismail <[email protected]> | 2023-05-22 15:56:53 +0000 |
|---|---|---|
| committer | Jason Gunthorpe <[email protected]> | 2023-05-29 17:06:29 +0000 |
| commit | c8f304d75f6c6cc679a73f89591f9a915da38f09 (patch) | |
| tree | 02c545d91caedbaa6d2886a145241544cc4253cb /drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | |
| parent | MAINTAINERS: Update maintainer of Amazon EFA driver (diff) | |
| download | kernel-c8f304d75f6c6cc679a73f89591f9a915da38f09.tar.gz kernel-c8f304d75f6c6cc679a73f89591f9a915da38f09.zip | |
RDMA/irdma: Prevent QP use after free
There is a window where the poll cq may use a QP that has been freed.
This can happen if a CQE is polled before irdma_clean_cqes() can clear the
CQE's related to the QP and the destroy QP races to free the QP memory.
then the QP structures are used in irdma_poll_cq. Fix this by moving the
clearing of CQE's before the reference is removed and the QP is destroyed.
Fixes: b48c24c2d710 ("RDMA/irdma: Implement device supported verb APIs")
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Mustafa Ismail <[email protected]>
Signed-off-by: Shiraz Saleem <[email protected]>
Signed-off-by: Jason Gunthorpe <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_object.c')
0 files changed, 0 insertions, 0 deletions