Mikhail Malygin 7ecfbee3b9 RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue ... [ Upstream commit 5f0b2a6093 ] rxe_post_send_kernel() iterates over linked list of wr's, until the wr->next ptr is NULL. However if we've got an interrupt after last wr is posted, control may be returned to the code after send completion callback is executed and wr memory is freed. As a result, wr->next pointer may contain incorrect value leading to panic. Store the wr->next on the stack before posting it. Fixes: 8700e3e7c4 ("Soft RoCE driver") Link: https://lore.kernel.org/r/20200716190340.23453-1-m.malygin@yadro.com Signed-off-by: Mikhail Malygin <m.malygin@yadro.com> Signed-off-by: Sergey Kojushev <s.kojushev@yadro.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2020-08-19 08:16:12 +02:00
..
rdmavt	IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE	2020-08-05 09:59:42 +02:00
rxe	RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue	2020-08-19 08:16:12 +02:00
siw	RDMA/siw: Fix reporting vendor_part_id	2020-07-16 08:16:40 +02:00
Makefile	rdma/siw: addition to kernel build environment	2019-07-02 17:03:41 -03:00