Myungho Jung 9dd5053c8c RDMA/cma: Rollback source IP address if failing to acquire device ...

commit 5fc01fb846 upstream.

If cma_acquire_dev_by_src_ip() returns error in addr_handler(), the
device state changes back to RDMA_CM_ADDR_BOUND but the resolved source
IP address is still left. After that, if rdma_destroy_id() is called
after rdma_listen(), the device is freed without removed from
listen_any_list in cma_cancel_operation(). Revert to the previous IP
address if acquiring device fails.

Reported-by: syzbot+f3ce716af730c8f96637@syzkaller.appspotmail.com
Signed-off-by: Myungho Jung <mhjungk@gmail.com>
Reviewed-by: Parav Pandit <parav@mellanox.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-03-27 14:14:42 +09:00

..

core

RDMA/cma: Rollback source IP address if failing to acquire device

2019-03-27 14:14:42 +09:00

hw

IB/hfi1: Close race condition on user context disable and close

2019-03-23 20:10:02 +01:00

sw

rxe: IB_WR_REG_MR does not capture MR's iova field

2019-01-26 09:32:36 +01:00

ulp

IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start

2019-03-13 14:02:28 -07:00

Kconfig

IB/ucm: fix UCM link error

2018-08-21 16:56:32 -06:00

Makefile

IB/rdmavt: Create module framework and handle driver registration

2016-03-10 20:37:04 -05:00