| commit | 33ba0fa9f315ce32fbb86fa671c131f5355b52a1 | [log] [tgz] |
|---|---|---|
| author | Krishna Kumar <krkumar2@in.ibm.com> | Thu Nov 09 09:30:34 2006 +0530 |
| committer | Roland Dreier <rolandd@cisco.com> | Wed Nov 29 15:33:07 2006 -0800 |
| tree | 3b6bd7f9efe82fe4e7298497c312b9ee71f4911c | |
| parent | e54f81889cd5228e7087637c377d76301c7c5663 [diff] |
RDMA/iwcm: Fix memory corruption bug in cm_work_handler() Possible memory corruption scenario: after putting the work entry back on the work_free_list, we call process_event() which dereferences work->event, which could have been modified to another value meanwhile. Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com> Acked-by: Steve Wise <swise@opengridcomputing.com> Signed-off-by: Roland Dreier <rolandd@cisco.com>