Steve Wise 8b1bbf36b7 iw_cxgb4: remove the stid on listen create failure ...

If a listen create fails, then the server tid (stid) is incorrectly left
in the stid idr table, which can cause a touch-after-free if the stid
is looked up and the already freed endpoint is touched.  So make sure
and remove it in the error path.

Cc: stable@vger.kernel.org
Signed-off-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>

2017-09-22 12:59:42 -04:00

..

cm.c

iw_cxgb4: remove the stid on listen create failure

2017-09-22 12:59:42 -04:00

cq.c

cxgb4: Fix error codes in c4iw_create_cq()

2017-07-20 11:20:49 -04:00

device.c

RDMA: Remove useless MODULE_VERSION

2017-07-24 08:45:11 -04:00

ev.c

cxgb4: Convert PDBG to pr_debug

2017-04-20 16:14:13 -04:00

id_table.c

drivers/infiniband/hw: rename random32() to prandom_u32()

2013-05-07 18:38:27 -07:00

iw_cxgb4.h

cxgb4: Convert PDBG to pr_debug

2017-04-20 16:14:13 -04:00

Kconfig

libcxgb,iw_cxgb4,cxgbit: add cxgb_get_4tuple()

2016-09-15 20:49:19 -04:00

Makefile

libcxgb,iw_cxgb4,cxgbit: add cxgb_get_4tuple()

2016-09-15 20:49:19 -04:00

mem.c

iw_cxgb4: fix misuse of integer variable

2017-08-16 11:43:21 -04:00

provider.c

RDMA: Simplify get firmware interface

2017-08-10 13:28:10 +03:00

qp.c

iw_cxgb4: don't use WR keys/addrs for 0 byte reads

2017-07-20 11:20:50 -04:00

resource.c

cxgb4: Convert PDBG to pr_debug

2017-04-20 16:14:13 -04:00

t4.h

cxgb4: Convert PDBG to pr_debug

2017-04-20 16:14:13 -04:00

t4fw_ri_api.h

iw_cxgb4: add fast-path for small REG_MR operations

2016-10-07 16:54:40 -04:00