linux/drivers/infiniband/hw
Faisal Latif 43093b9412 RDMA/nes: Fix crash when listener destroyed during loopback setup
When a listener is destroyed and there is an MPA response pending for
loopback connection, the active side cm_node gets destroyed twice:
once in cm_event_connect_error() and again in nes_accept()/nes_reject().

Increment the cm_node's refcount so it's not destroyed by
cm_event_connect_error().

Signed-off-by: Faisal Latif <faisal.latif@intel.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
2010-02-19 11:38:27 -08:00
..
amso1100 RDMA/amso1100: Fix error paths in post_send and post_recv 2009-12-09 14:56:11 -08:00
cxgb3 kfifo: fix warn_unused_result 2009-12-22 14:17:56 -08:00
ehca Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/roland/infiniband 2009-12-16 10:32:31 -08:00
ipath Fix failure exit in ipathfs 2010-01-26 22:22:27 -05:00
mlx4 IB/mlx4: Fix queue overflow check in post_recv 2010-01-06 12:51:30 -08:00
mthca IB/mthca: Fix access to freed memory in catastrophic event handling 2009-09-24 11:55:41 -07:00
nes RDMA/nes: Fix crash when listener destroyed during loopback setup 2010-02-19 11:38:27 -08:00