Parav Pandit 73827a605b IB/core: Fix qp_sec use after free access ...

When security_ib_alloc_security fails, qp->qp_sec memory is freed.
However ib_destroy_qp still tries to access this memory which result
in kernel crash. So its initialized to NULL to avoid such access.

Fixes: d291f1a65232 ("IB/core: Enforce PKey security on QPs")
Signed-off-by: Parav Pandit <parav@mellanox.com>
Reviewed-by: Daniel Jurgens <danielj@mellanox.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Doug Ledford <dledford@redhat.com>

2017-09-25 11:47:23 -04:00

..

addr.c

Merge branch 'k.o/for-4.13-rc' into k.o/for-next

2017-08-18 14:12:04 -04:00

agent.c

IB/core: Rename ib_destroy_ah to rdma_destroy_ah

2017-05-01 14:32:43 -04:00

agent.h

…

cache.c

RDMA/(core, ulp): Convert register/unregister event handler to be void

2017-08-24 16:27:10 -04:00

cgroup.c

IB/core: added support to use rdma cgroup controller

2017-01-10 11:14:27 -05:00

cm_msgs.h

…

cm.c

IB/cm: Fix sleeping in atomic when RoCE is used

2017-08-31 08:35:07 -04:00

cma_configfs.c

IB/cma: Add default RoCE TOS to CMA configfs

2017-02-15 09:51:28 -05:00

cma.c

IB/cma: Fix erroneous validation of supported default GID type

2017-08-24 16:15:32 -04:00

core_priv.h

Merge branch 'rdma-netlink' into k.o/merge-test

2017-08-10 14:34:18 -04:00

cq.c

IB/cq: Don't process more than the given budget

2017-03-24 22:19:48 -04:00

device.c

Merge branch 'mellanox' into k.o/for-next

2017-08-24 20:25:15 -04:00

fmr_pool.c

IB/fmr_pool: Convert the cleanup thread into kthread worker API

2017-04-25 14:24:17 -04:00

iwcm.c

rdma: Autoload netlink client modules

2017-08-22 17:04:22 -04:00

iwcm.h

iw_cm: free cm_id resources on the last deref

2016-08-02 13:15:18 -04:00

iwpm_msg.c

RDMA/netlink: Rename and remove redundant parameter from ibnl_multicast

2017-08-10 13:19:03 +03:00

iwpm_util.c

RDMA/netlink: Rename and remove redundant parameter from ibnl_unicast*

2017-08-10 13:19:02 +03:00

iwpm_util.h

iwpm: crash fix for large connections test

2016-03-16 13:48:32 -04:00

mad_priv.h

…

mad_rmpp.c

IB/mad: Change slid in RMPP recv from 16 to 32 bits

2017-08-08 14:47:18 -04:00

mad_rmpp.h

…

mad.c

IB/core: Enforce security on management datagrams

2017-05-23 12:27:21 -04:00

Makefile

IB/core: Add uverbs merge trees functionality

2017-08-31 08:35:10 -04:00

mr_pool.c

IB/core: add a simple MR pool

2016-05-13 13:37:18 -04:00

multicast.c

IB/core: Define 'ib' and 'roce' rdma_ah_attr types

2017-05-01 14:32:43 -04:00

netlink.c

RDMA/netlink: clean up message validity array initializer

2017-09-08 10:17:20 -07:00

nldev.c

rdma: Autoload netlink client modules

2017-08-22 17:04:22 -04:00

opa_smi.h

…

packer.c

IB/core: trivial prink cleanup.

2016-03-03 10:20:25 -05:00

rdma_core.c

IB/core: Explicitly destroy an object while keeping uobject

2017-08-31 08:35:11 -04:00

rdma_core.h

IB/core: Add new ioctl interface

2017-08-31 08:35:09 -04:00

roce_gid_mgmt.c

IB/core: Add generic function to extract IB speed from netdev

2017-07-24 08:45:11 -04:00

rw.c

rdma core: Add rdma_rw_mr_payload()

2017-09-05 15:15:30 -04:00

sa_query.c

RDMA/(core, ulp): Convert register/unregister event handler to be void

2017-08-24 16:27:10 -04:00

sa.h

…

security.c

IB/core: Fix qp_sec use after free access

2017-09-25 11:47:23 -04:00

smi.c

…

smi.h

…

sysfs.c

RDMA: Simplify get firmware interface

2017-08-10 13:28:10 +03:00

ucm.c

IB/core: Convert ah_attr from OPA to IB when copying to user

2017-08-08 14:47:18 -04:00

ucma.c

IB/core: Convert ah_attr from OPA to IB when copying to user

2017-08-08 14:47:18 -04:00

ud_header.c

IB/core: trivial prink cleanup.

2016-03-03 10:20:25 -05:00

umem_odp.c

IB/umem: update to new mmu_notifier semantic

2017-08-31 16:12:59 -07:00

umem_rbtree.c

lib/interval_tree: fast overlap detection

2017-09-08 18:26:49 -07:00

umem.c

RDMA/core: not to set page dirty bit if it's already set.

2017-06-01 17:20:12 -04:00

user_mad.c

Add OPA extended LID support

2017-08-18 14:47:37 -04:00

uverbs_cmd.c

IB/core: Fix typo in the name of the tag-matching cap struct

2017-09-25 11:47:23 -04:00

uverbs_ioctl_merge.c

IB/core: Add uverbs merge trees functionality

2017-08-31 08:35:10 -04:00

uverbs_ioctl.c

IB/core: Add new ioctl interface

2017-08-31 08:35:09 -04:00

uverbs_main.c

IB/core: Expose ioctl interface through experimental Kconfig

2017-08-31 08:35:14 -04:00

uverbs_marshall.c

IB/core: Convert ah_attr from OPA to IB when copying to user

2017-08-08 14:47:18 -04:00

uverbs_std_types.c

IB/core: Add completion queue (cq) object actions

2017-08-31 08:35:13 -04:00

uverbs.h

IB/core: Expose ioctl interface through experimental Kconfig

2017-08-31 08:35:14 -04:00

verbs.c

IB/core: Fix for core panic

2017-09-22 11:52:09 -04:00