Commit 2d4b21e0 authored Jan 19, 2017 by Yonatan Cohen Committed by Doug Ledford Jan 24, 2017

IB/rxe: Prevent from completer to operate on non valid QP



On UD QP completer tasklet is scheduled for each packet sent.

If it is followed by a destroy_qp(), the kernel panic will
happen as the completer tries to operate on a destroyed QP.

Fixes: 8700e3e7 ("Soft RoCE driver")
Signed-off-by: Yonatan Cohen <yonatanc@mellanox.com>
Reviewed-by: Moni Shoua <monis@mellanox.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Doug Ledford <dledford@redhat.com>

parent f39f7752

drivers/infiniband/sw/rxe/rxe_qp.c

+1 −2

Original line number	Diff line number	Diff line
		@@ -813,7 +813,6 @@ void rxe_qp_destroy(struct rxe_qp *qp)
		del_timer_sync(&qp->rnr_nak_timer);

		rxe_cleanup_task(&qp->req.task);
		if (qp_type(qp) == IB_QPT_RC)
		rxe_cleanup_task(&qp->comp.task);

		/* flush out any receive wr's or pending requests */