> 发送时间: 2021-03-22 22:27:17 (星期一)
> > > 收件人: "Lv Yunlong"
> > > 抄送: s...@grimberg.me, dledf...@redhat.com, j...@ziepe.ca,
> > > linux-r...@vger.kernel.org, target-de...@vger.kernel.org,
> > > linux-kernel@vger.kernel.org
> > > 主题: Re: [PATCH] infini
, j...@ziepe.ca,
> > linux-r...@vger.kernel.org, target-de...@vger.kernel.org,
> > linux-kernel@vger.kernel.org
> > 主题: Re: [PATCH] infiniband: Fix a use after free in isert_connect_request
> >
> > On Mon, Mar 22, 2021 at 06:53:55AM -0700, Lv Yunlong wrote:
> > &g
> -原始邮件-
> 发件人: "Leon Romanovsky"
> 发送时间: 2021-03-22 22:27:17 (星期一)
> 收件人: "Lv Yunlong"
> 抄送: s...@grimberg.me, dledf...@redhat.com, j...@ziepe.ca,
> linux-r...@vger.kernel.org, target-de...@vger.kernel.org,
> linux-kernel@vger.kernel.or
On Mon, Mar 22, 2021 at 06:53:55AM -0700, Lv Yunlong wrote:
> The device is got by isert_device_get() with refcount is 1,
> and is assigned to isert_conn by isert_conn->device = device.
> When isert_create_qp() failed, device will be freed with
> isert_device_put().
>
> Later, the device is used i
The device is got by isert_device_get() with refcount is 1,
and is assigned to isert_conn by isert_conn->device = device.
When isert_create_qp() failed, device will be freed with
isert_device_put().
Later, the device is used in isert_free_login_buf(isert_conn)
by the isert_conn->device->ib_device
5 matches
Mail list logo
