> qp_destroy() frees the RQ buffer and doorbell record of a driver-owned > QP even when DESTROY_QP fails. The QP then still exists in firmware and > can read WQEs and the doorbell record from freed memory. > > Return without freeing them in that case, as cq_destroy() does, and > include the QP type and the error in the warning. > > Signed-off-by: Yuho Choi <[email protected]>
Sashiko has reviewed this patch and found no issues. -- Sashiko AI review ยท https://sashiko.dev/#/patchset/[email protected]?part=1
