Re: [patch] mlx5: use after free in mlx5_cmd_comp_handler()

2013-07-24 Thread Eli Cohen
This race has been spotted and fixed by Moshe Lazer two weeks ago. Anyways, Acked by Eli Cohen e...@mellanox.com On Mon, Jul 22, 2013 at 11:02:01AM +0300, Dan Carpenter wrote: We can't dereference ent after passing it to free_cmd(). Signed-off-by: Dan Carpenter dan.carpen...@oracle.com

Re: [patch] mlx5: use after free in mlx5_cmd_comp_handler()

2013-07-24 Thread David Miller
From: Eli Cohen e...@dev.mellanox.co.il Date: Wed, 24 Jul 2013 19:35:44 +0300 This race has been spotted and fixed by Moshe Lazer two weeks ago. Anyways, Acked by Eli Cohen e...@mellanox.com Applied. -- To unsubscribe from this list: send the line unsubscribe linux-rdma in the body of a

[patch] mlx5: use after free in mlx5_cmd_comp_handler()

2013-07-22 Thread Dan Carpenter
We can't dereference ent after passing it to free_cmd(). Signed-off-by: Dan Carpenter dan.carpen...@oracle.com diff --git a/drivers/net/ethernet/mellanox/mlx5/core/cmd.c b/drivers/net/ethernet/mellanox/mlx5/core/cmd.c index 205753a..4037406 100644 ---