Quoting r. Roland Dreier <[EMAIL PROTECTED]>:
> Subject: Re: [PATCH] ipoib_mcast_restart_task
> 
>     Michael> Not sure I read you. It'd still be use after free, won't it?
> 
> It's definitely a bug.  But it doesn't explain the specific oops we
> saw.

The mcast pointer comes from stack.  Surely we could have use after free in
ipoib_mcast_join_complete trigger data corruption on stack and then trip on it?

-- 
MST
_______________________________________________
openib-general mailing list
[email protected]
http://openib.org/mailman/listinfo/openib-general

To unsubscribe, please visit http://openib.org/mailman/listinfo/openib-general

Reply via email to