https://github.com/torvalds/linux
Revision 8b1bbf36b7452c4acb20e91948eaa5e225ea6978 authored by Steve Wise on 05 September 2017, 18:52:34 UTC, committed by Doug Ledford on 22 September 2017, 16:59:42 UTC
If a listen create fails, then the server tid (stid) is incorrectly left
in the stid idr table, which can cause a touch-after-free if the stid
is looked up and the already freed endpoint is touched.  So make sure
and remove it in the error path.

Cc: stable@vger.kernel.org
Signed-off-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>
1 parent 3c8415c
History
Tip revision: 8b1bbf36b7452c4acb20e91948eaa5e225ea6978 authored by Steve Wise on 05 September 2017, 18:52:34 UTC
iw_cxgb4: remove the stid on listen create failure
Tip revision: 8b1bbf3

back to top