Revision bf74c7479ef47652005a2418eeb0d867451690da authored by Michael S. Tsirkin on 26 July 2006, 13:02:53 UTC, committed by Roland Dreier on 03 August 2006, 16:44:21 UTC
mthca_array_clear() does not clear the slot if the used count is
positive. This leads to crashes in mthca_qp_event() since that uses
mthca_array_get() to check that the qp is valid.

Discovered by Ali Ayoub.

Signed-off-by: Michael S. Tsirkin <mst@mellanox.co.il>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
1 parent 3f2792f
History
File Mode Size
busses
chips
dev-interface -rw-r--r-- 5.9 KB
functionality -rw-r--r-- 5.3 KB
i2c-protocol -rw-r--r-- 2.4 KB
i2c-stub -rw-r--r-- 1.4 KB
porting-clients -rw-r--r-- 7.2 KB
smbus-protocol -rw-r--r-- 6.4 KB
summary -rw-r--r-- 2.8 KB
ten-bit-addresses -rw-r--r-- 1.1 KB
writing-clients -rw-r--r-- 24.8 KB

back to top