Revision bf74c7479ef47652005a2418eeb0d867451690da authored by Michael S. Tsirkin on 26 July 2006, 13:02:53 UTC, committed by Roland Dreier on 03 August 2006, 16:44:21 UTC
mthca_array_clear() does not clear the slot if the used count is
positive. This leads to crashes in mthca_qp_event() since that uses
mthca_array_get() to check that the qp is valid.

Discovered by Ali Ayoub.

Signed-off-by: Michael S. Tsirkin <mst@mellanox.co.il>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
1 parent 3f2792f
History
File Mode Size
21142.c -rw-r--r-- 7.9 KB
Kconfig -rw-r--r-- 6.2 KB
Makefile -rw-r--r-- 514 bytes
de2104x.c -rw-r--r-- 52.7 KB
de4x5.c -rw-r--r-- 167.6 KB
de4x5.h -rw-r--r-- 48.3 KB
dmfe.c -rw-r--r-- 55.6 KB
eeprom.c -rw-r--r-- 12.2 KB
interrupt.c -rw-r--r-- 26.2 KB
media.c -rw-r--r-- 15.9 KB
pnic.c -rw-r--r-- 5.3 KB
pnic2.c -rw-r--r-- 12.8 KB
timer.c -rw-r--r-- 5.0 KB
tulip.h -rw-r--r-- 13.0 KB
tulip_core.c -rw-r--r-- 54.8 KB
uli526x.c -rw-r--r-- 45.6 KB
winbond-840.c -rw-r--r-- 49.4 KB
xircom_cb.c -rw-r--r-- 32.2 KB
xircom_tulip_cb.c -rw-r--r-- 50.7 KB

back to top