Dan Carpenter 7169938b07 xprtrdma: Double free in rpcrdma_sendctxs_create() ...

[ Upstream commit 6e17f58c48 ]

The clean up is handled by the caller, rpcrdma_buffer_create(), so this
call to rpcrdma_sendctxs_destroy() leads to a double free.

Fixes: ae72950abf ("xprtrdma: Add data structure to manage RDMA Send arguments")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-02-27 10:08:53 +01:00

..

auth_gss

sunrpc: fix 4 more call sites that were using stack memory with a scatterlist

2019-02-23 09:07:27 +01:00

xprtrdma

xprtrdma: Double free in rpcrdma_sendctxs_create()

2019-02-27 10:08:53 +01:00

addr.c

…

auth_generic.c

SUNRPC: Fix a bogus get/put in generic_key_to_expire()

2018-12-01 09:37:33 +01:00

auth_null.c

…

auth_unix.c

…

auth.c

…

backchannel_rqst.c

…

cache.c

sunrpc: fix cache_head leak due to queued request

2019-01-13 09:51:05 +01:00

clnt.c

SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT

2019-02-15 08:10:13 +01:00

debugfs.c

…

Kconfig

…

Makefile

…

netns.h

…

rpc_pipe.c

…

rpcb_clnt.c

sunrpc: handle ENOMEM in rpcb_getport_async

2019-01-22 21:40:35 +01:00

sched.c

…

socklib.c

…

stats.c

…

sunrpc_syms.c

…

sunrpc.h

…

svc_xprt.c

sunrpc: use-after-free in svc_process_common()

2019-01-16 22:04:37 +01:00

svc.c

sunrpc: use-after-free in svc_process_common()

2019-01-16 22:04:37 +01:00

svcauth_unix.c

…

svcauth.c

…

svcsock.c

sunrpc: use-after-free in svc_process_common()

2019-01-16 22:04:37 +01:00

sysctl.c

…

timer.c

…

xdr.c

…

xprt.c

SUNRPC: Fix a potential race in xprt_connect()

2018-12-21 14:15:17 +01:00

xprtmultipath.c

…

xprtsock.c

SUNRPC: Fix a race with XPRT_CONNECTING

2019-01-13 09:51:01 +01:00