2b9ee71f4911c
parent e54f81889cd5228e7087637c377d76301c7c5663
author Krishna Kumar <krkumar2@in.ibm.com> 1163044834 +0530
committer Roland Dreier <rolandd@cisco.com> 1164843187 -0800

RDMA/iwcm: Fix memory corruption bug in cm_work_handler()

Possible memory corruption scenario: after putting the work entry back
on the work_free_list, we call process_event() which dereferences
work->event, which could have been modified to another value
meanwhile.

Signed-off-by: Krishna Kumar <krkumar2@in.ibm.com>
Acked-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Mª×l–