nvmet-rdma: Fix use after free
authorVincent Stehlé <vincent.stehle@intel.com>
Tue, 16 Aug 2016 13:11:25 +0000 (15:11 +0200)
committerSagi Grimberg <sagi@grimberg.me>
Tue, 16 Aug 2016 13:16:31 +0000 (16:16 +0300)
commit3256aaef5e9a851f6be47656868020726e102187
tree8ad23799a51b9f0c61ebea2a02ec8365acbd38b4
parent39bbee4e549fbc358b2ef9137c4bf459abd164fb
nvmet-rdma: Fix use after free

Avoid dereferencing the queue pointer in nvmet_rdma_release_queue_work()
after it has been freed by nvmet_rdma_free_queue().

Fixes: d8f7750a08968b10 ("nvmet-rdma: Correctly handle RDMA device hot removal")
Signed-off-by: Vincent Stehlé <vincent.stehle@intel.com>
Cc: Sagi Grimberg <sagi@grimberg.me>
Cc: Christoph Hellwig <hch@lst.de>
Signed-off-by: Sagi Grimberg <sagi@grimberg.me>
drivers/nvme/target/rdma.c