xprtrdma: Double free in rpcrdma_sendctxs_create()
authorDan Carpenter <dan.carpenter@oracle.com>
Sat, 5 Jan 2019 13:06:48 +0000 (16:06 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 27 Feb 2019 09:08:53 +0000 (10:08 +0100)
commit7169938b07dbee55653d09adfa909dcf275ba10f
tree25bb6da3b3b56835e61e6d787d4acaef6ce9f86a
parentac3be9eb875f55e15d189af8154a312ef5297c73
xprtrdma: Double free in rpcrdma_sendctxs_create()

[ Upstream commit 6e17f58c486d9554341f70aa5b63b8fbed07b3fa ]

The clean up is handled by the caller, rpcrdma_buffer_create(), so this
call to rpcrdma_sendctxs_destroy() leads to a double free.

Fixes: ae72950abf99 ("xprtrdma: Add data structure to manage RDMA Send arguments")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Chuck Lever <chuck.lever@oracle.com>
Signed-off-by: Anna Schumaker <Anna.Schumaker@Netapp.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/sunrpc/xprtrdma/verbs.c