diff options
| author | Chien Tung <ctung@neteffect.com> | 2008-10-10 04:41:05 +0400 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2008-10-10 04:41:05 +0400 |
| commit | fbcffcc6a0536544fa53cd5bd5c4913efe1a5982 (patch) | |
| tree | 7d93347e1d86da8ea2ee5a89474d48621a7f89d2 /drivers/infiniband/hw | |
| parent | e2f5e7333a2fb51ef9e45280c3da9ca3bde65fde (diff) | |
| download | linux-fbcffcc6a0536544fa53cd5bd5c4913efe1a5982.tar.xz | |
RDMA/nes: Fix slab corruption
Referencing cm_node after it is freed via rem_ref_cm_node() causes a
slab corruption. There is no need to set cm_node->cm_id to NULL in
mini_cm_close().
Signed-off-by: Chien Tung <ctung@neteffect.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/infiniband/hw')
| -rw-r--r-- | drivers/infiniband/hw/nes/nes_cm.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/drivers/infiniband/hw/nes/nes_cm.c b/drivers/infiniband/hw/nes/nes_cm.c index d69226d7102e..2caf9da81ad5 100644 --- a/drivers/infiniband/hw/nes/nes_cm.c +++ b/drivers/infiniband/hw/nes/nes_cm.c @@ -2029,7 +2029,6 @@ static int mini_cm_close(struct nes_cm_core *cm_core, struct nes_cm_node *cm_nod ret = rem_ref_cm_node(cm_core, cm_node); break; } - cm_node->cm_id = NULL; return ret; } |