diff options
| author | Eli Cohen <eli@mellanox.co.il> | 2006-02-27 20:47:43 -0800 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2006-03-20 10:08:18 -0800 |
| commit | 7343b231f22cec11f069bcdbb0c9a417df2750d3 (patch) | |
| tree | 3b72ba5f585fcab8271dc4be046b3bd447852847 /drivers/infiniband/hw/mthca/mthca_qp.c | |
| parent | 1d89b1ae6c203bc68a3f424be144abcdf62773c9 (diff) | |
IPoIB: Close race in setting mcast->ah
ipoib_mcast_send() tests mcast->ah twice. If this value is changed
between these two points, we leak an skb. However,
ipoib_mcast_join_finish() sets mcast->ah with no locking, so it could
race against ipoib_mcast_send().
As a solution, take priv->lock around assignment to mcast->ah thus
making sure ipoib_mcast_send() (which also takes priv->lock) is not in
flight.
Signed-off-by: Eli Cohen <eli@mellanox.co.il>
Signed-off-by: Michael S. Tsirkin <mst@mellanox.co.il>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'drivers/infiniband/hw/mthca/mthca_qp.c')
0 files changed, 0 insertions, 0 deletions