Ka-Cheong Poon 2fabef4f65 net/rds: Fix MR reference counting problem ... In rds_free_mr(), it calls rds_destroy_mr(mr) directly. But this defeats the purpose of reference counting and makes MR free handling impossible. It means that holding a reference does not guarantee that it is safe to access some fields. For example, In rds_cmsg_rdma_dest(), it increases the ref count, unlocks and then calls mr->r_trans->sync_mr(). But if rds_free_mr() (and rds_destroy_mr()) is called in between (there is no lock preventing this to happen), r_trans_private is set to NULL, causing a panic. Similar issue is in rds_rdma_unuse(). Reported-by: zerons <sironhide0null@gmail.com> Signed-off-by: Ka-Cheong Poon <ka-cheong.poon@oracle.com> Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2020-04-09 10:22:00 -07:00
..
af_rds.c	Convert usage of IN_MULTICAST to ipv4_is_multicast	2019-09-05 09:38:32 +02:00
bind.c	net/rds: Check laddr_check before calling it	2019-09-27 12:10:55 +02:00
cong.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
connection.c	rds: Return proper "tos" value to user-space	2019-07-09 21:45:42 -07:00
ib_cm.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-11-16 21:51:42 -08:00
ib_fmr.c	net: rds: exchange of 8K and 1M pool	2019-04-24 12:07:08 -07:00
ib_frmr.c	net/rds: Keep track of and wait for FRWR segments in use upon shutdown	2019-07-17 12:06:52 -07:00
ib_mr.h	net/rds: Handle ODP mr registration/unregistration	2020-01-18 11:48:19 +02:00
ib_rdma.c	net/rds: Use prefetch for On-Demand-Paging MR	2020-01-18 11:48:19 +02:00
ib_recv.c	net/rds: Use DMA memory pool allocation for rds_header	2019-10-03 12:11:08 -07:00
ib_ring.c
ib_send.c	net/rds: Handle ODP mr registration/unregistration	2020-01-18 11:48:19 +02:00
ib_stats.c	net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'	2019-09-15 20:56:19 +02:00
ib_sysctl.c
ib.c	net/rds: Handle ODP mr registration/unregistration	2020-01-18 11:48:19 +02:00
ib.h	net/rds: Handle ODP mr registration/unregistration	2020-01-18 11:48:19 +02:00
info.c	mm/gup: change GUP fast to use flags rather than a write 'bool'	2019-05-14 09:47:46 -07:00
info.h
Kconfig	net: Fix Kconfig indentation	2019-09-26 08:56:17 +02:00
loop.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
loop.h	rds: clean up loopback rds_connections on netns deletion	2018-06-27 10:11:03 +09:00
Makefile	rds: remove trailing whitespace and blank lines	2018-07-24 14:10:42 -07:00
message.c	net/rds: Replace struct rds_mr's r_refcount with struct kref	2020-04-09 10:22:00 -07:00
page.c
rdma_transport.c	net: rds: add service level support in rds-info	2019-08-24 16:55:25 -07:00
rdma_transport.h	rds: rdma: add consumer reject	2019-02-04 14:59:11 -08:00
rdma.c	net/rds: Fix MR reference counting problem	2020-04-09 10:22:00 -07:00
rds_single_path.h
rds.h	net/rds: Fix MR reference counting problem	2020-04-09 10:22:00 -07:00
recv.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-09-02 11:20:17 -07:00
send.c	Convert usage of IN_MULTICAST to ipv4_is_multicast	2019-09-05 09:38:32 +02:00
stats.c	rds: check for excessive looping in rds_send_xmit	2019-08-15 12:04:24 -07:00
sysctl.c
tcp_connect.c	rds: Enable RDS IPv6 support	2018-07-23 21:17:44 -07:00
tcp_listen.c	rds: add type of service(tos) infrastructure	2019-02-04 14:59:12 -08:00
tcp_recv.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
tcp_send.c	rds: Changing IP address internal representation to struct in6_addr	2018-07-23 21:17:44 -07:00
tcp_stats.c
tcp.c	net: rds: fix spelling mistake "syctl" -> "sysctl"	2019-05-05 10:19:43 -07:00
tcp.h	rds: Enable RDS IPv6 support	2018-07-23 21:17:44 -07:00
threads.c	rds: make v3.1 as compat version	2019-02-04 14:59:11 -08:00
transport.c	rds: remove trailing whitespace and blank lines	2018-07-24 14:10:42 -07:00