diff options
| author | Ralph Campbell <ralph.campbell@qlogic.com> | 2008-07-22 14:18:33 -0700 |
|---|---|---|
| committer | Roland Dreier <rolandd@cisco.com> | 2008-07-22 14:18:33 -0700 |
| commit | 64b784b583061ebfe1d484dd1fdc5a26c6d4293f (patch) | |
| tree | 2eef2e4af37b00a6ab9c4bf2d2d60dffce980204 /Documentation/SecurityBugs | |
| parent | d35cb360c29956510b2fe1a953bd4968536f7216 (diff) | |
IB/sa_query: Check if sm_ah is NULL in ib_sa_remove_one()
If update_sm_ah() fails, it leaves the port's sm_ah as NULL. Then if
the device or module is removed, ib_sa_remove_one() will dereference a
NULL pointer when it calls kref_put(). Fix this by testing if sm_ah
is NULL before dropping the reference.
Signed-off-by: Ralph Campbell <ralph.campbell@qlogic.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
Diffstat (limited to 'Documentation/SecurityBugs')
0 files changed, 0 insertions, 0 deletions