| commit | e438bae43c1e08e688c09c410407b59fc1c173b4 | [log] [tgz] |
|---|---|---|
| author | Ursula Braun <ursula.braun@linux.ibm.com> | Tue Nov 20 16:46:43 2018 +0100 |
| committer | David S. Miller <davem@davemloft.net> | Wed Nov 21 16:14:56 2018 -0800 |
| tree | 7325b43e2c0690f4f0944ae97096fda4cadefade | |
| parent | b9a22dd9811dbcddb5623c499e5b736400059df6 [diff] |
net/smc: use after free fix in smc_wr_tx_put_slot() In smc_wr_tx_put_slot() field pend->idx is used after being cleared. That means always idx 0 is cleared in the wr_tx_mask. This results in a broken administration of available WR send payload buffers. Signed-off-by: Ursula Braun <ubraun@linux.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net>