]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Ensure that the MAD agent's delayed taskqueue is completely stopped
authorMark Johnston <markj@FreeBSD.org>
Tue, 15 Sep 2015 23:56:31 +0000 (23:56 +0000)
committerMark Johnston <markj@FreeBSD.org>
Tue, 15 Sep 2015 23:56:31 +0000 (23:56 +0000)
commit4af587d062fbc85a4cc2d33ebea3a9a58fc038e4
treee526d9cebec1f09e09b9e34c3f3ca9cb8526235e
parent319a55f4cd6ee9926d223a6c671a558f8dc28a2c
Ensure that the MAD agent's delayed taskqueue is completely stopped
before proceeding. Otherwise, nothing prevents it from running after the
MAD agent struct has been been freed, and this results in a use-after-free
when the task's ta_pending count is incremented in the callout handler.

MFC after: 2 weeks
Sponsored by: EMC / Isilon Storage Division
sys/ofed/drivers/infiniband/core/mad.c