]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
ibcore: Fix use-after-free access in ucma_close()
authorHans Petter Selasky <hselasky@FreeBSD.org>
Mon, 13 Jun 2022 14:55:14 +0000 (16:55 +0200)
committerHans Petter Selasky <hselasky@FreeBSD.org>
Mon, 20 Jun 2022 11:08:39 +0000 (13:08 +0200)
commite212dffaae152cbb13f556c663a498ccf61c5889
treefd1db55e925c600a49551ad89e46559f95583738
parent0b5f08439d27ecbfa4b4c20acef64fbad66e978a
ibcore: Fix use-after-free access in ucma_close()

The error in ucma_create_id() left ctx in the list of contexts belong
to ucma file descriptor. The attempt to close this file descriptor causes
to use-after-free accesses while iterating over such list.

Linux commit:
ed65a4dc22083e73bac599ded6a262318cad7baf

PR: 264650
Sponsored by: NVIDIA Networking

(cherry picked from commit 66a0bc2105e43e54abfaa9f48b76c28371fa2d62)
sys/ofed/drivers/infiniband/core/ib_ucma.c