diff options
| author |   Jason Gunthorpe <jgg@mellanox.com> | 2019-05-21 17:55:22 +0000 |
|---|---|---|
| committer | Jason Gunthorpe <jgg@mellanox.com> | 2019-05-27 14:35:26 -0300 |
| commit | 6875cb175ca7e0c24aa4460ac2b3257fdf662832 (patch) | |
| tree | 31a4c1aa8de14bd4aa0c4dacb0aa51feb4a8471d /drivers/infiniband/core/rdma_core.h | |
| parent | RDMA/hns: Fix PD memory leak for internal allocation (diff) | |
| download | linux-dev-6875cb175ca7e0c24aa4460ac2b3257fdf662832.tar.xz linux-dev-6875cb175ca7e0c24aa4460ac2b3257fdf662832.zip | |
RDMA/core: Clear out the udata before error unwind
The core code should not pass a udata to the driver destroy function that
contains the input from the create command. Otherwise the driver will
attempt to interpret the create udata as destroy udata, and at least in
the case of EFA, will leak resources.
Zero this stuff out before invoking destroy.
Reported-by: Leon Romanovsky <leonro@mellanox.com>
Fixes: c4367a26357b ("IB: Pass uverbs_attr_bundle down ib_x destroy path")
Reviewed-by: Gal Pressman <galpress@amazon.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
Diffstat (limited to 'drivers/infiniband/core/rdma_core.h')
| -rw-r--r-- | drivers/infiniband/core/rdma_core.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/drivers/infiniband/core/rdma_core.h b/drivers/infiniband/core/rdma_core.h index 5445323629b5..e63fbda25e1d 100644 --- a/drivers/infiniband/core/rdma_core.h +++ b/drivers/infiniband/core/rdma_core.h @@ -110,6 +110,8 @@ int uverbs_output_written(const struct uverbs_attr_bundle *bundle, size_t idx); void setup_ufile_idr_uobject(struct ib_uverbs_file *ufile); void release_ufile_idr_uobject(struct ib_uverbs_file *ufile); +struct ib_udata *uverbs_get_cleared_udata(struct uverbs_attr_bundle *attrs); + /* * This is the runtime description of the uverbs API, used by the syscall * machinery to validate and dispatch calls. |