From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Wise Subject: Re: [PATCH 1/3] xprtrdma: disconnect and flush cqs before freeing buffers Date: Mon, 28 Sep 2015 09:30:46 -0500 Message-ID: <56094F16.3040608@opengridcomputing.com> References: <20150921172423.9761.92399.stgit@build2.ogc.int> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20150921172423.9761.92399.stgit-PBeJgSbIpn97NCTnQtmixQ@public.gmane.org> Sender: linux-nfs-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: trond.myklebust-7I+n7zu2hftEKMMhf/gKZA@public.gmane.org, bfields-uC3wQj2KruNg9hUCZPvPmw@public.gmane.org Cc: linux-nfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-rdma-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-Id: linux-rdma@vger.kernel.org On 9/21/2015 12:24 PM, Steve Wise wrote: > Otherwise a FRMR completion can cause a touch-after-free crash. > > In xprt_rdma_destroy(), call rpcrdma_buffer_destroy() only after calling > rpcrdma_ep_destroy(). > > In rpcrdma_ep_destroy(), disconnect the cm_id first which should flush the > qp, then drain the cqs, then destroy the qp, and finally destroy the cqs. > > Signed-off-by: Steve Wise > Tested-by: Chuck Lever > --- Hey Trond, I'm hoping this can make 4.3-rc (and stable if you agree). Thanks, Steve. -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org More majordomo info at http://vger.kernel.org/majordomo-info.html