From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qk1-f175.google.com (mail-qk1-f175.google.com [209.85.222.175]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DBEED32B106 for ; Thu, 2 Jul 2026 17:46:53 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.222.175 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783014415; cv=none; b=a4pARanG0pwBfc9YLjQKttpNPwN+Rb+GLQmE9lXfMSXPJpEu4ba8AoTeT2b4EQIoYSkFwh7dqme+HIhkRfJq8RU00fjHAXsovB6bY/WNgU5csM6e5A4j+eAxdB1s10/aHbxvpZPo5RrSHdh4MZ+aQb0Ys196Hsu1UUn6geN+ZMk= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783014415; c=relaxed/simple; bh=GL3YOcxIEMLKzg7odoUj07PgGolhZW3Dd0/qCjs4Jsg=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=tE5TxGnDzmdxcr/yegAbOU6AU28QWA63MrgTndVoOrSnwpDrlvQgb/1Djf70/o0IypvZENBu3rfGSXlbXzJRz3rjEuU1SyyLDy9xYqKgtcXTwDHcbB1HpUIHFx+WnhSVFRi4eso//P6OzGCinUME1Gf7/6FYPhvi0nXU7CRcvhY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b=h1OKxy+3; arc=none smtp.client-ip=209.85.222.175 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=ziepe.ca header.i=@ziepe.ca header.b="h1OKxy+3" Received: by mail-qk1-f175.google.com with SMTP id af79cd13be357-92e54f8c051so107715585a.3 for ; Thu, 02 Jul 2026 10:46:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1783014413; x=1783619213; darn=vger.kernel.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=boFzdPDkhwjAKttJz9OJN+BCdriuoKp5yffYezagjwI=; b=h1OKxy+334VdHc+p3msAKDCZJ3nBUnqkvjcag3hAEnm8zM7NYuNzl0a60YSbwxL5Uj lhS8BkM6K5Ov9TZbNANToQpG4aezGs7xIMF2dqj3xD9rO2N0SJp4qgzlTMBQGHv0xRrb HBrUIbDOZgtnTQvfuf4ebvt9UIFzDaGiKZKArxZ13oCb87jpZxRoV5uPKQms5cr663ed oxk/z/UYLPz1roMr6uSEsm7mEFwlmBQdK9+oNFNqljaiewmLWnKufJJDf4Qf6m9uWN1d 4sswwtOKHi+KEQIzEx7J5qEcc40zdQE03m7HNcZpzjrMui1/5bde/Ig14qbgaRnKQk7z qO+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783014413; x=1783619213; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=boFzdPDkhwjAKttJz9OJN+BCdriuoKp5yffYezagjwI=; b=PIWi4dLzgaBuisdrA+xYhDrDrrS3S09gkx6P+3fgPfyMnfNWAHlCJOXSXJHvO4LhcN GIflLJfkieNetCnPYnO7u9LPqmOuYwXliaYLiZ0nPMS9mFXDmUOBq1WtlT8KbkSZzj1k 3+WJYzzQ+ggM28Mi9jiIYv0rtTwbMPqM8KbhgBit4MIg6Om7poutDrWsG894/ta673aN HofWIwdRlCyXJyA+JQE47PMzp4cpM0EyELd5s1OsG3yRzeJJ7RvGB7N84lepOxxZwDy1 ATTnVMfxNyC7xdV1v7/Ti4FjP+DuPOP08TKZg1zsnJLcu71p5uBk51MdVilSZOURo4ry /gzg== X-Forwarded-Encrypted: i=1; AFNElJ8n3D5+8o8yQwTIdEJ17leQBApejruALCDwBD5Ao4X9Td5N8HRwGMNy4Tr5ca4WOanxSmGJLVOjVyIh9AY=@vger.kernel.org X-Gm-Message-State: AOJu0YzC8iyCnaozgQ67GhiwhUHJzBiKlTdVZC02X4athr7c++S3n9oV iQsoRPdzDA/3DITt9kALSBcQeWCIfuBLqAtG/PGrNkysvezVHKcZDf4us7GXXK2IfVc= X-Gm-Gg: AfdE7clQt20uO8Eeyj8QPy7KYMokHCkYocUBtzLtcF3yz/5welTKebcoiQ2/g7ea2j8 t95Agg7YxxVLTZ8O4wasYf/RA19zT/uf27tcPwc4N7ZWUkNb8gvQJwnHHtqCrhW6Hp5bfMDYpmc Ei89vhj7lacWYaXO5n6NvgFjBNCft6Kz8UoDu8UxGitgmsCvnJ2ZgR8oLfzTO4Pok6Hv8HwAFgW ED5yGytFdwXdkmVTPYUE5pxBG8NFbWeliiKVNuDHswoa/zmbPFR62io09JGHVlNRSLXT4d0kgF+ jQrbcYOHkRH4YkrFi1OXURAl7jf4QTgpauWtRcx3TdmC+xbduDw6z2bwXVQmF8cOg4aBhfGhOQP lbcyEeqRsYlJcqOJF9ontH+6KeUJbSGtWeTl9BU9KkkJvrvr15FsY3hIYECU5nalrIbgSmddBzI HKK2RSJnrfy1kAec4w0XpqrDFLjbWA/Mrxa9Rcqc4zN4U4qFFQ6yI8l0qAgfe5aa2YoPo= X-Received: by 2002:a05:620a:630b:10b0:92e:7d53:8e8d with SMTP id af79cd13be357-92e7d62da46mr591469985a.27.1783014412881; Thu, 02 Jul 2026 10:46:52 -0700 (PDT) Received: from ziepe.ca (crbknf0213w-47-54-130-67.pppoe-dynamic.high-speed.nl.bellaliant.net. [47.54.130.67]) by smtp.gmail.com with ESMTPSA id 6a1803df08f44-8f4724ba6fesm31970626d6.41.2026.07.02.10.46.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 02 Jul 2026 10:46:52 -0700 (PDT) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1wfLUx-00000006NSd-3IZw; Thu, 02 Jul 2026 14:46:51 -0300 Date: Thu, 2 Jul 2026 14:46:51 -0300 From: Jason Gunthorpe To: Edward Srouji Cc: Leon Romanovsky , Dennis Dalessandro , Gal Pressman , Steve Wise , Mark Bloch , Neta Ostrovsky , Mark Zhang , Mark Zhang , Majd Dibbiny , Yishai Hadas , linux-rdma@vger.kernel.org, linux-kernel@vger.kernel.org, Patrisious Haddad , Michael Guralnik Subject: Re: [PATCH rdma-next 1/8] RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations Message-ID: <20260702174651.GT7525@ziepe.ca> References: <20260701-restrack-uaf-fix-resub-v1-0-c660cda4df2a@nvidia.com> <20260701-restrack-uaf-fix-resub-v1-1-c660cda4df2a@nvidia.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260701-restrack-uaf-fix-resub-v1-1-c660cda4df2a@nvidia.com> On Wed, Jul 01, 2026 at 03:28:15PM +0300, Edward Srouji wrote: > +static void restrack_drain_res(struct rdma_restrack_root *rt, > + struct rdma_restrack_entry *res) > +{ > + struct rdma_restrack_entry *old; > + > + old = xa_cmpxchg(&rt->xa, res->id, res, XA_ZERO_ENTRY, GFP_KERNEL); > + WARN_ON(old != res); > + > + rdma_restrack_put(res); > + wait_for_completion(&res->comp); > +} > + */ > +void rdma_restrack_begin_del(struct rdma_restrack_entry *res) > +{ > + struct rdma_restrack_root *rt; > + > + if (!res->valid) > + return; > + > + if (res->no_track) { > + rdma_restrack_put(res); > + wait_for_completion(&res->comp); > + return; > + } > + > + rt = res_to_rt(res); > + if (!rt) > + return; > + > + restrack_drain_res(rt, res); Why the duplicatin of the put and wait? Maybe restrack_drain_res(NULL, res) should just skip the xa part? Same for the other functions. Jason