From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <netdev-owner@vger.kernel.org>
Received: from shards.monkeyblade.net ([184.105.139.130]:47098 "EHLO
        shards.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org
        with ESMTP id S1751720AbeCMOzD (ORCPT
        <rfc822;netdev@vger.kernel.org>); Tue, 13 Mar 2018 10:55:03 -0400
Date: Tue, 13 Mar 2018 10:55:01 -0400 (EDT)
Message-Id: <20180313.105501.1782065500332609196.davem@davemloft.net>
To: dan.carpenter@oracle.com
Cc: Ariel.Elior@cavium.com, Michal.Kalderon@cavium.com,
        everest-linux-l2@cavium.com, netdev@vger.kernel.org,
        kernel-janitors@vger.kernel.org
Subject: Re: [PATCH net] qed: Use after free in qed_rdma_free()
From: David Miller <davem@davemloft.net>
In-Reply-To: <20180313090938.GA17609@mwanda>
References: <20180313090938.GA17609@mwanda>
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: netdev-owner@vger.kernel.org
List-ID: <netdev.vger.kernel.org>

From: Dan Carpenter <dan.carpenter@oracle.com>
Date: Tue, 13 Mar 2018 12:09:38 +0300

> We're dereferencing "p_hwfn->p_rdma_info" but that is freed on the line
> before in qed_rdma_resc_free(p_hwfn).
> 
> Fixes: 9de506a547c0 ("qed: Free RoCE ILT Memory on rmmod qedr")
> Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>

Applied, thank you.