Patch "RDMA/mthca: Fix crash when polling CQ for shared QPs" has been added to the 6.4-stable tree

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This is a note to let you know that I've just added the patch titled

    RDMA/mthca: Fix crash when polling CQ for shared QPs

to the 6.4-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     rdma-mthca-fix-crash-when-polling-cq-for-shared-qps.patch
and it can be found in the queue-6.4 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.



commit 47e388bc7bbb63a331d8e285a643d6293ec631e9
Author: Thomas Bogendoerfer <tbogendoerfer@xxxxxxx>
Date:   Thu Jul 13 16:16:58 2023 +0200

    RDMA/mthca: Fix crash when polling CQ for shared QPs
    
    [ Upstream commit dc52aadbc1849cbe3fcf6bc54d35f6baa396e0a1 ]
    
    Commit 21c2fe94abb2 ("RDMA/mthca: Combine special QP struct with mthca QP")
    introduced a new struct mthca_sqp which doesn't contain struct mthca_qp
    any longer. Placing a pointer of this new struct into qptable leads
    to crashes, because mthca_poll_one() expects a qp pointer. Fix this
    by putting the correct pointer into qptable.
    
    Fixes: 21c2fe94abb2 ("RDMA/mthca: Combine special QP struct with mthca QP")
    Signed-off-by: Thomas Bogendoerfer <tbogendoerfer@xxxxxxx>
    Link: https://lore.kernel.org/r/20230713141658.9426-1-tbogendoerfer@xxxxxxx
    Signed-off-by: Leon Romanovsky <leon@xxxxxxxxxx>
    Signed-off-by: Sasha Levin <sashal@xxxxxxxxxx>

diff --git a/drivers/infiniband/hw/mthca/mthca_qp.c b/drivers/infiniband/hw/mthca/mthca_qp.c
index 69bba0ef4a5df..53f43649f7d08 100644
--- a/drivers/infiniband/hw/mthca/mthca_qp.c
+++ b/drivers/infiniband/hw/mthca/mthca_qp.c
@@ -1393,7 +1393,7 @@ int mthca_alloc_sqp(struct mthca_dev *dev,
 	if (mthca_array_get(&dev->qp_table.qp, mqpn))
 		err = -EBUSY;
 	else
-		mthca_array_set(&dev->qp_table.qp, mqpn, qp->sqp);
+		mthca_array_set(&dev->qp_table.qp, mqpn, qp);
 	spin_unlock_irq(&dev->qp_table.lock);
 
 	if (err)



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux