Seth Howell ec47f92b9b rdma: fix potential heap-use-after-free in srq shutdown ... If there are outstanding recvs for a qpair when it is destroyed, we need to clear the qpair from it before reposting it. Otehrwise, we have a potential heap-use-after-free of double free (depending on whether the recv completion is in error state or not). See github issues #730 Change-Id: Ic2009c761cbcc5e89174f62fbd0872d0489c67ca Signed-off-by: Seth Howell <seth.howell@intel.com> Reviewed-on: https://review.gerrithub.io/c/spdk/spdk/+/452122 Tested-by: SPDK CI Jenkins <sys_sgci@intel.com> Reviewed-by: Jim Harris <james.r.harris@intel.com> Reviewed-by: Changpeng Liu <changpeng.liu@intel.com>		2019-04-26 11:16:22 +00:00
..
ctrlr_bdev.c	nvmf: disable the protection if the backend doesn't contain valid type	2019-04-24 21:47:18 +00:00
ctrlr_discovery.c	nvmf: Only present subsystem if it is ready	2019-01-07 06:02:26 +00:00
ctrlr.c	NVMF: Add model number as parameter to construct_nvmf_subsystem (-d option).	2019-04-23 16:51:16 +00:00
Makefile	nvmf: Collapse request.c into ctrlr.c	2019-02-04 18:11:33 +00:00
nvmf_fc.h	lib/nvmf: fix a typo error	2018-10-12 17:40:16 +00:00
nvmf_internal.h	NVMF: Add model number as parameter to construct_nvmf_subsystem (-d option).	2019-04-23 16:51:16 +00:00
nvmf.c	NVMF: Add model number as parameter to construct_nvmf_subsystem (-d option).	2019-04-23 16:51:16 +00:00
rdma.c	rdma: fix potential heap-use-after-free in srq shutdown	2019-04-26 11:16:22 +00:00
subsystem.c	subsystem: check for NULL bufs in reservation ops.	2019-04-25 22:52:12 +00:00
tcp.c	nvmf: add tcp trace points for data read from socket	2019-04-23 17:59:23 +00:00
transport.c	nvmf: Remove qpair_is_idle	2019-03-15 19:19:17 +00:00
transport.h	nvmf: Remove qpair_is_idle	2019-03-15 19:19:17 +00:00