Michal Kalderon 390d3fdcae RDMA/core: Fix use after free and refcnt leak on ndev in_device in iwarp_query_port ...

If an iWARP driver is probed and removed while there are no ips set for
the device, it will lead to a reference count leak on the inet device of
the netdevice.

In addition, the netdevice was accessed after already calling netdev_put,
which could lead to using the netdev after already freed.

Fixes: 4929116bdf ("RDMA/core: Add common iWARP query port")
Link: https://lore.kernel.org/r/20190925123332.10746-1-michal.kalderon@marvell.com
Signed-off-by: Ariel Elior <ariel.elior@marvell.com>
Signed-off-by: Michal Kalderon <michal.kalderon@marvell.com>
Reviewed-by: Shiraz Saleem <shiraz.saleem@intel.com>
Reviewed-by: Kamal Heib <kamalheib1@gmail.com>
Reviewed-by: Jason Gunthorpe <jgg@mellanox.com>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>

2019-10-01 11:31:27 -03:00

..

addr.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2019-09-28 17:47:33 -07:00

agent.c

RDMA: Mark if destroy address handle is in a sleepable context

2018-12-19 16:28:03 -07:00

agent.h

IB/mad: Add final OPA MAD processing

2015-06-12 14:49:18 -04:00

cache.c

RDMA/core: Annotate destroy of mutex to ensure that it is released as unlocked

2019-07-25 12:07:14 -03:00

cgroup.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 288

2019-06-05 17:36:37 +02:00

cm_msgs.h

RDMA: Use __packed annotation instead of __attribute__ ((packed))

2019-03-25 21:14:12 -03:00

cm.c

IB/cm: Reduce dependency on gid attribute ndev check

2019-05-03 11:10:02 -03:00

cma_configfs.c

RDMA/core: Annotate destroy of mutex to ensure that it is released as unlocked

2019-07-25 12:07:14 -03:00

cma_priv.h

IB/cma: Define option to set ack timeout and pack tos_set

2019-02-08 16:14:21 -07:00

cma.c

Merge tag 'v5.3-rc8' into rdma.git for-next

2019-09-13 16:59:51 -03:00

core_priv.h

Merge branch 'odp_fixes' into rdma.git for-next

2019-08-21 14:10:36 -03:00

counters.c

Merge tag 'v5.3-rc8' into rdma.git for-next

2019-09-13 16:59:51 -03:00

cq.c

rdma: Enable ib_alloc_cq to spread work over a device's comp_vectors

2019-08-05 11:50:32 -04:00

device.c

RDMA/core: Fix use after free and refcnt leak on ndev in_device in iwarp_query_port

2019-10-01 11:31:27 -03:00

fmr_pool.c

RDMA: Delete DEBUG code

2019-08-20 13:27:53 -04:00

iwcm.c

RDMA: Get rid of iw_cm_verbs

2019-05-03 10:56:56 -03:00

iwcm.h

iw_cm: free cm_id resources on the last deref

2016-08-02 13:15:18 -04:00

iwpm_msg.c

RDMA/iwpm: Delete unnecessary checks before the macro call "dev_kfree_skb"

2019-08-27 13:09:23 -03:00

iwpm_util.c

RDMA/iwpm: Delete unnecessary checks before the macro call "dev_kfree_skb"

2019-08-27 13:09:23 -03:00

iwpm_util.h

RDMA/IWPM: Support no port mapping requirements

2019-02-04 16:26:02 -07:00

mad_priv.h

RDMA: Use __packed annotation instead of __attribute__ ((packed))

2019-03-25 21:14:12 -03:00

mad_rmpp.c

RDMA: Mark if destroy address handle is in a sleepable context

2018-12-19 16:28:03 -07:00

mad_rmpp.h

…

mad.c

IB/mad: Fix use-after-free in ib mad completion handling

2019-08-01 11:58:54 -04:00

Makefile

RDMA/counter: Add set/clear per-port auto mode support

2019-07-05 10:22:54 -03:00

mr_pool.c

Merge tag 'v5.2-rc6' into rdma.git for-next

2019-06-28 21:18:23 -03:00

multicast.c

IB/core, ipoib: Do not overreact to SM LID change event

2019-05-07 16:06:03 -03:00

netlink.c

RDMA/core: fix spelling mistake "Nelink" -> "Netlink"

2019-07-31 11:54:33 -04:00

nldev.c

Merge tag 'v5.3-rc8' into rdma.git for-next

2019-09-13 16:59:51 -03:00

opa_smi.h

RDMA: Start use ib_device_ops

2018-12-12 07:40:16 -07:00

packer.c

IB/core: trivial prink cleanup.

2016-03-03 10:20:25 -05:00

rdma_core.c

uverbs: Convert idr to XArray

2019-04-25 12:27:11 -03:00

rdma_core.h

RDMA/core: Clear out the udata before error unwind

2019-05-27 14:35:26 -03:00

restrack.c

RDMA/restrack: Rewrite PID namespace check to be reliable

2019-08-20 13:44:44 -04:00

restrack.h

RDMA/restrack: Make is_visible_in_pid_ns() as an API

2019-07-05 10:22:54 -03:00

roce_gid_mgmt.c

drivers: use in_dev_for_each_ifa_rtnl/rcu

2019-06-02 18:06:26 -07:00

rw.c

PCI/P2PDMA: Introduce pci_p2pdma_unmap_sg()

2019-08-16 08:41:26 -05:00

sa_query.c

RDMA/core: Support netlink commands in non init_net net namespaces

2019-07-25 14:12:41 -03:00

sa.h

RDMA/core: Annotate timeout as unsigned long

2018-10-16 13:34:01 -04:00

security.c

RDMA/device: Consolidate ib_device per_port data into one place

2019-02-19 10:13:39 -07:00

smi.c

IB: Add rdma_cap_ib_switch helper and use where appropriate

2015-07-14 13:20:08 -04:00

smi.h

RDMA: Start use ib_device_ops

2018-12-12 07:40:16 -07:00

sysfs.c

RDMA: Introduce ib_port_phys_state enum

2019-08-12 10:18:52 -04:00

ucma.c

RDMA: Report available cdevs through RDMA_NLDEV_CMD_GET_CHARDEV

2019-06-18 22:44:08 -04:00

ud_header.c

IB/core: trivial prink cleanup.

2016-03-03 10:20:25 -05:00

umem_odp.c

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma

2019-09-21 10:26:24 -07:00

umem.c

mm/gup: add make_dirty arg to put_user_pages_dirty_lock()

2019-09-24 15:54:08 -07:00

user_mad.c

Merge branch 'odp_fixes' into rdma.git for-next

2019-08-21 14:10:36 -03:00

uverbs_cmd.c

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma

2019-09-21 10:26:24 -07:00

uverbs_ioctl.c

mm: security: introduce init_on_alloc=1 and init_on_free=1 boot options

2019-07-12 11:05:46 -07:00

uverbs_main.c

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma

2019-09-21 10:26:24 -07:00

uverbs_marshall.c

IB/cm: Replace members of sa_path_rec with 'struct sgid_attr *'

2018-06-25 14:19:57 -06:00

uverbs_std_types_counters.c

IB: When attrs.udata/ufile is available use that instead of uobject

2019-04-08 13:05:25 -03:00

uverbs_std_types_cq.c

Merge tag 'v5.2-rc6' into rdma.git for-next

2019-06-28 21:18:23 -03:00

uverbs_std_types_device.c

IB/uverbs: Fix ioctl query port to consider device disassociation

2019-01-25 11:58:06 -07:00

uverbs_std_types_dm.c

IB: When attrs.udata/ufile is available use that instead of uobject

2019-04-08 13:05:25 -03:00

uverbs_std_types_flow_action.c

IB: When attrs.udata/ufile is available use that instead of uobject

2019-04-08 13:05:25 -03:00

uverbs_std_types_mr.c

Merge tag 'v5.2-rc6' into rdma.git for-next

2019-06-28 21:18:23 -03:00

uverbs_std_types.c

IB: Remove 'uobject->context' dependency in object destroy APIs

2019-04-01 14:59:35 -03:00

uverbs_uapi.c

RDMA: Move driver_id into struct ib_device_ops

2019-06-10 16:56:02 -03:00

uverbs.h

uverbs: Convert idr to XArray

2019-04-25 12:27:11 -03:00

verbs.c

RDMA/core: Annotate destroy of mutex to ensure that it is released as unlocked

2019-07-25 12:07:14 -03:00