iw_cxgb4: remove the stid on listen create failure
authorSteve Wise <swise@opengridcomputing.com>
Tue, 5 Sep 2017 18:52:34 +0000 (11:52 -0700)
committerDoug Ledford <dledford@redhat.com>
Fri, 22 Sep 2017 16:59:42 +0000 (12:59 -0400)
commit8b1bbf36b7452c4acb20e91948eaa5e225ea6978
tree2c89fa2a542e4f1a285ac6072ee54f0d0cffb0b7
parent3c8415cc7aff467faba25841fb859660ac14a04e
iw_cxgb4: remove the stid on listen create failure

If a listen create fails, then the server tid (stid) is incorrectly left
in the stid idr table, which can cause a touch-after-free if the stid
is looked up and the already freed endpoint is touched.  So make sure
and remove it in the error path.

Cc: stable@vger.kernel.org
Signed-off-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>
drivers/infiniband/hw/cxgb4/cm.c