RDMA/nes: Fix slab corruption
authorChien Tung <ctung@neteffect.com>
Fri, 10 Oct 2008 00:41:05 +0000 (17:41 -0700)
committerRoland Dreier <rolandd@cisco.com>
Fri, 10 Oct 2008 00:41:05 +0000 (17:41 -0700)
Referencing cm_node after it is freed via rem_ref_cm_node() causes a
slab corruption.  There is no need to set cm_node->cm_id to NULL in
mini_cm_close().

Signed-off-by: Chien Tung <ctung@neteffect.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
drivers/infiniband/hw/nes/nes_cm.c

index d69226d7102eaa660321c4cbca6e914f9a4f8f21..2caf9da81ad50d6db5db8bce1c24cb21c2bf46d5 100644 (file)
@@ -2029,7 +2029,6 @@ static int mini_cm_close(struct nes_cm_core *cm_core, struct nes_cm_node *cm_nod
                ret = rem_ref_cm_node(cm_core, cm_node);
                break;
        }
-       cm_node->cm_id = NULL;
        return ret;
 }