Erez Shitrit 50be28de6f IB/IPoIB: Fix kernel panic on multicast flow ... ipoib_mcast_restart_task calls ipoib_mcast_remove_list with the parameter mcast->dev. That mcast is a temporary (used as an iterator) variable that may be uninitialized. There is no need to send the variable dev to the function, as each mcast has its dev as a member in the mcast struct. This causes the next panic: RIP: 0010: ipoib_mcast_leave+0x6d/0xf0 [ib_ipoib] RSP: 0018: EFLAGS: 00010246 RAX: f0201 RBX: 24e00 RCX: 00000 .... .... Stack: Call Trace: ipoib_mcast_remove_list+0x3a/0x70 [ib_ipoib] ipoib_mcast_restart_task+0x3bb/0x520 [ib_ipoib] process_one_work+0x164/0x470 worker_thread+0x11d/0x420 ... Fixes: 5a0e81f6f4 ('IB/IPoIB: factor out common multicast list removal code') Signed-off-by: Erez Shitrit <erezsh@mellanox.com> Reported-by: Doron Tsur <doront@mellanox.com> Reviewed-by: Christoph Lameter <cl@linux.com> Signed-off-by: Doug Ledford <dledford@redhat.com>		2016-01-19 12:59:54 -05:00
..
core	IB/core: constify mmu_notifier_ops structures	2015-12-24 00:17:33 -05:00
hw	RDMA/nes: constify nes_cm_ops structure	2015-12-24 00:17:32 -05:00
ulp	IB/IPoIB: Fix kernel panic on multicast flow	2016-01-19 12:59:54 -05:00
Kconfig	IB/cma: Add configfs for rdma_cm	2015-12-23 10:39:52 -05:00
Makefile	IB: Allow build of hw/ and ulp/ subdirectories independently	2014-06-02 14:51:12 -07:00