qed: Use after free in qed_rdma_free()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 13 Mar 2018 09:09:38 +0000 (12:09 +0300)
committerDavid S. Miller <davem@davemloft.net>
Tue, 13 Mar 2018 14:54:17 +0000 (10:54 -0400)
commitf89782c2d131e6eae0d1ea2569ba76bc4c5875fe
treefe21d284efc70b90a6e58e6962d668876fa219de
parentd2ddf628e90ffb92b411757eeb8655314371b879
qed: Use after free in qed_rdma_free()

We're dereferencing "p_hwfn->p_rdma_info" but that is freed on the line
before in qed_rdma_resc_free(p_hwfn).

Fixes: 9de506a547c0 ("qed: Free RoCE ILT Memory on rmmod qedr")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Michal Kalderon <Michal.Kalderon@cavium.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ethernet/qlogic/qed/qed_rdma.c