Commit fe88d67a authored by wenglianfa's avatar wenglianfa Committed by Guofeng Yue
Browse files

RDMA/hns: Fix some mutex UAF 

driver inclusion
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/IA5Z6R



----------------------------------------------------------------------

umem_unfree_list_mutex and mtr_unfree_list_mutex may be used after
being destroyed. To fix it, The mutex is destroyed after it is used
for the last time.

Fixes: a9184304 ("RDMA/hns: Fix sleeping in spin_lock critical section")
Signed-off-by: default avatarwenglianfa <wenglianfa@huawei.com>
Signed-off-by: default avatarGuofeng Yue <yueguofeng@h-partners.com>
parent 0fd3edbf

drivers/infiniband/hw/hns/hns_roce_main.c

+1 −1
Original line number Diff line number Diff line
@@ -1503,9 +1503,9 @@ void hns_roce_exit(struct hns_roce_dev *hr_dev, bool bond_cleanup) 


	if (hr_dev->hw->hw_exit)

		hr_dev->hw->hw_exit(hr_dev);

	hns_roce_teardown_hca(hr_dev);

	hns_roce_free_unfree_umem(hr_dev);

	hns_roce_free_unfree_mtr(hr_dev);

	hns_roce_teardown_hca(hr_dev);

	hns_roce_cleanup_hem(hr_dev);



	if (hr_dev->cmd_mod)