d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

When a firmware command times out do not free the command structure to

Browse Source 
avoid use after free.

Sponsored by:	Mellanox Technologies
MFC after:	1 week
This commit is contained in:
Hans Petter Selasky 2016-11-07 11:15:40 +00:00
parent fe06608404
commit 97ac390861
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
sys/dev/mlx5/mlx5_core/mlx5_cmd.c
View File

@ -1245,8 +1245,11 @@ static int cmd_exec_helper(struct mlx5_core_dev *dev, void *in, int in_size, voi
err = mlx5_cmd_invoke(dev, inb, outb, out, out_size, callback, context,
pages_queue, &status);
if (err)
if (err) {
if (err == -ETIMEDOUT)
return err;
goto out_out;
}
mlx5_core_dbg(dev, "err %d, status %d\n", err, status);
if (status) {