Ursula Braun e438bae43c net/smc: use after free fix in smc_wr_tx_put_slot() ... In smc_wr_tx_put_slot() field pend->idx is used after being cleared. That means always idx 0 is cleared in the wr_tx_mask. This results in a broken administration of available WR send payload buffers. Signed-off-by: Ursula Braun <ubraun@linux.ibm.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2018-11-21 16:14:56 -08:00
..
af_smc.c	net/smc: use queue pair number when matching link group	2018-11-21 16:14:56 -08:00
Kconfig
Makefile
smc.h
smc_cdc.c	net/smc: atomic SMCD cursor handling	2018-11-21 16:14:56 -08:00
smc_cdc.h	net/smc: atomic SMCD cursor handling	2018-11-21 16:14:56 -08:00
smc_clc.c	iov_iter: Separate type from direction and use accessor functions	2018-10-24 00:41:07 +01:00
smc_clc.h
smc_close.c	net/smc: enable fallback for connection abort in state INIT	2018-09-18 20:11:43 -07:00
smc_close.h
smc_core.c	net/smc: add SMC-D shutdown signal	2018-11-21 16:14:56 -08:00
smc_core.h	net/smc: add SMC-D shutdown signal	2018-11-21 16:14:56 -08:00
smc_diag.c
smc_ib.c
smc_ib.h
smc_ism.c	net/smc: add SMC-D shutdown signal	2018-11-21 16:14:56 -08:00
smc_ism.h	net/smc: add SMC-D shutdown signal	2018-11-21 16:14:56 -08:00
smc_llc.c
smc_llc.h
smc_pnet.c	smc: generic netlink family should be __ro_after_init	2018-09-20 07:49:55 -07:00
smc_pnet.h
smc_rx.c
smc_rx.h
smc_tx.c
smc_tx.h
smc_wr.c	net/smc: use after free fix in smc_wr_tx_put_slot()	2018-11-21 16:14:56 -08:00
smc_wr.h