svn commit: r337083 - stable/11/sys/ofed/drivers/infiniband/core

Hans Petter Selasky hselasky at FreeBSD.org
Thu Aug 2 08:21:06 UTC 2018


Author: hselasky
Date: Thu Aug  2 08:21:04 2018
New Revision: 337083
URL: https://svnweb.freebsd.org/changeset/base/337083

Log:
  MFC r336377:
  Fix kernel panic while using XRC_TGT QP type in ibcore.
  
  Attempt to modify XRC_TGT QP type from the user space (ibv_xsrq_pingpong
  invocation) will trigger the following kernel panic. It is caused by the
  fact that such QPs missed uobject initialization.
  
  Linux commit:
  f45765872e7aae7b81feb3044aaf9886b21885ef
  
  Sponsored by:		Mellanox Technologies

Modified:
  stable/11/sys/ofed/drivers/infiniband/core/ib_uverbs_cmd.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/ofed/drivers/infiniband/core/ib_uverbs_cmd.c
==============================================================================
--- stable/11/sys/ofed/drivers/infiniband/core/ib_uverbs_cmd.c	Thu Aug  2 08:20:11 2018	(r337082)
+++ stable/11/sys/ofed/drivers/infiniband/core/ib_uverbs_cmd.c	Thu Aug  2 08:21:04 2018	(r337083)
@@ -1943,6 +1943,9 @@ static int create_qp(struct ib_uverbs_file *file,
 			atomic_inc(&attr.srq->usecnt);
 		if (ind_tbl)
 			atomic_inc(&ind_tbl->usecnt);
+	} else {
+		/* It is done in _ib_create_qp for other QP types */
+		qp->uobject = &obj->uevent.uobject;
 	}
 	qp->uobject = &obj->uevent.uobject;
 


More information about the svn-src-stable-11 mailing list