diff options
author | Ira Weiny <ira.weiny@intel.com> | 2015-11-30 14:34:26 (GMT) |
---|---|---|
committer | Doug Ledford <dledford@redhat.com> | 2015-12-07 21:22:14 (GMT) |
commit | 785f742223c03ec70f9dcf36b87f59e9df2067e0 (patch) | |
tree | 0c9098dac9e97066899c74ca10eb61dbe1da1ca4 /drivers/infiniband/core/uverbs_cmd.c | |
parent | 527e9316f8ec44bd53d90fb9f611fa7ffff52bb9 (diff) | |
download | linux-785f742223c03ec70f9dcf36b87f59e9df2067e0.tar.xz |
IB/qib: Fix qib_mr structure
struct qib_mr requires the mr member be the last because struct
qib_mregion contains a dynamic array at the end. The additions
of members should have been placed before this structure as the
comment noted.
Failure to do so was causing random memory corruption. Reproducing
this bug was easy to do by running the client and server of
ib_write_bw -s 8 -n 5 on the same node.
This BUG() was tripped in a slab debug kernel:
kernel BUG at mm/slab.c:2572!
Fixes: 38071a461f0a ("IB/qib: Support the new memory registration API")
Reviewed-by: Mike Marciniszyn <mike.marciniszyn@intel.com>
Signed-off-by: Ira Weiny <ira.weiny@intel.com>
Signed-off-by: Doug Ledford <dledford@redhat.com>
Diffstat (limited to 'drivers/infiniband/core/uverbs_cmd.c')
0 files changed, 0 insertions, 0 deletions