Re: [PATCH] nvme/rdma: Fix a use after free in nvmet_rdma_write_data_done

2021-03-15 Thread Sagi Grimberg
In nvmet_rdma_write_data_done, rsp is recoverd by wc->wr_cqe and freed by nvmet_rdma_release_rsp(). But after that, pr_info() used the freed chunk's member object and could leak the freed chunk address with wc->wr_cqe by computing the offset. Signed-off-by: Lv Yunlong --- drivers/nvme/targe

Re: [PATCH] nvme/rdma: Fix a use after free in nvmet_rdma_write_data_done

2021-03-11 Thread Christoph Hellwig
Thanks, applied to nvme-5.12.