IPoIB: In unicast_arp_send(), only free newly-created paths
authorJack Morgenstein <jackm@dev.mellanox.co.il>
Tue, 17 Feb 2009 22:51:47 +0000 (14:51 -0800)
committerRoland Dreier <rolandd@cisco.com>
Tue, 17 Feb 2009 22:51:47 +0000 (14:51 -0800)
commit71d98b4628ee869d62814f6d8607d76cab4b9ec5
tree10b4d085aaf23020c052d5e340330d757730d138
parentf3b8436ad9a8ad36b3c9fa1fe030c7f38e5d3d0b
IPoIB: In unicast_arp_send(), only free newly-created paths

If path_rec_start() returns error, call path_free() only if the path
was newly-created.  If we free an existing path whose valid flag was zero,
(but do not detach it from the list) we cause corruption of the
path list (of which it is a member), and get a kernel crash.

The simplest solution is to not free an existing path -- just leave it
in the list as-is (i.e., with its valid flag cleared).

Thanks to Yossi Etigin of Voltaire for identifying the problem flow
which caused the kernel crash.

Signed-off-by: Jack Morgenstein <jackm@dev.mellanox.co.il>
Signed-off-by: Moni Shua <monis@voltaire.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
drivers/infiniband/ulp/ipoib/ipoib_main.c