1. 25 8月, 2020 1 次提交
  2. 23 7月, 2020 7 次提交
  3. 21 7月, 2020 5 次提交
  4. 16 7月, 2020 1 次提交
  5. 07 7月, 2020 1 次提交
  6. 01 7月, 2020 3 次提交
  7. 24 6月, 2020 1 次提交
  8. 03 6月, 2020 1 次提交
  9. 27 5月, 2020 1 次提交
  10. 22 5月, 2020 1 次提交
  11. 15 5月, 2020 3 次提交
  12. 18 4月, 2020 1 次提交
  13. 31 3月, 2020 1 次提交
    • Y
      qed: Fix use after free in qed_chain_free · 8063f761
      Yuval Basson 提交于
      The qed_chain data structure was modified in
      commit 1a4a6975 ("qed: Chain support for external PBL") to support
      receiving an external pbl (due to iWARP FW requirements).
      The pages pointed to by the pbl are allocated in qed_chain_alloc
      and their virtual address are stored in an virtual addresses array to
      enable accessing and freeing the data. The physical addresses however
      weren't stored and were accessed directly from the external-pbl
      during free.
      
      Destroy-qp flow, leads to freeing the external pbl before the chain is
      freed, when the chain is freed it tries accessing the already freed
      external pbl, leading to a use-after-free. Therefore we need to store
      the physical addresses in additional to the virtual addresses in a
      new data structure.
      
      Fixes: 1a4a6975 ("qed: Chain support for external PBL")
      Signed-off-by: NMichal Kalderon <mkalderon@marvell.com>
      Signed-off-by: NYuval Bason <ybason@marvell.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      8063f761
  14. 27 1月, 2020 7 次提交
  15. 11 9月, 2019 1 次提交
  16. 01 9月, 2019 2 次提交
  17. 16 8月, 2019 1 次提交
  18. 09 8月, 2019 1 次提交
  19. 26 7月, 2019 1 次提交