Re: [PATCH] RDMA/srp: fix use-after-free of a request in srp_destroy_qp()
Bart Van Assche <[email protected]>
| Newsgroups | org.kernel.vger.stable,org.kernel.vger.linux-kernel,org.kernel.vger.linux-rdma |
|---|---|
| Message-ID | <[email protected]> |
On 8/12/26 12:04 PM, Yehyeong Lee wrote: > Put the two completion > contexts in the channel, which outlives the queue pair. This change can cause ch->reg_cqe and ch->inv_cqe to be overwritten before the previously submitted work has completed, isn't it? Isn't that a bug? Thanks, Bart.