Artem Chernyshev 812da2a08d net: rds: Fix possible NULL-pointer dereference ...

[ Upstream commit f1d95df0f3 ]

In rds_rdma_cm_event_handler_cmn() check, if conn pointer exists
before dereferencing it as rdma_set_service_type() argument

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: fd261ce6a3 ("rds: rdma: update rdma transport for tos")
Signed-off-by: Artem Chernyshev <artem.chernyshev@red-soft.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-10-10 21:46:38 +02:00

..

af_rds.c

…

bind.c

…

cong.c

…

connection.c

rds: memory leak in __rds_conn_create()

2021-12-22 09:29:37 +01:00

ib_cm.c

…

ib_fmr.c

…

ib_frmr.c

net/rds: dma_map_sg is entitled to merge entries

2021-09-03 10:08:15 +02:00

ib_mr.h

…

ib_rdma.c

…

ib_recv.c

rds: add missing barrier to release_refill

2022-08-25 11:18:18 +02:00

ib_ring.c

…

ib_send.c

…

ib_stats.c

…

ib_sysctl.c

…

ib.c

…

ib.h

…

info.c

…

info.h

…

Kconfig

…

loop.c

…

loop.h

…

Makefile

…

message.c

rds: rds_rm_zerocopy_callback() correct order for list_add_tail()

2023-03-11 16:43:41 +01:00

page.c

…

rdma_transport.c

net: rds: Fix possible NULL-pointer dereference

2023-10-10 21:46:38 +02:00

rdma_transport.h

…

rdma.c

net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS

2021-02-17 10:35:19 +01:00

rds_single_path.h

…

rds.h

…

recv.c

net: rds: fix memory leak in rds_recvmsg

2021-06-23 14:41:24 +02:00

send.c

…

stats.c

…

sysctl.c

…

tcp_connect.c

…

tcp_listen.c

RDS tcp loopback connection can hang

2021-06-16 11:59:35 +02:00

tcp_recv.c

…

tcp_send.c

…

tcp_stats.c

…

tcp.c

net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()

2022-10-26 13:22:26 +02:00

tcp.h

RDS tcp loopback connection can hang

2021-06-16 11:59:35 +02:00

threads.c

…

transport.c

…