From: Chien Tung <ctung@neteffect.com>
Date: Fri, 10 Oct 2008 00:41:05 +0000 (-0700)
Subject: RDMA/nes: Fix slab corruption
X-Git-Tag: v2.6.28-rc1~727^2^10
X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=fbcffcc6a0536544fa53cd5bd5c4913efe1a5982;p=karo-tx-linux.git

RDMA/nes: Fix slab corruption

Referencing cm_node after it is freed via rem_ref_cm_node() causes a
slab corruption.  There is no need to set cm_node->cm_id to NULL in
mini_cm_close().

Signed-off-by: Chien Tung <ctung@neteffect.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>
---

diff --git a/drivers/infiniband/hw/nes/nes_cm.c b/drivers/infiniband/hw/nes/nes_cm.c
index d69226d7102e..2caf9da81ad5 100644
--- a/drivers/infiniband/hw/nes/nes_cm.c
+++ b/drivers/infiniband/hw/nes/nes_cm.c
@@ -2029,7 +2029,6 @@ static int mini_cm_close(struct nes_cm_core *cm_core, struct nes_cm_node *cm_nod
 		ret = rem_ref_cm_node(cm_core, cm_node);
 		break;
 	}
-	cm_node->cm_id = NULL;
 	return ret;
 }