The Infiniband link status change callback ipoib_link_state_changed() may be called while the IPoIB device is closed, in which case there will not be an IPoIB queue pair to be joined to the IPv4 broadcast group. This leads to NULL pointer dereferences in ib_mcast_attach() and ib_mcast_detach(). Fix by not attempting to join (or leave) the broadcast group unless we actually have an IPoIB queue pair. Signed-off-by: Wissam Shoukair <wissams@mellanox.com> Modified-by: Michael Brown <mcb30@ipxe.org> Signed-off-by: Michael Brown <mcb30@ipxe.org>tags/v1.20.1
|
|
||
791 |
|
791 |
|
792 |
|
792 |
|
793 |
|
793 |
|
794 |
|
|
|
|
794 |
|
|
|
795 |
|
|
795 |
|
796 |
|
796 |
|
797 |
|
797 |
|
798 |
|
|
|
||
806 |
|
807 |
|
807 |
|
808 |
|
808 |
|
809 |
|
809 |
|
|
|
|
810 |
|
|
810 |
|
811 |
|
811 |
|
812 |
|
812 |
|
813 |
|
|
|
||
894 |
|
895 |
|
895 |
|
896 |
|
896 |
|
897 |
|
|
898 |
|
|
897 |
|
899 |
|
|
900 |
|
|
898 |
|
901 |
|
899 |
|
902 |
|
900 |
|
903 |
|
|
|
||
718 |
|
718 |
|
719 |
|
719 |
|
720 |
|
720 |
|
|
721 |
|
|
|
722 |
|
|
|
723 |
|
|
721 |
|
724 |
|
722 |
|
725 |
|
723 |
|
726 |
|
|
|
||
751 |
|
754 |
|
752 |
|
755 |
|
753 |
|
756 |
|
|
757 |
|
|
|
758 |
|
|
|
759 |
|
|
754 |
|
760 |
|
755 |
|
761 |
|
756 |
|
762 |
|
|
|
||
150 |
|
150 |
|
151 |
|
151 |
|
152 |
|
152 |
|
|
153 |
|
|
|
154 |
|
|
|
155 |
|
|
153 |
|
156 |
|
154 |
|
157 |
|
155 |
|
158 |
|
|
|
||
199 |
|
202 |
|
200 |
|
203 |
|
201 |
|
204 |
|
|
205 |
|
|
|
206 |
|
|
|
207 |
|
|
202 |
|
208 |
|
203 |
|
209 |
|
204 |
|
210 |
|