Faisal Latif 886f98a315 RDMA/nes: Fix Xansation test crash on cm_node ref_count ... While running a Xansation test, an active side node crashed. The problem started on the passive side, which generated an STtag that was 0. The passive side sent a TERMINATE instead of an MPA REJECT msg. The active side, receives TERMINATE and sends connect_err() and set the cm_node state to CLOSED. The passive side sends FIN + ACK after TERMINATE. Active side ends up in handle_ack_pkt() and send_reset(). send_reset() consumes 1 cm_node's ref_count. Because the cm_node is in CLOSED state, which means that cm_node will be destroyed after completion of the connect_err() indication, CM will crash after send_reset(). Signed-off-by: Faisal Latif <faisal.latif@intel.com> Signed-off-by: Roland Dreier <rolandd@cisco.com>		2009-12-09 15:54:18 -08:00
..
amso1100	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6	2009-09-14 10:37:28 -07:00
cxgb3	headers: remove sched.h from interrupt.h	2009-10-11 11:20:58 -07:00
ehca	IB/ehca: Rework destroy_eq()	2009-12-09 10:11:04 -08:00
ipath	headers: remove sched.h from interrupt.h	2009-10-11 11:20:58 -07:00
mlx4	Merge branches 'cxgb3', 'ehca', 'ipath', 'ipoib', 'misc', 'mlx4', 'mthca' and 'nes' into for-linus	2009-09-10 21:18:07 -07:00
mthca	IB/mthca: Fix access to freed memory in catastrophic event handling	2009-09-24 11:55:41 -07:00
nes	RDMA/nes: Fix Xansation test crash on cm_node ref_count	2009-12-09 15:54:18 -08:00