RDMA/srpt: Do not register event handler until srpt device is fully setup
authorWilliam Kucharski <william.kucharski@oracle.com>
Fri, 2 Feb 2024 09:15:49 +0000 (02:15 -0700)
committerLeon Romanovsky <leon@kernel.org>
Sun, 4 Feb 2024 09:44:50 +0000 (11:44 +0200)
commitc21a8870c98611e8f892511825c9607f1e2cd456
treebed91ea7e2c6a6870489780b19debc3f2d9f6d73
parent926e8ea4b8dac84f6d14a4b60d0653f1f2ba9431
RDMA/srpt: Do not register event handler until srpt device is fully setup

Upon rare occasions, KASAN reports a use-after-free Write
in srpt_refresh_port().

This seems to be because an event handler is registered before the
srpt device is fully setup and a race condition upon error may leave a
partially setup event handler in place.

Instead, only register the event handler after srpt device initialization
is complete.

Fixes: a42d985bd5b2 ("ib_srpt: Initial SRP Target merge for v3.3-rc1")
Signed-off-by: William Kucharski <william.kucharski@oracle.com>
Link: https://lore.kernel.org/r/20240202091549.991784-2-william.kucharski@oracle.com
Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
drivers/infiniband/ulp/srpt/ib_srpt.c