01b9be936e
[ Upstream commit 3e4289b29e216a55d08a89e126bc0b37cbad9f38 ]
In the function init_conns(), after the create_con() and create_cm() for
loop if something fails. In the cleanup for loop after the destroy tag, we
access out of bound memory because cid is set to clt_path->s.con_num.
This commits resets the cid to clt_path->s.con_num - 1, to stay in bounds
in the cleanup loop later.
Fixes:
|
||
---|---|---|
.. | ||
ipoib | ||
iser | ||
isert | ||
opa_vnic | ||
rtrs | ||
srp | ||
srpt | ||
Makefile |