tree 09f004a98b2725bc7fdda9b4ed8f3c8fa43520c1
parent e9a6fb0bcdd7609be6969112f3fbfcce3b1d4a7c
author Joshua Rogers <linux@joshua.hu> 1762445737 +0800
committer Steve French <stfrench@microsoft.com> 1762732069 -0600

smb: server: rdma: avoid unmapping posted recv on accept failure

smb_direct_prepare_negotiation() posts a recv and then, if
smb_direct_accept_client() fails, calls put_recvmsg() on the same
buffer. That unmaps and recycles a buffer that is still posted on
the QP., which can lead to device DMA into unmapped or reused memory.

Track whether the recv was posted and only return it if it was never
posted. If accept fails after a post, leave it for teardown to drain
and complete safely.

Signed-off-by: Joshua Rogers <linux@joshua.hu>
Acked-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>