tree 0852af87269facc5f07f08bd20387f183976cca2
parent d33ed425c6cc14370d8c418b504328d2c3db58b4
author Steve Wise <swise@opengridcomputing.com> 1204670692 -0600
committer Roland Dreier <rolandd@cisco.com> 1205209342 -0700

RDMA/iwcm: Don't access a cm_id after dropping reference

cm_work_handler() can access cm_id_priv after it drops its reference
by calling iwch_deref_id(), which might cause it to be freed.  The fix
is to look at whether IWCM_F_CALLBACK_DESTROY is set _before_ dropping
the reference.  Then if it was set, free the cm_id on this thread.

Signed-off-by: Steve Wise <swise@opengridcomputing.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>