[openib-general] ib_free_recv_mad and references

[Sean Hefty]

Currently, a call to ib_free_recv_mad does not dereference the mad_agent that the mad was given to.  The call itself does not access the mad_agent, but should a reference be held on the mad_agent while it has a received MAD?  Looking at the implementation, it appears that a mad_agent could deregister with the access layer, then call ib_free_recv_mad, which accesses the ib_mad_cache.

- Sean

--