[ofa-general] [PATCH] cma: fix access to freed memory

[Roland Dreier]

 > rdma_destroy_id and rdma_leave_multicast call ib_sa_free_multicast.  This call
 > will block until the join callback completes or is canceled.  Can you describe
 > the race with cma_ib_mc_handler in more detail?
 > 
 > Also, cma_leave_mc_groups is only called from rdma_destroy_id.  Locking around
 > the mc->list shouldn't be required, since calls to join/leave aren't allowed.

So where does this leave things?  Is any part of Eli's patch needed?

 - R.