tree 178d5fd1fe2230b39f49cd36f481024e49878eb1
parent 6f4bb3d8205d943acafa2f536f37131777524b67
author Sean Hefty <mshefty@ichips.intel.com> 1147471072 -0700
committer Roland Dreier <rolandd@cisco.com> 1147471072 -0700

IB: refcount race fixes

Fix race condition during destruction calls to avoid possibility of
accessing object after it has been freed.  Instead of waking up a wait
queue directly, which is susceptible to a race where the object is
freed between the reference count going to 0 and the wake_up(), use a
completion to wait in the function doing the freeing.

Signed-off-by: Sean Hefty <sean.hefty@intel.com>
Signed-off-by: Roland Dreier <rolandd@cisco.com>