Fix SA request IRP cancellation leaking handles, which could cause

dereferencing freed memory.

git-svn-id: svn://openib.tc.cornell.edu/gen1@51 ad392aa1-c5ef-ae45-8dd8-e69d62a5ef86

diff --git a/trunk/core/al/kernel/al_proxy_subnet.c b/trunk/core/al/kernel/al_proxy_subnet.c
index df7d86d8745057088a00daf5f3b196171f8777a4..89465703d42501dba63089f88eedd295c5203dc4 100644 (file)
--- a/trunk/core/al/kernel/al_proxy_subnet.c
+++ b/trunk/core/al/kernel/al_proxy_subnet.c
@@ -184,8 +184,9 @@ __proxy_cancel_sa_req(
 #pragma warning(pop)\r
                cl_spinlock_acquire( &p_context->h_al->obj.lock );\r
                p_sa_req = al_hdl_chk( p_context->h_al, hdl, AL_OBJ_TYPE_H_SA_REQ );\r
-               if( p_sa_req )\r
-                       al_cancel_sa_req( p_sa_req );\r
+               CL_ASSERT( p_sa_req );\r
+               al_cancel_sa_req( p_sa_req );\r
+               al_hdl_free( p_context->h_al, hdl );\r
                cl_spinlock_release( &p_context->h_al->obj.lock );\r
        }\r
 \r