Re: [PATCH v2] scsi: target: Verify the iSCSI ISID is NUL-terminated
From: Martin K. Petersen
Date: Fri Oct 30 2026 - 21:20:44 EST
Yuanhe,
> iscsi_parse_pr_out_transport_id() returns the ISID of a FORMAT CODE
> 01b TransportID as a pointer into the PERSISTENT RESERVE OUT parameter
> list, lowercased in place and never NUL-terminated. spc4r37 Table 508
> requires the field to be null-terminated, but a non-conforming
> initiator can omit the NUL; when the ISID ends at the end of the
> received buffer, the pointer is not a C string.
Applied to 7.4/scsi-staging, thanks!
--
Martin K. Petersen