Re: [PATCH] scsi: core: initialize cmd->cmnd before it is used

[Tadeusz Struk]

On 11/2/21 15:27, Bart Van Assche wrote:
> On 11/2/21 3:22 PM, Tadeusz Struk wrote:
> > Do you want me to send a patch with the check in scsi_fill_sghdr_rq()?
> > I want to close the mentioned syzbot issue in 5.10. I can also do the
> > back-porting if anything will be required.
>
> Hi Tadeusz,
>
> I think we need two patches: one for the SG_IO code that rejects SG_IO
> requests if the CDB length is not valid and a second patch that removes
> the code from scsi_lib.c for assigning the CDB length. Please let me
> know if you would not have the time to work on this.

Yes, I agree. I will send the patches today.

--
Thanks,
Tadeusz