Re: [PATCH] scsi: core: initialize cmd->cmnd before it is used

On 11/2/21 3:22 PM, Tadeusz Struk wrote:

Do you want me to send a patch with the check in scsi_fill_sghdr_rq()? I want to close the mentioned syzbot issue in 5.10. I can also do the back-porting if anything will be required.

Hi Tadeusz,

I think we need two patches: one for the SG_IO code that rejects SG_IO requests if the CDB length is not valid and a second patch that removes the code from scsi_lib.c for assigning the CDB length. Please let me know if you would not have the time to work on this.

Bart.