Re: [PULL 02/39] scsi: Add buf_len parameter to scsi_req_new()

2022-12-07 Thread Guenter Roeck
On Thu, Sep 01, 2022 at 08:23:52PM +0200, Paolo Bonzini wrote: > From: John Millikin > > When a SCSI command is received from the guest, the CDB length implied > by the first byte might exceed the number of bytes the guest sent. In > this case scsi_req_new() will read uninitialized data, causing

[PULL 02/39] scsi: Add buf_len parameter to scsi_req_new()

2022-09-01 Thread Paolo Bonzini
From: John Millikin When a SCSI command is received from the guest, the CDB length implied by the first byte might exceed the number of bytes the guest sent. In this case scsi_req_new() will read uninitialized data, causing unpredictable behavior. Adds the buf_len parameter to scsi_req_new() and