On Wed, 22 Jan 2025 19:07:22 -0800, longli@xxxxxxxxxxxxxxxxx wrote:
> In StorVSC, payload->range.len is used to indicate if this SCSI command
> carries payload. This data is allocated as part of the private driver
> data by the upper layer and may get passed to lower driver uninitialized.
>
> For example, the SCSI error handling mid layer may send TEST_UNIT_READY
> or REQUEST_SENSE while reusing the buffer from a failed command. The
> private data section may have stale data from the previous command.
>
> [...]
Applied to 6.14/scsi-fixes, thanks!
[1/1] scsi: storvsc: Set correct data length for sending SCSI command without payload
https://git.kernel.org/mkp/scsi/c/87c4b5e8a6b6
--
Martin K. Petersen Oracle Linux Engineering
