Hi all, the infamous syzkaller incovered some more issues in the sg driver. This patchset fixes those two issues (and adds a fix for yet another potential issue; checking for a NULL dxferp when dxfer_len is not 0). It also removes handling of the SET_FORCE_LOW_DMA ioctl, which never worked since the initial git checkin. And does some code cleanup by removing the private list implementation, using standard lists instead. As usual, comments and reviews are welcome. Hannes Reinecke (3): sg: disable SET_FORCE_LOW_DMA sg: protect access to to 'reserved' page array sg: use standard lists for sg_requests Johannes Thumshirn (1): sg: check for valid direction before starting the request drivers/scsi/sg.c | 183 ++++++++++++++++++++++++------------------------------ include/scsi/sg.h | 1 - 2 files changed, 80 insertions(+), 104 deletions(-) -- 1.8.5.6
