Hi Ming, > This patch allocates one array for T10_PI_TYPE2_PROTECTION command, > size of each element is SD_EXT_CDB_SIZE, and the length is > host->can_queue, then we can retrieve one command buffer runtime > via rq->tag. > > So we can avoid to allocate the command buffer runtime, also the > recent use-after-free report[1] in scsi_show_rq() can be fixed too. I'm still mulling over the pros and cons of this one for 4.16+... -- Martin K. Petersen Oracle Linux Engineering