Christoph, > (and I wonder if we have similar problems with other commands, the > target code could use same targeted fuzzing..) Yeah. The USB gadget series implements initial support for RSOC. It might be worth entertaining to augment that code with CDB masks for all the commands we actually support. And then leverage these masks for command validation. -- Martin K. Petersen Oracle Linux Engineering
