diff options
| author | Martin K. Petersen (Oracle) <mkp@kernel.org> | 2026-10-23 22:36:54 -0400 |
|---|---|---|
| committer | Martin K. Petersen (Oracle) <mkp@kernel.org> | 2026-10-23 22:36:54 -0400 |
| commit | 1b39bd7b8279c1c5d4f6c39fab260bd5fc31133e (patch) | |
| tree | 19ba08e4059c79f3adcc4685acd03798e71d97c3 /tools/lib/python/kdoc/python_version.py | |
| parent | 537bba32a37519e47c64084b85f058fa56140510 (diff) | |
| parent | e4a9b7640914b248eb7537d4507aa42db080586a (diff) | |
Merge patch series "scsi: ufs: Fix UIC result byte and BSG request handling"
Stanley Jhu <stanleyjhu@google.com> says:
ufs-bsg fixes for issues found by fuzzing /dev/bsg/ufs-bsg* with
syzkaller on QEMU's emulated UFS host controller and in review of v1,
plus a fix for peer DME retries.
Patch 1 completes failed BSG requests via bsg_job_done() so error paths
do not leak the job's device reference and mapped scatterlists.
Patch 2 clears the reused reply buffer so replies do not carry bytes
from an earlier request.
Patch 3 rejects requests shorter than the UFS BSG request structures.
Patch 4 rejects UIC commands with a non-zero result byte from userspace.
Patch 5 clears the stale UIC result byte and restores argument3 before
peer DME retries.
Patches 1-2 also address the sashiko review of the bsg reply_len patch:
https://lore.kernel.org/all/sashiko-outbox-169843@kernel.org/
Tested on QEMU arm64: the reproducers no longer trigger.
Link: https://patch.msgid.link/20261015001855.3450573-1-stanleyjhu@google.com
Signed-off-by: Martin K. Petersen (Oracle) <mkp@kernel.org>
Diffstat (limited to 'tools/lib/python/kdoc/python_version.py')
0 files changed, 0 insertions, 0 deletions