Exact Kernel version: 2.5.48
Distribution: kernel.org
Hardware Environment: unknown
Software Environment: Stanford Checker
Problem Description:
See thread here: http://marc.theaimsgroup.com/?t=104155440600003&r=1&w=2
[BUG] In caller, err_out: is reached in cases where SRpnt is uninitialized.
/u1/acc/linux/2.5.48/drivers/scsi/scsi.c:341:scsi_release_request:
ERROR:BUFFER:341:341:Deref uninitialized pointer req [Callstack:
/u1/acc/linux/2.5.48/drivers/scsi/osst.c:4511:scsi_release_request(<len=0,
off=0>)] 
 *              has not yet reached the top of the queue.  We still need
 *              to free a request when we are done with it, of course.
 */
void scsi_release_request(Scsi_Request * req)
{

Error --->
	if( req->sr_command != NULL )
	{
		scsi_release_command(req->sr_command);
		req->sr_command = NULL;

Steps to reproduce: