libxfs: clear buffer state flags in libxfs_getbuf and variants

When we're running xfs_repair with prefetch enabled, it's possible
that repair will decide to clear an inode without examining all
metadata blocks owned by that inode.  This leaves the unreferenced
prefetched buffers marked UNCHECKED, which will cause a subsequent CRC
error if the block is reallocated to a different structure and read
more than once.  Typically this happens when a large directory is
corrupted and lost+found has to grow to accomodate all the
disconnected inodes.

In libxfs_getbuf*(), we're supposed to return an unused buffer which
has a clean state.  Unfortunately, things like UNCHECKED can hang
around to cause incorrect verifier errors later, so change those
functions to launder the state bits clean.

v2: Change the function name to reset_buf_state() to reflect what
the function is trying to accomplish.

Signed-off-by: Darrick J. Wong <darrick.wong@oracle.com>
Reviewed-by: Dave Chinner <dchinner@redhat.com>
Signed-off-by: Dave Chinner <david@fromorbit.com>

diff --git a/libxfs/rdwr.c b/libxfs/rdwr.c
index 4f8212fe3e89e0a1e3eff295e5f0ee881585e276..bc776992278e23048c30689e40cb82d4eda95762 100644 (file)
--- a/libxfs/rdwr.c
+++ b/libxfs/rdwr.c
@@ -631,15 +631,39 @@ libxfs_getbuf_flags(struct xfs_buftarg *btp, xfs_daddr_t blkno, int len,
        return __cache_lookup(&key, flags);
 }
 
+/*
+ * Clean the buffer flags for libxfs_getbuf*(), which wants to return
+ * an unused buffer with clean state.  This prevents CRC errors on a
+ * re-read of a corrupt block that was prefetched and freed.  This
+ * can happen with a massively corrupt directory that is discarded,
+ * but whose blocks are then recycled into expanding lost+found.
+ *
+ * Note however that if the buffer's dirty (prefetch calls getbuf)
+ * we'll leave the state alone because we don't want to discard blocks
+ * that have been fixed.
+ */
+static void
+reset_buf_state(
+       struct xfs_buf  *bp)
+{
+       if (bp && !(bp->b_flags & LIBXFS_B_DIRTY))
+               bp->b_flags &= ~(LIBXFS_B_UNCHECKED | LIBXFS_B_STALE |
+                               LIBXFS_B_UPTODATE);
+}
+
 struct xfs_buf *
 libxfs_getbuf(struct xfs_buftarg *btp, xfs_daddr_t blkno, int len)
 {
-       return libxfs_getbuf_flags(btp, blkno, len, 0);
+       struct xfs_buf  *bp;
+
+       bp = libxfs_getbuf_flags(btp, blkno, len, 0);
+       reset_buf_state(bp);
+       return bp;
 }
 
-struct xfs_buf *
-libxfs_getbuf_map(struct xfs_buftarg *btp, struct xfs_buf_map *map,
-                 int nmaps, int flags)
+static struct xfs_buf *
+__libxfs_getbuf_map(struct xfs_buftarg *btp, struct xfs_buf_map *map,
+                   int nmaps, int flags)
 {
        struct xfs_bufkey key = {0};
        int i;
@@ -659,6 +683,17 @@ libxfs_getbuf_map(struct xfs_buftarg *btp, struct xfs_buf_map *map,
        return __cache_lookup(&key, flags);
 }
 
+struct xfs_buf *
+libxfs_getbuf_map(struct xfs_buftarg *btp, struct xfs_buf_map *map,
+                 int nmaps, int flags)
+{
+       struct xfs_buf  *bp;
+
+       bp = __libxfs_getbuf_map(btp, map, nmaps, flags);
+       reset_buf_state(bp);
+       return bp;
+}
+
 void
 libxfs_putbuf(xfs_buf_t *bp)
 {
@@ -779,7 +814,7 @@ libxfs_readbuf(struct xfs_buftarg *btp, xfs_daddr_t blkno, int len, int flags,
        xfs_buf_t       *bp;
        int             error;
 
-       bp = libxfs_getbuf(btp, blkno, len);
+       bp = libxfs_getbuf_flags(btp, blkno, len, 0);
        if (!bp)
                return NULL;
 
@@ -860,7 +895,7 @@ libxfs_readbuf_map(struct xfs_buftarg *btp, struct xfs_buf_map *map, int nmaps,
                return libxfs_readbuf(btp, map[0].bm_bn, map[0].bm_len,
                                        flags, ops);
 
-       bp = libxfs_getbuf_map(btp, map, nmaps, 0);
+       bp = __libxfs_getbuf_map(btp, map, nmaps, 0);
        if (!bp)
                return NULL;