From: Boris Burkov <boris@bur.io>
Date: Fri, 25 Apr 2025 19:47:50 +0000 (-0700)
Subject: btrfs: handle empty eb->folios in num_extent_folios()
X-Git-Tag: v6.15-rc6~31^2~3
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d6fe0c69b3aa5c985380b794bdf8e6e9b1811e60;p=thirdparty%2Fkernel%2Flinux.git

btrfs: handle empty eb->folios in num_extent_folios()

num_extent_folios() unconditionally calls folio_order() on
eb->folios[0]. If that is NULL this will be a segfault. It is reasonable
for it to return 0 as the number of folios in the eb when the first
entry is NULL, so do that instead.

Reviewed-by: Qu Wenruo <wqu@suse.com>
Signed-off-by: Boris Burkov <boris@bur.io>
Reviewed-by: David Sterba <dsterba@suse.com>
Signed-off-by: David Sterba <dsterba@suse.com>
---

diff --git a/fs/btrfs/extent_io.h b/fs/btrfs/extent_io.h
index 2e261892c7bc7..f5b28b5c4908b 100644
--- a/fs/btrfs/extent_io.h
+++ b/fs/btrfs/extent_io.h
@@ -298,6 +298,8 @@ static inline int __pure num_extent_pages(const struct extent_buffer *eb)
  */
 static inline int __pure num_extent_folios(const struct extent_buffer *eb)
 {
+	if (!eb->folios[0])
+		return 0;
 	if (folio_order(eb->folios[0]))
 		return 1;
 	return num_extent_pages(eb);