]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
xfs: fix off-by-one error in fsmap's end_daddr usage
authorDarrick J. Wong <djwong@kernel.org>
Wed, 18 Dec 2024 19:50:52 +0000 (11:50 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 27 Dec 2024 13:02:00 +0000 (14:02 +0100)
commit a440a28ddbdcb861150987b4d6e828631656b92f upstream.

In commit ca6448aed4f10a, we created an "end_daddr" variable to fix
fsmap reporting when the end of the range requested falls in the middle
of an unknown (aka free on the rmapbt) region.  Unfortunately, I didn't
notice that the the code sets end_daddr to the last sector of the device
but then uses that quantity to compute the length of the synthesized
mapping.

Zizhi Wo later observed that when end_daddr isn't set, we still don't
report the last fsblock on a device because in that case (aka when
info->last is true), the info->high mapping that we pass to
xfs_getfsmap_group_helper has a startblock that points to the last
fsblock.  This is also wrong because the code uses startblock to
compute the length of the synthesized mapping.

Fix the second problem by setting end_daddr unconditionally, and fix the
first problem by setting start_daddr to one past the end of the range to
query.

Cc: <stable@vger.kernel.org> # v6.11
Fixes: ca6448aed4f10a ("xfs: Fix missing interval for missing_owner in xfs fsmap")
Signed-off-by: "Darrick J. Wong" <djwong@kernel.org>
Reported-by: Zizhi Wo <wozizhi@huawei.com>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
fs/xfs/xfs_fsmap.c

index ae18ab86e608b5d9c23414d0b90cb369bf6e863f..8712b891defbc717bbc4610c6508adb0f4176732 100644 (file)
@@ -162,7 +162,8 @@ struct xfs_getfsmap_info {
        xfs_daddr_t             next_daddr;     /* next daddr we expect */
        /* daddr of low fsmap key when we're using the rtbitmap */
        xfs_daddr_t             low_daddr;
-       xfs_daddr_t             end_daddr;      /* daddr of high fsmap key */
+       /* daddr of high fsmap key, or the last daddr on the device */
+       xfs_daddr_t             end_daddr;
        u64                     missing_owner;  /* owner of holes */
        u32                     dev;            /* device id */
        /*
@@ -306,7 +307,7 @@ xfs_getfsmap_helper(
         * Note that if the btree query found a mapping, there won't be a gap.
         */
        if (info->last && info->end_daddr != XFS_BUF_DADDR_NULL)
-               rec_daddr = info->end_daddr;
+               rec_daddr = info->end_daddr + 1;
 
        /* Are we just counting mappings? */
        if (info->head->fmh_count == 0) {
@@ -898,7 +899,10 @@ xfs_getfsmap(
        struct xfs_trans                *tp = NULL;
        struct xfs_fsmap                dkeys[2];       /* per-dev keys */
        struct xfs_getfsmap_dev         handlers[XFS_GETFSMAP_DEVS];
-       struct xfs_getfsmap_info        info = { NULL };
+       struct xfs_getfsmap_info        info = {
+               .fsmap_recs             = fsmap_recs,
+               .head                   = head,
+       };
        bool                            use_rmap;
        int                             i;
        int                             error = 0;
@@ -963,9 +967,6 @@ xfs_getfsmap(
 
        info.next_daddr = head->fmh_keys[0].fmr_physical +
                          head->fmh_keys[0].fmr_length;
-       info.end_daddr = XFS_BUF_DADDR_NULL;
-       info.fsmap_recs = fsmap_recs;
-       info.head = head;
 
        /* For each device we support... */
        for (i = 0; i < XFS_GETFSMAP_DEVS; i++) {
@@ -978,17 +979,23 @@ xfs_getfsmap(
                        break;
 
                /*
-                * If this device number matches the high key, we have
-                * to pass the high key to the handler to limit the
-                * query results.  If the device number exceeds the
-                * low key, zero out the low key so that we get
-                * everything from the beginning.
+                * If this device number matches the high key, we have to pass
+                * the high key to the handler to limit the query results, and
+                * set the end_daddr so that we can synthesize records at the
+                * end of the query range or device.
                 */
                if (handlers[i].dev == head->fmh_keys[1].fmr_device) {
                        dkeys[1] = head->fmh_keys[1];
                        info.end_daddr = min(handlers[i].nr_sectors - 1,
                                             dkeys[1].fmr_physical);
+               } else {
+                       info.end_daddr = handlers[i].nr_sectors - 1;
                }
+
+               /*
+                * If the device number exceeds the low key, zero out the low
+                * key so that we get everything from the beginning.
+                */
                if (handlers[i].dev > head->fmh_keys[0].fmr_device)
                        memset(&dkeys[0], 0, sizeof(struct xfs_fsmap));