btrfs_cont_expand() tries to free an IS_ERR em as it gets an error from
btrfs_get_extent() and breaks out of its loop.
An instance of -EEXIST was reported in the wild:
https://bugzilla.redhat.com/show_bug.cgi?id=874407
I have no idea if that -EEXIST is surprising, or not. Regardless, this
error handling should be cleaned up to handle other reasonable errors
(ENOMEM, EIO; whatever).
This seemed to be the only buggy freeing of the relatively rare IS_ERR
em so I opted to fix the caller rather than teach free_extent_map() to
use IS_ERR_OR_NULL().
Signed-off-by: Zach Brown <zab@redhat.com>
---
fs/btrfs/inode.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/fs/btrfs/inode.c b/fs/btrfs/inode.c
index edd30ae..0bc7bb3 100644
--- a/fs/btrfs/inode.c
+++ b/fs/btrfs/inode.c
@@ -3690,6 +3690,7 @@ int btrfs_cont_expand(struct inode *inode, loff_t oldsize,
loff_t size)
block_end - cur_offset, 0);
if (IS_ERR(em)) {
err = PTR_ERR(em);
+ em = NULL;
break;
}
last_byte = min(extent_map_end(em), block_end);
--
1.7.11.7
--
To unsubscribe from this list: send the line "unsubscribe linux-btrfs"
in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Eric Sandeen
2013-Jan-08 19:46 UTC
Re: [PATCH] btrfs: fix btrfs_cont_expand() freeing IS_ERR em
On 1/8/13 1:37 PM, Zach Brown wrote:> btrfs_cont_expand() tries to free an IS_ERR em as it gets an error from > btrfs_get_extent() and breaks out of its loop. > > An instance of -EEXIST was reported in the wild: > > https://bugzilla.redhat.com/show_bug.cgi?id=874407 > > I have no idea if that -EEXIST is surprising, or not. Regardless, this > error handling should be cleaned up to handle other reasonable errors > (ENOMEM, EIO; whatever). > > This seemed to be the only buggy freeing of the relatively rare IS_ERR > em so I opted to fix the caller rather than teach free_extent_map() to > use IS_ERR_OR_NULL(). > > Signed-off-by: Zach Brown <zab@redhat.com>Looks good (maybe IS_ERR_OR_NULL would be more future-proof, but *shrug*) Reviewed-by: Eric Sandeen <sandeen@redhat.com>> --- > fs/btrfs/inode.c | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/fs/btrfs/inode.c b/fs/btrfs/inode.c > index edd30ae..0bc7bb3 100644 > --- a/fs/btrfs/inode.c > +++ b/fs/btrfs/inode.c > @@ -3690,6 +3690,7 @@ int btrfs_cont_expand(struct inode *inode, loff_t oldsize, loff_t size) > block_end - cur_offset, 0); > if (IS_ERR(em)) { > err = PTR_ERR(em); > + em = NULL; > break; > } > last_byte = min(extent_map_end(em), block_end); >-- To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Zach Brown
2013-Jan-08 19:51 UTC
Re: [PATCH] btrfs: fix btrfs_cont_expand() freeing IS_ERR em
> Looks good (maybe IS_ERR_OR_NULL would be more future-proof, but *shrug*)Yeah. I don''t feel strongly about it. I''m happy to do that, and dance around the tree pulling out redundant ''em = NULL'' bits that wouldn''t be needed, if anyone feels strongly about it. - z (*shrug*) -- To unsubscribe from this list: send the line "unsubscribe linux-btrfs" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html