apfs/linux-apfs
0
0
Fork 0
mirror of https://github.com/linux-apfs/linux-apfs.git synced 2026-05-01 15:00:59 -07:00
Code Issues Packages Projects Releases Wiki Activity

f2fs: fix possible data corruption in f2fs_write_begin()

Browse Source 
f2fs_write_begin() doesn't initialize the 'dn' variable if the inode has
inline data. However it uses its contents to decide whether it should
just zero out the page or load data to it. Thus if we are unlucky we can
zero out page contents instead of loading inline data into a page.

CC: stable@vger.kernel.org
CC: Changman Lee <cm224.lee@samsung.com>
Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
This commit is contained in:
Jan Kara
2014-10-22 15:21:47 +02:00
committed by Jaegeuk Kim
parent 2cc2218611
commit 9234f3190b
1 changed files with 11 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fs/f2fs/data.c
+11 -13
View File
@@ -1017,21 +1017,19 @@ inline_data:
goto out; goto out;
} }
if (dn.data_blkaddr == NEW_ADDR) { if (f2fs_has_inline_data(inode)) {
err = f2fs_read_inline_data(inode, page);
if (err) {
page_cache_release(page);
goto fail;
}
} else if (dn.data_blkaddr == NEW_ADDR) {
zero_user_segment(page, 0, PAGE_CACHE_SIZE); zero_user_segment(page, 0, PAGE_CACHE_SIZE);
} else { } else {
if (f2fs_has_inline_data(inode)) { err = f2fs_submit_page_bio(sbi, page, dn.data_blkaddr,
err = f2fs_read_inline_data(inode, page); READ_SYNC);
if (err) { if (err)
page_cache_release(page); goto fail;
goto fail;
}
} else {
err = f2fs_submit_page_bio(sbi, page, dn.data_blkaddr,
READ_SYNC);
if (err)
goto fail;
}
lock_page(page); lock_page(page);
if (unlikely(!PageUptodate(page))) { if (unlikely(!PageUptodate(page))) {