[packages/xfsprogs] - rel 3; clean garbage from superblocks

arekm arekm at pld-linux.org
Mon Jan 20 23:03:50 CET 2014


commit 1d942191f9d00791330748bad8323f35cfcada77
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Mon Jan 20 23:03:46 2014 +0100

    - rel 3; clean garbage from superblocks

 xfsprogs-sb.patch | 161 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 xfsprogs.spec     |   4 +-
 2 files changed, 164 insertions(+), 1 deletion(-)
---
diff --git a/xfsprogs.spec b/xfsprogs.spec
index 14d12be..a9b1db3 100644
--- a/xfsprogs.spec
+++ b/xfsprogs.spec
@@ -6,7 +6,7 @@ Summary:	Tools for the XFS filesystem
 Summary(pl.UTF-8):	Narzędzia do systemu plików XFS
 Name:		xfsprogs
 Version:	3.1.11
-Release:	2
+Release:	3
 License:	LGPL v2.1 (libhandle), GPL v2 (the rest)
 Group:		Applications/System
 Source0:	ftp://linux-xfs.sgi.com/projects/xfs/cmd_tars/%{name}-%{version}.tar.gz
@@ -19,6 +19,7 @@ Patch4:		%{name}-dynamic_exe.patch
 Patch5:		%{name}-diet.patch
 Patch6:		%{name}-repair-tcmalloc.patch
 Patch7:		%{name}-noquotasync.patch
+Patch8:		%{name}-sb.patch
 URL:		http://www.xfs.org/
 BuildRequires:	autoconf
 BuildRequires:	automake
@@ -110,6 +111,7 @@ Biblioteki statyczne do XFS.
 %patch5 -p1
 %{?with_tcmalloc:%patch6 -p1}
 %patch7 -p1
+%patch8 -p1
 
 %build
 %{__aclocal} -I m4
diff --git a/xfsprogs-sb.patch b/xfsprogs-sb.patch
new file mode 100644
index 0000000..451a9c1
--- /dev/null
+++ b/xfsprogs-sb.patch
@@ -0,0 +1,161 @@
+commit cbd7508db4c9597889ad98d5f027542002e0e57c
+Author: Eric Sandeen <sandeen at redhat.com>
+Date:   Thu Aug 15 02:26:40 2013 +0000
+
+    xfs_repair: zero out unused parts of superblocks
+    
+    Prior to:
+    1375cb65 xfs: growfs: don't read garbage for new secondary superblocks
+    
+    we ran the risk of allowing garbage in secondary superblocks
+    beyond the in-use sb fields.  With kernels 3.10 and beyond, the
+    verifiers will kick these out as invalid, but xfs_repair does
+    not detect or repair this condition.
+    
+    There is superblock stale-data zeroing code, but it is under a
+    narrow conditional - the bug addressed in the above commit did not
+    meet that conditional.  So change this to check unconditionally.
+    
+    Further, the checking code was looking at the in-memory
+    superblock buffer, which was zeroed prior to population, and
+    would therefore never possibly show any stale data beyond the
+    last up-rev superblock field.
+    
+    So instead, check the disk buffer for this garbage condition.
+    
+    If we detect garbage, we must zero out both the in-memory sb
+    and the disk buffer; the former may contain unused data
+    in up-rev sb fields which will be written back out; the latter
+    may contain garbage beyond all fields, which won't be updated
+    when we translate the in-memory sb back to disk.
+    
+    The V4 superblock case was zeroing out the sb_bad_features2
+    field; we also fix that to leave that field alone.
+    
+    Lastly, use offsetof() instead of the tortured (__psint_t)
+    casts & pointer math.
+    
+    Reported-by: Michael Maier <m1278468 at allmail.net>
+    Signed-off-by: Eric Sandeen <sandeen at redhat.com>
+    Reviewed-by: Rich Johnston <rjohnston at sgi.com>
+    Signed-off-by: Rich Johnston <rjohnston at sgi.com>
+
+diff --git a/repair/agheader.c b/repair/agheader.c
+index b0f38ba..53e47b6 100644
+--- a/repair/agheader.c
++++ b/repair/agheader.c
+@@ -256,60 +256,63 @@ secondary_sb_wack(xfs_mount_t *mp, xfs_buf_t *sbuf, xfs_sb_t *sb,
+ 	rval = do_bzero = 0;
+ 
+ 	/*
+-	 * mkfs's that stamped a feature bit besides the ones in the mask
+-	 * (e.g. were pre-6.5 beta) could leave garbage in the secondary
+-	 * superblock sectors.  Anything stamping the shared fs bit or better
+-	 * into the secondaries is ok and should generate clean secondary
+-	 * superblock sectors.  so only run the zero check on the
+-	 * potentially garbaged secondaries.
++	 * Check for garbage beyond the last valid field.
++	 * Use field addresses instead so this code will still
++	 * work against older filesystems when the superblock
++	 * gets rev'ed again with new fields appended.
++	 *
++	 * size is the size of data which is valid for this sb.
+ 	 */
+-	if (pre_65_beta ||
+-	    (sb->sb_versionnum & XR_GOOD_SECSB_VNMASK) == 0 ||
+-	    sb->sb_versionnum < XFS_SB_VERSION_4)  {
+-		/*
+-		 * Check for garbage beyond the last field.
+-		 * Use field addresses instead so this code will still
+-		 * work against older filesystems when the superblock
+-		 * gets rev'ed again with new fields appended.
+-		 */
+-		if (xfs_sb_version_hasmorebits(sb))
+-			size = (__psint_t)&sb->sb_features2
+-				+ sizeof(sb->sb_features2) - (__psint_t)sb;
+-		else if (xfs_sb_version_haslogv2(sb))
+-			size = (__psint_t)&sb->sb_logsunit
+-				+ sizeof(sb->sb_logsunit) - (__psint_t)sb;
+-		else if (xfs_sb_version_hassector(sb))
+-			size = (__psint_t)&sb->sb_logsectsize
+-				+ sizeof(sb->sb_logsectsize) - (__psint_t)sb;
+-		else if (xfs_sb_version_hasdirv2(sb))
+-			size = (__psint_t)&sb->sb_dirblklog
+-				+ sizeof(sb->sb_dirblklog) - (__psint_t)sb;
+-		else
+-			size = (__psint_t)&sb->sb_width
+-				+ sizeof(sb->sb_width) - (__psint_t)sb;
+-		for (ip = (char *)((__psint_t)sb + size);
+-		     ip < (char *)((__psint_t)sb + mp->m_sb.sb_sectsize);
+-		     ip++)  {
+-			if (*ip)  {
+-				do_bzero = 1;
+-				break;
+-			}
+-		}
+-
+-		if (do_bzero)  {
+-			rval |= XR_AG_SB_SEC;
+-			if (!no_modify)  {
+-				do_warn(
+-		_("zeroing unused portion of %s superblock (AG #%u)\n"),
+-					!i ? _("primary") : _("secondary"), i);
+-				memset((void *)((__psint_t)sb + size), 0,
+-					mp->m_sb.sb_sectsize - size);
+-			} else
+-				do_warn(
+-		_("would zero unused portion of %s superblock (AG #%u)\n"),
+-					!i ? _("primary") : _("secondary"), i);
++	if (xfs_sb_version_hascrc(sb))
++		size = offsetof(xfs_sb_t, sb_lsn)
++			+ sizeof(sb->sb_lsn);
++	else if (xfs_sb_version_hasmorebits(sb))
++		size = offsetof(xfs_sb_t, sb_bad_features2)
++			+ sizeof(sb->sb_bad_features2);
++	else if (xfs_sb_version_haslogv2(sb))
++		size = offsetof(xfs_sb_t, sb_logsunit)
++			+ sizeof(sb->sb_logsunit);
++	else if (xfs_sb_version_hassector(sb))
++		size = offsetof(xfs_sb_t, sb_logsectsize)
++			+ sizeof(sb->sb_logsectsize);
++	else if (xfs_sb_version_hasdirv2(sb))
++		size = offsetof(xfs_sb_t, sb_dirblklog)
++			+ sizeof(sb->sb_dirblklog);
++	else
++		size = offsetof(xfs_sb_t, sb_width)
++			+ sizeof(sb->sb_width);
++
++	/* Check the buffer we read from disk for garbage outside size */
++	for (ip = XFS_BUF_PTR(sbuf) + size;
++	     ip < XFS_BUF_PTR(sbuf) + mp->m_sb.sb_sectsize;
++	     ip++)  {
++		if (*ip)  {
++			do_bzero = 1;
++			break;
+ 		}
+ 	}
++	if (do_bzero)  {
++		rval |= XR_AG_SB_SEC;
++		if (!no_modify)  {
++			do_warn(
++	_("zeroing unused portion of %s superblock (AG #%u)\n"),
++				!i ? _("primary") : _("secondary"), i);
++			/*
++			 * zero both the in-memory sb and the disk buffer,
++			 * because the former was read from disk and
++			 * may contain newer version fields that shouldn't
++			 * be set, and the latter is never updated past
++			 * the last field - just zap them both.
++			 */
++			memset((void *)((__psint_t)sb + size), 0,
++				mp->m_sb.sb_sectsize - size);
++			memset(XFS_BUF_PTR(sbuf) + size, 0,
++				mp->m_sb.sb_sectsize - size);
++		} else
++			do_warn(
++	_("would zero unused portion of %s superblock (AG #%u)\n"),
++				!i ? _("primary") : _("secondary"), i);
++	}
+ 
+ 	/*
+ 	 * now look for the fields we can manipulate directly.
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/xfsprogs.git/commitdiff/1d942191f9d00791330748bad8323f35cfcada77



More information about the pld-cvs-commit mailing list