GFS2: Protect freeing directory hash table with i_lock spin_lock
A message that is not in the archive (sent off-list or not yet received): [email protected]
PATCH v2 1/1 GFS2: Protect freeing directory hash table with i_lock spin_lock
Hi,
This is a re-spin of a patch I posted earlier today. Andy Price pointed out that my comment was wrong: The race concerns gfs2_evict_inode, not gfs2_clear_inode (as the previous version's comment indicated). Function gfs2_clear_inode exists in RHEL6 and earlier, but not in upstream.
Revised patch description:
This patch changes function gfs2_dir_hash_inval so it uses the i_lock spin_lock to protect the in-core hash table, i_hash_cache. This will prevent double-frees due to a race between gfs2_evict_inode and inode invalidation.
---
fs/gfs2/dir.c +6 -1
@@ -388,8 +388,13 @@ static __be64 *gfs2_dir_get_hash_table(struct gfs2_inode *ip)*/ void gfs2_dir_hash_inval (struct gfs2_inode *ip) { -__be64 *hc = ip->i_hash_cache; +__be64 *hc; + +spin_lock (&ip->i_inode.i_lock); + hc = ip->i_hash_cache; ip->i_hash_cache =NULL ; +spin_unlock (&ip->i_inode.i_lock); +kvfree (hc); }
PATCH v2 1/1 GFS2: Protect freeing directory hash table with i_lock spin_lock
Hi,
Steve.
Quoted 37 lines · Bob Peterson
Hi,
This is a re-spin of a patch I posted earlier today. Andy Price pointed out that my comment was wrong: The race concerns
gfs2_evict_inode, notgfs2_clear_inode(as the previous version's comment indicated). Functiongfs2_clear_inodeexists in RHEL6 and earlier, but not in upstream.Revised patch description:
This patch changes function
gfs2_dir_hash_invalso it uses thei_lockspin_lockto protect the in-core hash table,i_hash_cache. This will prevent double-frees due to a race betweengfs2_evict_inodeand inode invalidation.Signed-off-by Bob Peterson <[email protected]>---
fs/gfs2/dir.c +6
-1@@ -388,8 +388,13 @@ static __be64 *gfs2_dir_get_hash_table(struct gfs2_inode *ip)*/ void gfs2_dir_hash_inval (struct gfs2_inode *ip) { -__be64 *hc = ip->i_hash_cache; +__be64 *hc; + +spin_lock (&ip->i_inode.i_lock); + hc = ip->i_hash_cache; ip->i_hash_cache =NULL ; +spin_unlock (&ip->i_inode.i_lock); +kvfree (hc); }