Re: [PATCH 2/4] ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2023/7/22 1:15, Theodore Ts'o wrote:
On Fri, Jul 21, 2023 at 05:13:13PM +0800, Baokun Li wrote:
Doing this with helpers, IMO is not useful as we also saw above.
I still think it is necessary to add a helper to make the code more concise.

Ted, do you think the fex_end() helper function is needed here?

I think we might need your advice to end this discussion. 😅
Having helper functions doesn't bother me all _that_ much --- so long
as they are named appropriately.  The readibility issues start with
the fact that the helper function uses loff_t as opposed to
ext4_lblk_t, and because someone looking at fex_end() would need
additional thinking to figure out what it did.  If renamed it to be
fex_logical_end() and made it take an ext4_lblk_t, I think it would be
better.
Yes, naming is one of the most difficult things.

The reason the helper function uses loff_t instead of ext4_lblk_t is because
when we compute the extent logical end or pa end, we may exceed the
maximum length of ext4_lblk_t and get an overflowed result, which can lead
to the four issues fixed in the patch set. Perhaps I should add some comments
to explain these.

In other words, add this helper function and limit the return value of the function
to loff_t is precisely to remind people that such overflow problems exist.
As mentioned by ritesh, ext4 has many places to directly perform type conversion in place. However, when we modify the kernel or review code, we will still ignore that the current code may have overflow problems, as in the commit fixed by this
patch.

If we have a helper function fex_end(), we can avoid potential overflow problems by using it directly when we make changes or by questioning why we didn't use a simpler helper function when reviewing the code, rather than just adding a (loff_t) when we spot the problem and saying, "Oh, the problem is perfectly solved!" 😀

The current problem can be solved in any way, the key is how to prevent similar
problems in the future?
The bigger complaint that I have, although it's not the fault of your
patch, is the use of "ext4_free_extent" all over ext4/mballoc.c when
it's much more often used for allocating blocks.  So the name of the
structure and the "fex" in "fex_end" or "fex_logical_end" is also
confusing.

Hmm... how about naming helper function extent_logial_end()?
Great! Thank you for naming the helper function.

And at some point we might want to do a global search and replace
changing ext4_free_extent to something like ext4_mballoc_extent, and
changing the structure element names.  Perhaps:

        fe_logical  --->  ex_lblk
        fe_start    --->  ex_cluster_start
        fe_group    --->  ex_group
        fe_len      --->  ex_cluster_len

This is addressing problems where "start" can mean the starting
physical block, the starting logical block, or the starting cluster
relative to the beginning of the block group.

There is also documentation which is just wrong.  For example:

/**
  * ext4_trim_all_free -- function to trim all free space in alloc. group
  * @sb:			super block for file system
  * @group:		group to be trimmed
  * @start:		first group block to examine
  * @max:		last group block to examine

start and max should be "first group cluster to examine" and "last
group cluster to examine", respectively.
Yes, it is also very important to distinguish between mballoc_extent and free_extent. I will try to rename ext4_free_extent to ext4_mballoc_extent and fix some comment
errors in another patch set that does some performance optimizations using
"free extent".

The bottom line is that there are much larger opportunities to make
the code more maintainable than worrying about two new helper
functions.  :-)

Cheers,

					- Ted
Yes, making code more maintainable is always the goal.
Thank you for your patient explanation!

Cheers!
--
With Best Regards,
Baokun Li
.



[Index of Archives]     [Reiser Filesystem Development]     [Ceph FS]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Linux FS]     [Yosemite National Park]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Device Mapper]     [Linux Media]

  Powered by Linux