This is a note to let you know that I've just added the patch titled xfs: don't leak recovered attri intent items to the 6.6-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: xfs-don-t-leak-recovered-attri-intent-items.patch and it can be found in the queue-6.6 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From stable+bounces-32413-greg=kroah.com@xxxxxxxxxxxxxxx Wed Mar 27 01:13:10 2024 From: Catherine Hoang <catherine.hoang@xxxxxxxxxx> Date: Tue, 26 Mar 2024 17:12:13 -0700 Subject: xfs: don't leak recovered attri intent items To: stable@xxxxxxxxxxxxxxx Cc: linux-xfs@xxxxxxxxxxxxxxx Message-ID: <20240327001233.51675-5-catherine.hoang@xxxxxxxxxx> From: "Darrick J. Wong" <djwong@xxxxxxxxxx> commit 07bcbdf020c9fd3c14bec51c50225a2a02707b94 upstream. If recovery finds an xattr log intent item calling for the removal of an attribute and the file doesn't even have an attr fork, we know that the removal is trivially complete. However, we can't just exit the recovery function without doing something about the recovered log intent item -- it's still on the AIL, and not logging an attrd item means it stays there forever. This has likely not been seen in practice because few people use LARP and the runtime code won't log the attri for a no-attrfork removexattr operation. But let's fix this anyway. Also we shouldn't really be testing the attr fork presence until we've taken the ILOCK, though this doesn't matter much in recovery, which is single threaded. Fixes: fdaf1bb3cafc ("xfs: ATTR_REPLACE algorithm with LARP enabled needs rework") Signed-off-by: Darrick J. Wong <djwong@xxxxxxxxxx> Reviewed-by: Christoph Hellwig <hch@xxxxxx> Signed-off-by: Catherine Hoang <catherine.hoang@xxxxxxxxxx> Acked-by: Darrick J. Wong <djwong@xxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- fs/xfs/xfs_attr_item.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) --- a/fs/xfs/xfs_attr_item.c +++ b/fs/xfs/xfs_attr_item.c @@ -329,6 +329,13 @@ xfs_xattri_finish_update( goto out; } + /* If an attr removal is trivially complete, we're done. */ + if (attr->xattri_op_flags == XFS_ATTRI_OP_FLAGS_REMOVE && + !xfs_inode_hasattr(args->dp)) { + error = 0; + goto out; + } + error = xfs_attr_set_iter(attr); if (!error && attr->xattri_dela_state != XFS_DAS_DONE) error = -EAGAIN; @@ -608,8 +615,6 @@ xfs_attri_item_recover( attr->xattri_dela_state = xfs_attr_init_add_state(args); break; case XFS_ATTRI_OP_FLAGS_REMOVE: - if (!xfs_inode_hasattr(args->dp)) - goto out; attr->xattri_dela_state = xfs_attr_init_remove_state(args); break; default: Patches currently in stable-queue which might be from kroah.com@xxxxxxxxxxxxxxx are queue-6.6/xfs-fix-32-bit-truncation-in-xfs_compute_rextslog.patch queue-6.6/xfs-transfer-recovered-intent-item-ownership-in-iop_recover.patch queue-6.6/xfs-initialise-di_crc-in-xfs_log_dinode.patch queue-6.6/xfs-add-missing-nrext64-inode-flag-check-to-scrub.patch queue-6.6/xfs-consider-minlen-sized-extents-in-xfs_rtallocate_extent_block.patch queue-6.6/xfs-don-t-leak-recovered-attri-intent-items.patch queue-6.6/xfs-remove-unused-fields-from-struct-xbtree_ifakeroot.patch queue-6.6/xfs-ensure-logflagsp-is-initialized-in-xfs_bmap_del_extent_real.patch queue-6.6/xfs-convert-rt-bitmap-extent-lengths-to-xfs_rtbxlen_t.patch queue-6.6/xfs-fix-perag-leak-when-growfs-fails.patch queue-6.6/xfs-pass-the-xfs_defer_pending-object-to-iop_recover.patch queue-6.6/xfs-update-dir3-leaf-block-metadata-after-swap.patch queue-6.6/xfs-make-rextslog-computation-consistent-with-mkfs.patch queue-6.6/xfs-move-the-xfs_rtbitmap.c-declarations-to-xfs_rtbitmap.h.patch queue-6.6/xfs-recompute-growfsrtfree-transaction-reservation-while-growing-rt-volume.patch queue-6.6/xfs-force-all-buffers-to-be-written-during-btree-bulk-load.patch queue-6.6/xfs-make-xchk_iget-safer-in-the-presence-of-corrupt-inode-btrees.patch queue-6.6/xfs-reset-xfs_attr_incomplete-filter-on-node-removal.patch queue-6.6/xfs-fix-an-off-by-one-error-in-xreap_agextent_binval.patch queue-6.6/xfs-short-circuit-xfs_growfs_data_private-if-delta-is-zero.patch queue-6.6/xfs-add-lock-protection-when-remove-perag-from-radix-tree.patch queue-6.6/xfs-use-xfs_defer_pending-objects-to-recover-intent-items.patch queue-6.6/xfs-don-t-allow-overly-small-or-large-realtime-volumes.patch queue-6.6/xfs-remove-conditional-building-of-rt-geometry-validator-functions.patch