2008-04-03 22:57:59

by Myklebust, Trond

[permalink] [raw]
Subject: [PATCH 1/8] NLM/lockd: Ensure we don't corrupt fl->fl_flags in nlmclnt_unlock()

Also fix up nlmclnt_lock() so that it doesn't pass modified versions of
fl->fl_flags to nlmclnt_cancel() and other helpers.

Signed-off-by: Trond Myklebust <[email protected]>
---

fs/lockd/clntproc.c | 16 ++++++++++------
1 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/fs/lockd/clntproc.c b/fs/lockd/clntproc.c
index b6b74a6..4e1c012 100644
--- a/fs/lockd/clntproc.c
+++ b/fs/lockd/clntproc.c
@@ -493,6 +493,7 @@ nlmclnt_lock(struct nlm_rqst *req, struct file_lock *fl)
}
fl->fl_flags |= FL_ACCESS;
status = do_vfs_lock(fl);
+ fl->fl_flags = fl_flags;
if (status < 0)
goto out;

@@ -530,10 +531,11 @@ again:
goto again;
}
/* Ensure the resulting lock will get added to granted list */
- fl->fl_flags = fl_flags | FL_SLEEP;
+ fl->fl_flags |= FL_SLEEP;
if (do_vfs_lock(fl) < 0)
printk(KERN_WARNING "%s: VFS is out of sync with lock manager!\n", __FUNCTION__);
up_read(&host->h_rwsem);
+ fl->fl_flags = fl_flags;
}
status = nlm_stat_to_errno(resp->status);
out_unblock:
@@ -543,7 +545,6 @@ out_unblock:
nlmclnt_cancel(host, req->a_args.block, fl);
out:
nlm_release_call(req);
- fl->fl_flags = fl_flags;
return status;
}

@@ -598,7 +599,8 @@ nlmclnt_unlock(struct nlm_rqst *req, struct file_lock *fl)
{
struct nlm_host *host = req->a_host;
struct nlm_res *resp = &req->a_res;
- int status = 0;
+ int status;
+ unsigned char fl_flags = fl->fl_flags;

/*
* Note: the server is supposed to either grant us the unlock
@@ -607,11 +609,13 @@ nlmclnt_unlock(struct nlm_rqst *req, struct file_lock *fl)
*/
fl->fl_flags |= FL_EXISTS;
down_read(&host->h_rwsem);
- if (do_vfs_lock(fl) == -ENOENT) {
- up_read(&host->h_rwsem);
+ status = do_vfs_lock(fl);
+ up_read(&host->h_rwsem);
+ fl->fl_flags = fl_flags;
+ if (status == -ENOENT) {
+ status = 0;
goto out;
}
- up_read(&host->h_rwsem);

if (req->a_flags & RPC_TASK_ASYNC)
return nlm_async_call(req, NLMPROC_UNLOCK, &nlmclnt_unlock_ops);



2008-04-04 18:56:21

by Chuck Lever

[permalink] [raw]
Subject: Re: [PATCH 1/8] NLM/lockd: Ensure we don't corrupt fl->fl_flags in nlmclnt_unlock()

On Apr 3, 2008, at 6:39 PM, Trond Myklebust wrote:
> Also fix up nlmclnt_lock() so that it doesn't pass modified
> versions of
> fl->fl_flags to nlmclnt_cancel() and other helpers.
>
> Signed-off-by: Trond Myklebust <[email protected]>
> ---
>
> fs/lockd/clntproc.c | 16 ++++++++++------
> 1 files changed, 10 insertions(+), 6 deletions(-)
>
> diff --git a/fs/lockd/clntproc.c b/fs/lockd/clntproc.c
> index b6b74a6..4e1c012 100644
> --- a/fs/lockd/clntproc.c
> +++ b/fs/lockd/clntproc.c
> @@ -493,6 +493,7 @@ nlmclnt_lock(struct nlm_rqst *req, struct
> file_lock *fl)
> }
> fl->fl_flags |= FL_ACCESS;
> status = do_vfs_lock(fl);
> + fl->fl_flags = fl_flags;
> if (status < 0)
> goto out;
>
> @@ -530,10 +531,11 @@ again:
> goto again;
> }
> /* Ensure the resulting lock will get added to granted list */
> - fl->fl_flags = fl_flags | FL_SLEEP;
> + fl->fl_flags |= FL_SLEEP;
> if (do_vfs_lock(fl) < 0)
> printk(KERN_WARNING "%s: VFS is out of sync with lock manager!
> \n", __FUNCTION__);
> up_read(&host->h_rwsem);
> + fl->fl_flags = fl_flags;
> }
> status = nlm_stat_to_errno(resp->status);
> out_unblock:
> @@ -543,7 +545,6 @@ out_unblock:
> nlmclnt_cancel(host, req->a_args.block, fl);
> out:
> nlm_release_call(req);
> - fl->fl_flags = fl_flags;
> return status;
> }
>
> @@ -598,7 +599,8 @@ nlmclnt_unlock(struct nlm_rqst *req, struct
> file_lock *fl)
> {
> struct nlm_host *host = req->a_host;
> struct nlm_res *resp = &req->a_res;
> - int status = 0;
> + int status;
> + unsigned char fl_flags = fl->fl_flags;
>
> /*
> * Note: the server is supposed to either grant us the unlock
> @@ -607,11 +609,13 @@ nlmclnt_unlock(struct nlm_rqst *req, struct
> file_lock *fl)
> */
> fl->fl_flags |= FL_EXISTS;
> down_read(&host->h_rwsem);
> - if (do_vfs_lock(fl) == -ENOENT) {
> - up_read(&host->h_rwsem);
> + status = do_vfs_lock(fl);
> + up_read(&host->h_rwsem);
> + fl->fl_flags = fl_flags;
> + if (status == -ENOENT) {
> + status = 0;
> goto out;
> }
> - up_read(&host->h_rwsem);

It looks like nfs4_proc_unlck() also leaves the FL_EXISTS bit set.
Should this patch also fix nfs4_proc_unlck() ?

> if (req->a_flags & RPC_TASK_ASYNC)
> return nlm_async_call(req, NLMPROC_UNLOCK, &nlmclnt_unlock_ops);

--
Chuck Lever
chuck[dot]lever[at]oracle[dot]com

2008-04-04 19:02:48

by Myklebust, Trond

[permalink] [raw]
Subject: Re: [PATCH 1/8] NLM/lockd: Ensure we don't corrupt fl->fl_flags in nlmclnt_unlock()


On Fri, 2008-04-04 at 10:37 -0400, Chuck Lever wrote:
> It looks like nfs4_proc_unlck() also leaves the FL_EXISTS bit set.
> Should this patch also fix nfs4_proc_unlck() ?

I checked _nfs4_proc_setlk(), but missed the fact that nfs4_proc_unlck()
messes around with the flags too. I'll fix that in a separate patch.

Thanks for the heads-up
Trond

--
Trond Myklebust
Linux NFS client maintainer

NetApp
[email protected]
http://www.netapp.com