xiaomi-sm8450/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ceph: don't leak snap_rwsem in handle_cap_grant

Browse Source 
commit 58dd4385577ed7969b80cdc9e2a31575aba6c712 upstream.

When handle_cap_grant is called on an IMPORT op, then the snap_rwsem is
held and the function is expected to release it before returning. It
currently fails to do that in all cases which could lead to a deadlock.

Fixes: 6f05b30ea0 ("ceph: reset i_requested_max_size if file write is not wanted")
Link: https://tracker.ceph.com/issues/55857
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Reviewed-by: Luís Henriques <lhenriques@suse.de>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
Jeff Layton
2022-06-03 16:39:57 -04:00
committed by Greg Kroah-Hartman
parent eea0d84a4f
commit aee18421bd
1 changed files with 13 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
fs/ceph/caps.c
View File

@@ -3501,24 +3501,23 @@ static void handle_cap_grant(struct inode *inode,
fill_inline = true; fill_inline = true;
} }
if (ci->i_auth_cap == cap && if (le32_to_cpu(grant->op) == CEPH_CAP_OP_IMPORT) {
le32_to_cpu(grant->op) == CEPH_CAP_OP_IMPORT) { if (ci->i_auth_cap == cap) {
if (newcaps & ~extra_info->issued) if (newcaps & ~extra_info->issued)
wake = true; wake = true;
if (ci->i_requested_max_size > max_size || if (ci->i_requested_max_size > max_size ||
!(le32_to_cpu(grant->wanted) & CEPH_CAP_ANY_FILE_WR)) { !(le32_to_cpu(grant->wanted) & CEPH_CAP_ANY_FILE_WR)) {
/* re-request max_size if necessary */ /* re-request max_size if necessary */
ci->i_requested_max_size = 0; ci->i_requested_max_size = 0;
wake = true; wake = true;
}
ceph_kick_flushing_inode_caps(session, ci);
} }
ceph_kick_flushing_inode_caps(session, ci);
spin_unlock(&ci->i_ceph_lock);
up_read(&session->s_mdsc->snap_rwsem); up_read(&session->s_mdsc->snap_rwsem);
} else {
spin_unlock(&ci->i_ceph_lock);
} }
spin_unlock(&ci->i_ceph_lock);
if (fill_inline) if (fill_inline)
ceph_fill_inline_data(inode, NULL, extra_info->inline_data, ceph_fill_inline_data(inode, NULL, extra_info->inline_data,