Attachment 303350 Details for Bug 428720 – clean up short packet handling for NFSv2 readdir

[patch] clean up short packet handling for NFSv2 readdir

09-bz-428720-nfs-clean-up-short-p-1.patch (text/plain), 2.79 KB, created by Jeff Layton on 2008-04-22 18:26:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jeff Layton

Created: 2008-04-22 18:26:23 UTC

Size: 2.79 KB

patch

obsolete

>BZ#428720: NFS: clean up short packet handling for NFSv2 readdir
>
>From: Jeff Layton <jlayton@redhat.com>
>
>Currently, the NFS readdir decoders have a workaround for buggy servers
>that send an empty readdir response with the EOF bit unset. If the
>server sends a malformed response in some cases, this workaround kicks
>in and just returns an empty response rather than returning a proper
>error to the caller.
>
>This patch does 3 things:
>
>1) have malformed responses with no entries return error (-EIO)
>
>2) preserve existing workaround for servers that send empty
>   responses with the EOF marker unset.
>
>3) Add some comments to clarify the logic in nfs_xdr_readdirres().
>
>Signed-off-by: Jeff Layton <jlayton@redhat.com>
>---
>
> fs/nfs/nfs2xdr.c |   37 ++++++++++++++++++++++++++++---------
> 1 files changed, 28 insertions(+), 9 deletions(-)
>
>
>diff --git a/fs/nfs/nfs2xdr.c b/fs/nfs/nfs2xdr.c
>index 2cd35f2..4147135 100644
>--- a/fs/nfs/nfs2xdr.c
>+++ b/fs/nfs/nfs2xdr.c
>@@ -423,7 +423,7 @@ nfs_xdr_readdirres(struct rpc_rqst *req, u32 *p, void *dummy)
> 	struct kvec *iov = rcvbuf->head;
> 	struct page **page;
> 	int hdrlen, recvd;
>-	int status, nr;
>+	int status, nr = 0;
> 	unsigned int len, pglen;
> 	u32 *end, *entry, *kaddr;
> 
>@@ -448,7 +448,12 @@ nfs_xdr_readdirres(struct rpc_rqst *req, u32 *p, void *dummy)
> 	kaddr = p = (u32 *)kmap_atomic(*page, KM_USER0);
> 	end = (u32 *)((char *)p + pglen);
> 	entry = p;
>-	for (nr = 0; *p++; nr++) {
>+
>+	/* Make sure the packet actually has a value_follows and EOF entry */
>+	if ((entry + 1) > end)
>+		goto short_pkt;
>+
>+	for (; *p++; nr++) {
> 		if (p + 2 > end)
> 			goto short_pkt;
> 		p++; /* fileid */
>@@ -463,18 +468,32 @@ nfs_xdr_readdirres(struct rpc_rqst *req, u32 *p, void *dummy)
> 			goto short_pkt;
> 		entry = p;
> 	}
>-	if (!nr && (entry[0] != 0 || entry[1] == 0))
>-		goto short_pkt;
>+
>+	/*
>+	 * Apparently some server sends responses that are a valid size, but
>+	 * contain no entries, and have value_follows==0 and EOF==0. For
>+	 * those, just set the EOF marker.
>+	 */
>+	if (!nr && entry[1] == 0) {
>+		dprintk("NFS: readdir reply truncated!\n");
>+		entry[1] = 1;
>+	}
>  out:
> 	kunmap_atomic(kaddr, KM_USER0);
> 	return nr;
>  short_pkt:
>+	/*
>+	 * When we get a short packet there are 2 possibilities. We can
>+	 * return an error, or fix up the response to look like a valid
>+	 * response and return what we have so far. If there are no
>+	 * entries and the packet was short, then return -EIO. If there
>+	 * are valid entries in the response, return them and pretend that
>+	 * the call was successful, but incomplete. The caller can retry the
>+	 * readdir starting at the last cookie.
>+	 */
> 	entry[0] = entry[1] = 0;
>-	/* truncate listing ? */
>-	if (!nr) {
>-		printk(KERN_NOTICE "NFS: readdir reply truncated!\n");
>-		entry[1] = 1;
>-	}
>+	if (!nr)
>+		nr = -errno_NFSERR_IO;
> 	goto out;
> err_unmap:
> 	nr = -errno_NFSERR_IO;

Actions: View | Diff

Attachments on bug 428720: 294274 | 303350 | 303352 | 303353