From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752710AbcLRXkl (ORCPT ); Sun, 18 Dec 2016 18:40:41 -0500 Received: from aserp1040.oracle.com ([141.146.126.69]:17264 "EHLO aserp1040.oracle.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751347AbcLRXkj (ORCPT ); Sun, 18 Dec 2016 18:40:39 -0500 Date: Sun, 18 Dec 2016 15:40:31 -0800 From: "Darrick J. Wong" To: Al Viro Cc: Linus Torvalds , Linux Kernel Mailing List , linux-fsdevel Subject: Re: [git pull] vfs.git pile 2 Message-ID: <20161218234031.GA7311@birch.djwong.org> References: <20161216221218.GT1555@ZenIV.linux.org.uk> <20161218032605.GW1555@ZenIV.linux.org.uk> <20161218040559.GX1555@ZenIV.linux.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20161218040559.GX1555@ZenIV.linux.org.uk> User-Agent: Mutt/1.5.24 (2015-08-30) X-Source-IP: userv0021.oracle.com [156.151.31.71] Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Sun, Dec 18, 2016 at 04:06:06AM +0000, Al Viro wrote: > On Sat, Dec 17, 2016 at 07:34:45PM -0800, Linus Torvalds wrote: > > > What else am I missing there? > > > > I absolutely *abhor* this part: > > > > *len = isize - pos_in; > > > > because the whole code then depends on the overflow checking a few > > lines down, and it's not at all obvious. We have not tested that > > "pos_in" is smaller than "isize", even though the comment above the > > "isize == 0" test inplies we did some kind of "past the end check" (we > > did not). > > > > The whole "depend on overflow checking" being nasty is particularly > > true when that checking itself is damn subtle, and depends deeply on > > the type of "*len" being unsigned and larger than "loff_t". Which in > > turn is true, but it's all really nasty, and it's subtle. "loff_t" is > > "long long", while "*len" is u64, and it's almost just luck that the > > comparison does in fact end up unsigned. > > I agree, but that one is a straight move - exact same thing is there in > xfs_reflink.c counterpart in the current mainline. Ok, fair enough. I thought it was ok but then I've spent so much time staring at the reflink code it's good to have a fresh set of eyes. :) I'll add a if (pos_in > isize) return -EINVAL there to make it more explicit. > > So I think that code really needs a fair amount of loving. > > Indeed. Darrick, would you add a followup cleaning that up? It can be > done after the move to fs/read_write.c - no need to reorder/rebase that > thing. While we are at it, it might be better to turn the return value > into -E.../0/1, 0 being "no error, but nothing to do" and 1 - the normal > success case. That would get rid of using *len = 0 as signalling mechanism - > the caller would simply do > ret = vfs_..._inodes(.....); > if (ret <= 0) > goto out_unlock; > /* returned positive, we have work to do */ Sounds good. I'll post a cleanup patch once it goes through the xfstests wringer. --D