> Are you sure? I thought that compression (and encryption) apply to the whole > file, including any Merkle tree blocks past i_size.
This "dic" structure is only for "de"compression, so we don't need to worry about going beyond i_size case. > Also, even if you include the i_size check, it's still wrong to check > fsverity_active() in the middle of the I/O because FS_IOC_ENABLE_VERITY can > execute concurrently, causing fsverity_active() to return false at the > beginning > of the I/O and true later in the I/O. It needs to be checked only once, at > the > beginning... Got it. Our previous implementation didn't consider this case. Need to fix this. Thanks,
