Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem

2014-07-25 Thread Jaegeuk Kim
Sent: Thursday, July 24, 2014 6:15 PM >>> To: Gu Zheng; Chao Yu >>> Cc: 'Jaegeuk Kim'; 'linux-kernel'; 'Alexey Khoroshilov'; >>> linux-f2fs-de...@lists.sourceforge.net >>> Subject: Re: [f2fs-dev] f2fs: Possible use-after-free whe

Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem

2014-07-24 Thread Gu Zheng
39, Gu Zheng пишет: >>> Hi, >>> On 07/23/2014 10:12 AM, Chao Yu wrote: >>> >>>> Hi Andrey Gu, >>>> >>>>> -Original Message- >>>>> From: Andrey Tsyvarev [mailto:tsyva...@ispras.ru] >>>>> Se

RE: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem

2014-07-24 Thread Chao Yu
4 6:15 PM > To: Gu Zheng; Chao Yu > Cc: 'Jaegeuk Kim'; 'linux-kernel'; 'Alexey Khoroshilov'; > linux-f2fs-de...@lists.sourceforge.net > Subject: Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem > > Hi, > > With patch skipping in

Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem

2014-07-24 Thread Andrey Tsyvarev
: Tuesday, July 22, 2014 6:04 PM To: Gu Zheng Cc: Jaegeuk Kim; linux-kernel; Alexey Khoroshilov; linux-f2fs-de...@lists.sourceforge.net Subject: Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem Hi Gu, Investigation shows, that f2fs_evict_inode, when called for 'meta_inode&#

Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem

2014-07-22 Thread Gu Zheng
gt; linux-f2fs-de...@lists.sourceforge.net >> Subject: Re: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem >> >> Hi Gu, >> >>>> Investigation shows, that f2fs_evict_inode, when called for 'meta_inode', >>>> uses >

RE: [f2fs-dev] f2fs: Possible use-after-free when umount filesystem

2014-07-22 Thread Chao Yu
Hi Andrey Gu, > -Original Message- > From: Andrey Tsyvarev [mailto:tsyva...@ispras.ru] > Sent: Tuesday, July 22, 2014 6:04 PM > To: Gu Zheng > Cc: Jaegeuk Kim; linux-kernel; Alexey Khoroshilov; > linux-f2fs-de...@lists.sourceforge.net > Subject: Re: [f2fs-dev] f2f

Re: f2fs: Possible use-after-free when umount filesystem

2014-07-22 Thread Andrey Tsyvarev
Hi Gu, Investigation shows, that f2fs_evict_inode, when called for 'meta_inode', uses invalidate_mapping_pages() for 'node_inode'. But 'node_inode' is deleted before 'meta_inode' in f2fs_put_super via iput(). It seems that in common usage scenario this use-after-free is benign, because 'node_

Re: f2fs: Possible use-after-free when umount filesystem

2014-07-21 Thread Gu Zheng
Hi Andrey, On 07/21/2014 06:56 PM, Andrey Tsyvarev wrote: > Hello, > > Using memory error detector reveals the following use-after-free error in > 3.15.0: > > AddressSanitizer: heap-use-after-free in f2fs_evict_inode > Read of size 8 by thread T22279: > [] f2fs_evict_inode+0x102/0x2e0 [f2fs]

f2fs: Possible use-after-free when umount filesystem

2014-07-21 Thread Andrey Tsyvarev
Hello, Using memory error detector reveals the following use-after-free error in 3.15.0: AddressSanitizer: heap-use-after-free in f2fs_evict_inode Read of size 8 by thread T22279: [] f2fs_evict_inode+0x102/0x2e0 [f2fs] /home/tester/linux-sources/linux-kasan/fs/f2fs/f2fs.h:584 [] evict+0x15f