Re: [PATCH] Fix race between callers of read_cache_page_async andinvalidate_inode_pages.

From: Andrew Morton
Date: Mon Apr 27 2009 - 01:42:23 EST


On Mon, 27 Apr 2009 15:20:22 +1000 Neil Brown <neilb@xxxxxxx> wrote:

>
>
>
> Callers of read_cache_page_async typically wait for the page to become
> unlocked (wait_on_page_locked) and then test PageUptodate to see if
> the read was successful, or if there was an error.
>
> This is wrong.
>
> invalidate_inode_pages can cause an unlocked page to lose its
> PageUptodate flag at any time without implying a read error.

ow.

> As any read error will cause PageError to be set, it is much safer,
> and more idiomatic to test "PageError" than to test "!PageUptodate".
>
> ...
>
> diff --git a/fs/cramfs/inode.c b/fs/cramfs/inode.c
> index dd3634e..573d582 100644
> --- a/fs/cramfs/inode.c
> +++ b/fs/cramfs/inode.c
> @@ -180,7 +180,7 @@ static void *cramfs_read(struct super_block *sb, unsigned int offset, unsigned i
> struct page *page = pages[i];
> if (page) {
> wait_on_page_locked(page);
> - if (!PageUptodate(page)) {
> + if (PageError(page)) {
> /* asynchronous error */
> page_cache_release(page);
> pages[i] = NULL;
> diff --git a/mm/filemap.c b/mm/filemap.c
> index 379ff0b..9ff8093 100644
> --- a/mm/filemap.c
> +++ b/mm/filemap.c
> @@ -1770,7 +1770,7 @@ struct page *read_cache_page(struct address_space *mapping,
> if (IS_ERR(page))
> goto out;
> wait_on_page_locked(page);
> - if (!PageUptodate(page)) {
> + if (!PageError(page)) {
> page_cache_release(page);
> page = ERR_PTR(-EIO);
> }

hrm. And where is it written that PageError() will remain inviolable
after it has been set?

A safer and more formal (albeit somewhat slower) fix would be to lock
the page and check its state under the lock.

y:/usr/src/linux-2.6.30-rc3> grep -r ClearPageError . | wc -l
21

?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/