[lkml]   [2008]   [Feb]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 2/3] enhanced syscall ESTALE error handling (v2)
    Miklos Szeredi wrote:
    >>> This doesn't apply to -mm, because the ro-mounts stuff touches a lot
    >>> of the same places as this patch. You probably need to rebase this on
    >>> top of those changes.
    >>>> This patch adds handling for the error, ESTALE, to the system
    >>>> calls which take pathnames as arguments. The algorithm used
    >>>> is to detect that an ESTALE error has occurred during an
    >>>> operation subsequent to the lookup process and then to unwind
    >>>> appropriately and then to perform the lookup process again.
    >>>> Eventually, either the lookup process will return an error
    >>>> or a valid dentry/inode combination and then operation can
    >>>> succeed or fail based on its own merits.
    >>> If a broken NFS server or FUSE filesysem keeps returning ESTALE, this
    >>> goes into an infinite loop. How are we planning to deal with that?
    >> Would you describe the situation that would cause the kernel to
    >> go into an infinite loop, please?
    > The patch basically does:
    > do {
    > ...
    > error = inode->i_op->foo()
    > ...
    > } while (error == ESTALE);
    > What is the guarantee, that ->foo() will not always return ESTALE?

    You skimmed over some stuff, like the pathname lookup component
    contained in the first set of dots...

    I can't guarantee that ->foo() won't always return ESTALE.

    That said, the loop is not unbreakable. At least for NFS, a signal
    to the process will interrupt the loop because the error returned
    will change from ESTALE to EINTR.

    These changes include the base assumption that the components of
    the underlying file system are basically reliable, that there is
    a way to deal with bugs and/or malicious entities in the short
    term, and that these things will be dealt with appropriately
    in the longer term.

    The short term resolution is a signal. The longer term fix is
    to hunt down the bug or the malicious entity and either make it
    go away or fence it off via some security measure or another to
    prevent it from causing another problem.

    If the underlying file system is the type that could potentially
    return ESTALE, then it needs to be aware of the system architecture
    and handle things appropriately.



     \ /
      Last update: 2008-02-01 23:33    [W:0.024 / U:29.732 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site