Re: [PATCH] xfs_repair: junk last entry in sf dir if name starts beyond dir size

[Rui Gomes <rgomes@xxxxxx>]

Hello Eric, 

I clone the xfs git "git://oss.sgi.com/xfs/cmds/xfsprogs" and I couldn't find 
the code in any of the branch's
Is the code in a public available git?

Regards 

------------------------------- 
Rui Gomes 
CTO 


RVX - Reykjavik Visual Effects 
Seljavegur 2, 
101 Reykjavik 
Iceland 


Tel: + 354 527 3330 
Mob: + 354 663 3360

----- Original Message -----
From: "Eric Sandeen" <sandeen@xxxxxxxxxxx>
To: "Rui Gomes" <rgomes@xxxxxx>, "xfs" <xfs@xxxxxxxxxxx>
Sent: Monday, 9 March, 2015 20:13:16
Subject: [PATCH] xfs_repair: junk last entry in sf dir if name starts beyond 
dir size

When process_sf_dir2() is trying to salvage entries in a corrupted
short form directory, it may attempt to shorten the last entry in
the dir if it extends beyond the directory size.

However, if the name already starts past the dir size, no amount
of name-shortening will make it fit, but the code doesn't realize
this.  The namelen variable comes out to be negative, and things
go downhill from there, resulting in a segfault when we try to
memmove a negative number of bytes.

If no amount of name-shortening can make the last dir entry fit
in the dir size, simply junk the entry.

Reported by: Rui Gomes <rgomes@xxxxxx>
Signed-off-by: Eric Sandeen <sandeen@xxxxxxxxxx>
---

This adds a bit more spaghetti to an existing pot, but I think
it clearly fixes the problem; I might try to rework these cases
to coalesce some of the code.

(I also wonder about the tradeoff between shortening entries and
increasing the dir size, but for now I'm just following the
direction the repair code already takes).

diff --git a/repair/dir2.c b/repair/dir2.c
index 6b8964d..308808d 100644
--- a/repair/dir2.c
+++ b/repair/dir2.c
@@ -911,6 +911,20 @@ _("zero length entry in shortform dir %" PRIu64 ""),
                                namelen = ino_dir_size -
                                        ((__psint_t) &sfep->name[0] -
                                         (__psint_t) sfp);
+                               /* Entry name starts past size of dir; junk it 
*/
+                               if (namelen <= 0) {
+                                       do_warn(
+_("start of last entry name overflows space left in in shortform dir %" PRIu64 
", "),
+                                               ino);
+                                       if (!no_modify)
+                                               do_warn(
+                                               _("junking entry #%d\n"), i);
+                                       else
+                                               do_warn(
+                                               _("would junk entry #%d\n"), i);
+                                       break;
+                               }
+                               /* Ok, truncate this entry to end of dir */
                                do_warn(
 _("size of last entry overflows space left in in shortform dir %" PRIu64 ", "),
                                        ino);