diff options
author | Ilya Dryomov <idryomov@gmail.com> | 2018-05-03 10:10:09 -0400 |
---|---|---|
committer | Ilya Dryomov <idryomov@gmail.com> | 2018-05-10 04:15:00 -0400 |
commit | 3a15b38fd2efc1d648cb33186bf71e9138c93491 (patch) | |
tree | 0b73b8c86665270a3c56d6de453d6cab0b5ab1e1 | |
parent | 75bc37fefc4471e718ba8e651aa74673d4e0a9eb (diff) |
ceph: fix rsize/wsize capping in ceph_direct_read_write()
rsize/wsize cap should be applied before ceph_osdc_new_request() is
called. Otherwise, if the size is limited by the cap instead of the
stripe unit, ceph_osdc_new_request() would setup an extent op that is
bigger than what dio_get_pages_alloc() would pin and add to the page
vector, triggering asserts in the messenger.
Cc: stable@vger.kernel.org
Fixes: 95cca2b44e54 ("ceph: limit osd write size")
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Reviewed-by: "Yan, Zheng" <zyan@redhat.com>
-rw-r--r-- | fs/ceph/file.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/fs/ceph/file.c b/fs/ceph/file.c index f85040d73e3d..8ce7849f3fbd 100644 --- a/fs/ceph/file.c +++ b/fs/ceph/file.c | |||
@@ -918,6 +918,11 @@ ceph_direct_read_write(struct kiocb *iocb, struct iov_iter *iter, | |||
918 | size_t start = 0; | 918 | size_t start = 0; |
919 | ssize_t len; | 919 | ssize_t len; |
920 | 920 | ||
921 | if (write) | ||
922 | size = min_t(u64, size, fsc->mount_options->wsize); | ||
923 | else | ||
924 | size = min_t(u64, size, fsc->mount_options->rsize); | ||
925 | |||
921 | vino = ceph_vino(inode); | 926 | vino = ceph_vino(inode); |
922 | req = ceph_osdc_new_request(&fsc->client->osdc, &ci->i_layout, | 927 | req = ceph_osdc_new_request(&fsc->client->osdc, &ci->i_layout, |
923 | vino, pos, &size, 0, | 928 | vino, pos, &size, 0, |
@@ -933,11 +938,6 @@ ceph_direct_read_write(struct kiocb *iocb, struct iov_iter *iter, | |||
933 | break; | 938 | break; |
934 | } | 939 | } |
935 | 940 | ||
936 | if (write) | ||
937 | size = min_t(u64, size, fsc->mount_options->wsize); | ||
938 | else | ||
939 | size = min_t(u64, size, fsc->mount_options->rsize); | ||
940 | |||
941 | len = size; | 941 | len = size; |
942 | pages = dio_get_pages_alloc(iter, len, &start, &num_pages); | 942 | pages = dio_get_pages_alloc(iter, len, &start, &num_pages); |
943 | if (IS_ERR(pages)) { | 943 | if (IS_ERR(pages)) { |