Commit f5623c19 authored by Theodore Ts'o's avatar Theodore Ts'o Committed by Ben Hutchings

ext4: fix inline data error paths

commit eb5efbcb upstream.

The write_end() function must always unlock the page and drop its ref
count, even on an error.
Signed-off-by: default avatarTheodore Ts'o <tytso@mit.edu>
Signed-off-by: default avatarBen Hutchings <ben@decadent.org.uk>
parent ec6d08f3
...@@ -931,8 +931,15 @@ int ext4_da_write_inline_data_end(struct inode *inode, loff_t pos, ...@@ -931,8 +931,15 @@ int ext4_da_write_inline_data_end(struct inode *inode, loff_t pos,
struct page *page) struct page *page)
{ {
int i_size_changed = 0; int i_size_changed = 0;
int ret;
copied = ext4_write_inline_data_end(inode, pos, len, copied, page); ret = ext4_write_inline_data_end(inode, pos, len, copied, page);
if (ret < 0) {
unlock_page(page);
put_page(page);
return ret;
}
copied = ret;
/* /*
* No need to use i_size_read() here, the i_size * No need to use i_size_read() here, the i_size
......
...@@ -1118,8 +1118,11 @@ static int ext4_write_end(struct file *file, ...@@ -1118,8 +1118,11 @@ static int ext4_write_end(struct file *file,
if (ext4_has_inline_data(inode)) { if (ext4_has_inline_data(inode)) {
ret = ext4_write_inline_data_end(inode, pos, len, ret = ext4_write_inline_data_end(inode, pos, len,
copied, page); copied, page);
if (ret < 0) if (ret < 0) {
unlock_page(page);
put_page(page);
goto errout; goto errout;
}
copied = ret; copied = ret;
} else } else
copied = block_write_end(file, mapping, pos, copied = block_write_end(file, mapping, pos,
...@@ -1218,10 +1221,16 @@ static int ext4_journalled_write_end(struct file *file, ...@@ -1218,10 +1221,16 @@ static int ext4_journalled_write_end(struct file *file,
BUG_ON(!ext4_handle_valid(handle)); BUG_ON(!ext4_handle_valid(handle));
if (ext4_has_inline_data(inode)) if (ext4_has_inline_data(inode)) {
copied = ext4_write_inline_data_end(inode, pos, len, ret = ext4_write_inline_data_end(inode, pos, len,
copied, page); copied, page);
else if (unlikely(copied < len) && !PageUptodate(page)) { if (ret < 0) {
unlock_page(page);
put_page(page);
goto errout;
}
copied = ret;
} else if (unlikely(copied < len) && !PageUptodate(page)) {
copied = 0; copied = 0;
ext4_journalled_zero_new_buffers(handle, page, from, to); ext4_journalled_zero_new_buffers(handle, page, from, to);
} else { } else {
...@@ -1253,6 +1262,7 @@ static int ext4_journalled_write_end(struct file *file, ...@@ -1253,6 +1262,7 @@ static int ext4_journalled_write_end(struct file *file,
*/ */
ext4_orphan_add(handle, inode); ext4_orphan_add(handle, inode);
errout:
ret2 = ext4_journal_stop(handle); ret2 = ext4_journal_stop(handle);
if (!ret) if (!ret)
ret = ret2; ret = ret2;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment