ext4: fix superblock checksum calculation race
authorConstantine Sapuntzakis <costa@purestorage.com>
Mon, 14 Sep 2020 16:10:14 +0000 (10:10 -0600)
committerTheodore Ts'o <tytso@mit.edu>
Sun, 18 Oct 2020 14:36:23 +0000 (10:36 -0400)
commitacaa532687cdc3a03757defafece9c27aa667546
tree061d645d569d85d456654578813b933adaac8d51
parentc9e87161cc621cbdcfc472fa0b2d81c63780c8f5
ext4: fix superblock checksum calculation race

The race condition could cause the persisted superblock checksum
to not match the contents of the superblock, causing the
superblock to be considered corrupt.

An example of the race follows.  A first thread is interrupted in the
middle of a checksum calculation. Then, another thread changes the
superblock, calculates a new checksum, and sets it. Then, the first
thread resumes and sets the checksum based on the older superblock.

To fix, serialize the superblock checksum calculation using the buffer
header lock. While a spinlock is sufficient, the buffer header is
already there and there is precedent for locking it (e.g. in
ext4_commit_super).

Tested the patch by booting up a kernel with the patch, creating
a filesystem and some files (including some orphans), and then
unmounting and remounting the file system.

Cc: stable@kernel.org
Signed-off-by: Constantine Sapuntzakis <costa@purestorage.com>
Reviewed-by: Jan Kara <jack@suse.cz>
Suggested-by: Jan Kara <jack@suse.cz>
Link: https://lore.kernel.org/r/20200914161014.22275-1-costa@purestorage.com
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
fs/ext4/super.c