linux-kernel - Re: [PATCH] ext4: Return EIO on read error in ext4_find

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20170623122603.jmvyw4oqkojcapv3@thunk.org>
Date:   Fri, 23 Jun 2017 08:26:03 -0400
From:   Theodore Ts'o <tytso@....edu>
To:     Andreas Dilger <adilger@...ger.ca>
Cc:     Khazhismel Kumykov <khazhy@...gle.com>, adilger.kernel@...ger.ca,
        linux-ext4@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] ext4: Return EIO on read error in ext4_find_entry

On Fri, Jun 23, 2017 at 12:33:02AM -0600, Andreas Dilger wrote:
> On Jun 22, 2017, at 22:43, Theodore Ts'o <tytso@....edu> wrote:
> > 
> >> On Thu, Jun 22, 2017 at 04:23:07PM -0700, Khazhismel Kumykov wrote:
> >> Previously, a read error would be ignored and we would eventually return
> >> NULL from ext4_find_entry, which signals "no such file or directory". We
> >> should be returning EIO.
> >> 
> >> Signed-off-by: Khazhismel Kumykov <khazhy@...gle.com>
> > 
> > Thanks, applied.
> 
> I don't necessarily agree that this is an improvement. 
> 
> If the requested entry is not in the bad block, this will return an
> error even if the file name could be found in another block. It
> would be better to save the error until the end and only return -EIO
> if the entry cannot be found.

The problem is that if we continue, successive reads may all take
seconds or minutes to fail, thus tieing up the process for a long
time.  If this process happens to be, say, the node's Kubernetes
management server it can take down the entire node (since if there is
a watchdog daemon which assumes that if the management server is down,
it's time to kill and reset the entire node), and the file system is,
say, a network file system error which should only kill the individual
job, and not the entire node, the results could be quite unfortunate.

By returning EIO right away, we can "fast fail".

   	     	       	     	    - Ted