nilfs2-kmod8 1.26

• Backport fixes for one missed check for block mapping anomalies and one improper return of an error code during a preparation step for log writing, thereby improving checking for filesystem corruption on writeback:
  • Add pointer check for nilfs_direct_propagate()
  • Do not propagate ENOENT error from nilfs_btree_propagate()

nilfs2-kmod8 1.25

• Backport fixes for the buffer head state inconsistency issues reported by syzbot that occur when the filesystem is corrupted and falls back to read-only, and the associated buffer head use-after-free issue:
  • do not force clear folio if buffer is referenced
  • protect access to buffers with no active references
• Backport fixes for BUG_ON check failures reported by syzbot around rename operations, and a behavioral issue where the mtime of a child directory changes when it is renamed instead of moved:
  • move page release outside of nilfs_delete_entry and nilfs_set_link
  • eliminate staggered calls to kunmap in nilfs_rename
  • handle errors that nilfs_prepare_chunk() may return
  • do not update mtime of renamed directory that is not moved
• Backport a fix for integer overflows in the fiemap ioctl that don't happen with normal FS formats, but can happen in special circumstances where the segment size is tuned to be extra large:
  • fix possible int overflows in nilfs_fiemap()

nilfs2-kmod8 1.24

• Backport fixes for potential issues such as out-of-page memory access and link counter underflow that can occur on corrupted file systems:
  • prevent use of deleted inode
  • fix potential out-of-bounds memory access in nilfs_find_entry()

nilfs2-kmod8 1.23

• Backport fixes for null pointer dereference bugs that occur when using nilfs2 and two block-related tracepoints:
  • fix null-ptr-deref in block_touch_buffer tracepoint
  • fix null-ptr-deref in block_dirty_buffer tracepoint

nilfs2-kmod8 1.22

• Backport fixes for two kernel bug that could occur when file system corruption was detected and the mount mode was degraded to read-only:
  • fix kernel bug due to missing clearing of buffer delay flag
  • fix kernel bug due to missing clearing of checked flag
• Backport a fix for a potential deadlock issue:
  • fix potential deadlock with newly created symlinks

nilfs2-kmod8 1.21

• Backport an upstream fix for a problem where a directory search could loop for a long time on a broken filesystem, which could result in a large amount of error logs being output in bursts:
  • propagate directory read errors from nilfs_find_entry()

nilfs2-kmod8 1.20

• Backport upstream fixes that prevent internal code -ENOENT from propagating to system calls:
  • treat missing sufile header block as metadata corruption
  • treat missing cpfile header block as metadata corruption
  • do not propagate ENOENT error from sufile during recovery
  • do not propagate ENOENT error from sufile during GC
  • do not propagate ENOENT error from nilfs_sufile_mark_dirty()
• Backport upstream fixes for three potential issues with empty b-tree nodes that can occur with corrupted file system images, including one recently discovered by syzbot:
  • fix potential null-ptr-deref in nilfs_btree_insert()
  • determine empty node blocks as corrupted
  • fix potential oob read in nilfs_btree_check_delete()
• Backport a change to suppress nuisance kernel warnings that are output after detecting file system corruption and degrading to a read-only mount:
  • do not output warnings when clearing dirty buffers
• Backport a cleanup patch to remove code that is no longer needed by an existing fix:
  • do not repair reserved inode bitmap in nilfs_new_inode()

nilfs2-kmod8 1.19

• Backport upstream bug fixes for issues such as memory access violations or invalid pointer dereferencing due to missing exclusive controls in the sysfs interface, a use-after-free bug in an error path of recovery during mount, and hangs and metadata block loss due to insufficient cleanup after log writer errors:
  • fix state management in error path of log writing function
  • fix missing cleanup on rollforward recovery error
  • protect references to superblock parameters exposed in sysfs
• Backport bug fixes for a kernel bug in b-tree node block creation that can occur when the disk address translation table is corrupted, and potential synchronization operation malfunctions due to an environment-dependent flaw in a sequence counter comparision macro:
  • handle inconsistent state in nilfs_btnode_create_block()
  • avoid undefined behavior in nilfs_cnt32_ge macro
• Backport a cleanup patch to resolve a conflict:
  • remove some unused macros to tame gcc

nilfs2-kmod8 1.18

• Backport a fix for a kernel bug that could occur when moving/renaming broken directories, and a commit that it depends on:
  • fix kernel bug on rename operation of broken directory
  • return the mapped address from nilfs_get_page()

nilfs2-kmod8 1.17

• Backport a fix for use-after-free of metadata file inodes that could cause kernel bugs when directory entries were corrupted:
  • add missing check for inode numbers on directory entries
• Backport fixes for a couple of flaws that could cause problems if the starting number of non-reserved inodes was intentionally (or corruptly) changed from its default value:
  • fix inode number range checks
  • fix incorrect inode allocation from reserved inodes