Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Jul 2020 02:53:41 +0000 (UTC)
From:      Rick Macklem <rmacklem@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-projects@freebsd.org
Subject:   svn commit: r363267 - projects/nfs-over-tls/sys/fs/nfsclient
Message-ID:  <202007170253.06H2rfXI017705@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: rmacklem
Date: Fri Jul 17 02:53:41 2020
New Revision: 363267
URL: https://svnweb.freebsd.org/changeset/base/363267

Log:
  Fix the pNFS flexible file layout client for servers with small write size.
  
  The code in nfscl_dofflayout() loops when a flexible file layout server
  provides a small write data limit (no extant server is known to do this).
  If/when it looped, it erroneously reused the "drpc" argument for the
  mirror worker thread, corrupting it.
  This patch fixes the problem by only using the calling thread after the
  first loop iteration.
  
  Found during testing by simulating a server with a small write size.
  
  Since no extant pNFS server is known to provide a small write size,
  this fix it not needed in practice at this time.

Modified:
  projects/nfs-over-tls/sys/fs/nfsclient/nfs_clrpcops.c

Modified: projects/nfs-over-tls/sys/fs/nfsclient/nfs_clrpcops.c
==============================================================================
--- projects/nfs-over-tls/sys/fs/nfsclient/nfs_clrpcops.c	Thu Jul 16 23:29:26 2020	(r363266)
+++ projects/nfs-over-tls/sys/fs/nfsclient/nfs_clrpcops.c	Fri Jul 17 02:53:41 2020	(r363267)
@@ -6255,10 +6255,17 @@ nfscl_dofflayoutio(vnode_t vp, struct uio *uiop, int *
 				NFSCL_DEBUG(4, "mcopy reloff=%d xfer=%jd\n",
 				    rel_off, (uintmax_t)xfer);
 				/*
-				 * Do last write to a mirrored DS with this
+				 * Do the writes after the first loop iteration
+				 * and the write for the last mirror via this
 				 * thread.
+				 * This loop only iterates for small values
+				 * of nfsdi_wsize, which may never occur in
+				 * practice.  However, the drpc is completely
+				 * used by the first iteration and, as such,
+				 * cannot be used after that.
 				 */
-				if (mirror < flp->nfsfl_mirrorcnt - 1)
+				if (mirror < flp->nfsfl_mirrorcnt - 1 &&
+				    rel_off == 0)
 					error = nfsio_writedsmir(vp, iomode,
 					    must_commit, stateidp, *dspp, off,
 					    xfer, fhp, m, dp->nfsdi_vers,



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202007170253.06H2rfXI017705>