From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 98E7F34CFDD for ; Tue, 4 Aug 2026 01:07:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785805624; cv=none; b=gXBf6hS/mZ+6HLg+PaVIPQCM3DR6PlxBh7og+vXzymdYINFhF6CnIZQul2BFSwstMM2mULnMlbF1YuQWjMvBn5c3D9XhslTTnvsUbQrdOqM9YSmoK8u63GfXKo7h7om085m2PeS4B/C48VrHCEI41uCWKIKowxuLJ1iTa+LF70k= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785805624; c=relaxed/simple; bh=kt7JFe/oGvRLybbv/VcG4YVFnkVOft+4H7jHG3l0T/Y=; h=Message-ID:Date:MIME-Version:Cc:Subject:To:References:From: In-Reply-To:Content-Type; b=njBgft+kfwqduVluao61/xflYo3/kXyXuqMCKlNpT2TPISmHT25/VuiYFlO2ztXn1ep1HLN8qyIsuJzUjrp5ulL0G9aTP6yPG5yoiTjhrrD9KySYj+brfT20r0fIFZ5ltEC1Xfw4iytx25Yi75Y+hTzYAwbynIRI51eyJC/OaPY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=Hlh/8BEi; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="Hlh/8BEi" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 5C7101F000E9; Tue, 4 Aug 2026 01:07:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1785805623; bh=iEEBXdGRwABnDoln3/Ejwf7r5wJNQUWqwaeWtBAdyQE=; h=Date:Cc:Subject:To:References:From:In-Reply-To; b=Hlh/8BEi9bThvwybowwJcPUwl7L27MJxgD2pBXfWZ0NueTDIFK+ARmwVW6132q3sU /ibSND03TrZOs5AUyjHc0/J4w0GMcB64kaS0uH0u5HpQzyCth3r4f2fF498mZjhMOF UvhJkyugsydPTc8wxSElzmilGyuA/mAR+Scaqkt7gcPd5iSzhCPQBh85xpOBfrHYD3 SqEHCwcK+tWyuVyMdnB3+dKgihoU8rD2azUDoDQYefFq893hCH1p+PxyK3RDqDcCLB AJgtbpgc61W9uQqYTH1P8bF5lxq3x6w1a3MpduBCY2QEW2oKtNKisfyYNzSBkp9D4/ IUzwEgzHPZOnA== Message-ID: Date: Tue, 4 Aug 2026 09:07:00 +0800 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Cc: chao@kernel.org, Daeho Jeong Subject: Re: [f2fs-dev] [PATCH v2] fsck.f2fs: sanitize invalid segment type during block update To: Daeho Jeong , linux-kernel@vger.kernel.org, linux-f2fs-devel@lists.sourceforge.net, kernel-team@android.com References: <20260803182120.2291138-1-daeho43@gmail.com> Content-Language: en-US From: Chao Yu In-Reply-To: <20260803182120.2291138-1-daeho43@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 8/4/26 02:21, Daeho Jeong wrote: > From: Daeho Jeong > > If an invalid segment type (type < 0 || type >= NO_CHECK_TYPE) is read > from SIT during block update, update_block() now validates the type, > reports corruption via ASSERT_MSG(), fixes se->type directly, and falls > back to a valid active curseg type based on its SSA summary block type > when fix_on is enabled. find_next_free_block() also validates want_type to > prevent out-of-bounds accesses. > > Signed-off-by: Daeho Jeong > --- > v2: used ASSERT_MSG() instead of ERR_MSG(). > used the correct type info for fixed_type. > fixed se->type on top of fixing the local type only. > --- > fsck/mount.c | 5 +++++ > fsck/segment.c | 20 ++++++++++++++++++-- > 2 files changed, 23 insertions(+), 2 deletions(-) > > diff --git a/fsck/mount.c b/fsck/mount.c > index 85ed404..916dfbf 100644 > --- a/fsck/mount.c > +++ b/fsck/mount.c > @@ -3059,6 +3059,11 @@ int find_next_free_block(struct f2fs_sb_info *sbi, u64 *to, int left, > u64 end_blkaddr = (get_sb(segment_count_main) << > get_sb(log_blocks_per_seg)) + get_sb(main_blkaddr); > > + if (want_type < 0 || want_type >= NO_CHECK_TYPE) { > + ASSERT_MSG("Invalid segment type %d for block allocation", want_type); > + return -EINVAL; > + } > + > if (c.zoned_model == F2FS_ZONED_HM && !new_sec) { > struct curseg_info *curseg = CURSEG_I(sbi, want_type); > unsigned int segs_per_zone = sbi->segs_per_sec * sbi->secs_per_zone; > diff --git a/fsck/segment.c b/fsck/segment.c > index 46dc747..43f85ec 100644 > --- a/fsck/segment.c > +++ b/fsck/segment.c > @@ -770,15 +770,32 @@ int update_block(struct f2fs_sb_info *sbi, void *buf, u32 *blkaddr, > struct seg_entry *se; > struct f2fs_summary sum; > u64 new_blkaddr, old_blkaddr = *blkaddr, offset; > - int ret, type; > + int ret, type, sum_type; > > if (c.zoned_model != F2FS_ZONED_HM) > return dev_write_block(buf, old_blkaddr, WRITE_LIFE_NONE); > > + sum_type = get_sum_entry(sbi, old_blkaddr, &sum); > + > /* update sit bitmap & valid_blocks && se->type for old block*/ > se = get_seg_entry(sbi, GET_SEGNO(sbi, old_blkaddr)); > offset = OFFSET_IN_SEG(sbi, old_blkaddr); > type = se->type; > + if (type < 0 || type >= NO_CHECK_TYPE) { > + int fixed_type = (sum_type == SEG_TYPE_NODE || > + sum_type == SEG_TYPE_CUR_NODE) ? > + CURSEG_HOT_NODE : CURSEG_HOT_DATA; > + > + ASSERT_MSG("Invalid SIT segment type %d at blkaddr 0x%"PRIx64, > + type, old_blkaddr); > + > + if (!c.fix_on) > + return -EINVAL; > + > + FIX_MSG("Correct invalid segment type %d -> %d for blkaddr 0x%"PRIx64"\n", > + type, fixed_type, old_blkaddr); > + se->type = se->orig_type = type = fixed_type; We should not change se->orig_type, because fsck uses it to record original se->type, so that in check_sit_types(), it can be compared w/ se->type to know which se->type is fixed. Thanks, > + } > se->valid_blocks--; > f2fs_clear_bit(offset, (char *)se->cur_valid_map); > if (need_fsync_data_record(sbi)) > @@ -811,7 +828,6 @@ int update_block(struct f2fs_sb_info *sbi, void *buf, u32 *blkaddr, > f2fs_set_sit_bitmap(sbi, new_blkaddr); > > /* update SSA */ > - get_sum_entry(sbi, old_blkaddr, &sum); > update_sum_entry(sbi, new_blkaddr, &sum); > > if (IS_DATASEG(type)) {