From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from [140.186.70.92] (port=54461 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Pntr5-0001kO-8z for qemu-devel@nongnu.org; Fri, 11 Feb 2011 09:20:16 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Pntr3-0003b3-PO for qemu-devel@nongnu.org; Fri, 11 Feb 2011 09:20:14 -0500 Received: from mx1.redhat.com ([209.132.183.28]:14078) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Pntr3-0003ay-GP for qemu-devel@nongnu.org; Fri, 11 Feb 2011 09:20:13 -0500 From: Kevin Wolf Date: Fri, 11 Feb 2011 15:21:34 +0100 Message-Id: <1297434094-24965-10-git-send-email-kwolf@redhat.com> In-Reply-To: <1297434094-24965-1-git-send-email-kwolf@redhat.com> References: <1297434094-24965-1-git-send-email-kwolf@redhat.com> Subject: [Qemu-devel] [PATCH STABLE 0.14 9/9] qcow2: Fix order in L2 table COW List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: jmforbes@linuxtx.org Cc: kwolf@redhat.com, qemu-devel@nongnu.org When copying L2 tables (this happens only with internal snapshots), the order wasn't completely safe, so that after a crash you could end up with a L2 table that has too low refcount, possibly leading to corruption in the long run. This patch puts the operations in the right order: First allocate the new L2 table and replace the reference, and only then decrease the refcount of the old table. Signed-off-by: Kevin Wolf (cherry picked from commit 16fde5f2c2788232b16c06d34d0459a5c1ec1f6c) --- block/qcow2-cluster.c | 9 ++++++--- 1 files changed, 6 insertions(+), 3 deletions(-) diff --git a/block/qcow2-cluster.c b/block/qcow2-cluster.c index 437aaa8..750abe3 100644 --- a/block/qcow2-cluster.c +++ b/block/qcow2-cluster.c @@ -515,13 +515,16 @@ static int get_cluster_table(BlockDriverState *bs, uint64_t offset, return ret; } } else { - /* FIXME Order */ - if (l2_offset) - qcow2_free_clusters(bs, l2_offset, s->l2_size * sizeof(uint64_t)); + /* First allocate a new L2 table (and do COW if needed) */ ret = l2_allocate(bs, l1_index, &l2_table); if (ret < 0) { return ret; } + + /* Then decrease the refcount of the old table */ + if (l2_offset) { + qcow2_free_clusters(bs, l2_offset, s->l2_size * sizeof(uint64_t)); + } l2_offset = s->l1_table[l1_index] & ~QCOW_OFLAG_COPIED; } -- 1.7.2.3