xfs/053: test for stale data exposure via falloc/writeback interaction

XFS buffered I/O writeback has a subtle race condition that leads to
stale data exposure if the filesystem happens to crash after delayed
allocation blocks are converted on disk and before data is written back
to said blocks.

Use file allocation commands to attempt to reproduce a related, but
slightly different variant of this problem. The associated falloc
commands can lead to partial writeback that converts an extent larger
than the range affected by falloc. If the filesystem crashes after the
extent conversion but before all other cached data is written to the
extent, stale data can be exposed.

Signed-off-by: Brian Foster <bfoster@redhat.com>
Reviewed-by: Dave Chinner <dchinner@redhat.com>
Signed-off-by: Dave Chinner <david@fromorbit.com>

diff --git a/tests/xfs/053 b/tests/xfs/053
new file mode 100755 (executable)
index 0000000..9749345
--- /dev/null
+++ b/tests/xfs/053
@@ -0,0 +1,101 @@
+#! /bin/bash
+# FS QA Test No. 053
+#
+# Test stale data exposure via writeback using various file allocation
+# modification commands. The presumption is that such commands result in partial
+# writeback and can convert a delayed allocation extent, that might be larger
+# than the ranged affected by fallocate, to a normal extent. If the fs happens
+# to crash sometime between when the extent modification is logged and writeback
+# occurs for dirty pages within the extent but outside of the fallocated range,
+# stale data exposure can occur.
+#
+#-----------------------------------------------------------------------
+# Copyright (c) 2014 Red Hat, Inc.  All Rights Reserved.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License as
+# published by the Free Software Foundation.
+#
+# This program is distributed in the hope that it would be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write the Free Software Foundation,
+# Inc.,  51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#-----------------------------------------------------------------------
+#
+
+seq=`basename $0`
+seqres=$RESULT_DIR/$seq
+echo "QA output created by $seq"
+
+here=`pwd`
+tmp=/tmp/$$
+status=1       # failure is the default!
+trap "_cleanup; exit \$status" 0 1 2 3 15
+
+_cleanup()
+{
+       cd /
+       rm -f $tmp.*
+}
+
+# get standard environment, filters and checks
+. ./common/rc
+. ./common/filter
+. ./common/punch
+
+# real QA test starts here
+rm -f $seqres.full
+
+_crashtest()
+{
+       cmd=$1
+       img=$SCRATCH_MNT/$seq.img
+       mnt=$SCRATCH_MNT/$seq.mnt
+       file=$mnt/file
+
+       # Create an fs on a small, initialized image. The pattern is written to
+       # the image to detect stale data exposure.
+       $XFS_IO_PROG -f -c "truncate 0" -c "pwrite 0 25M" $img \
+               >> $seqres.full 2>&1
+       _mkfs_dev $img >> $seqres.full 2>&1
+
+       mkdir -p $mnt
+       _mount $img $mnt
+
+       echo $cmd
+
+       # write, run the test command and shutdown the fs
+       $XFS_IO_PROG -f -c "pwrite -S 1 0 64k" -c "$cmd 60k 4k" $file | \
+               _filter_xfs_io
+       ./src/godown -f $mnt
+
+       $UMOUNT_PROG $mnt
+       _mount $img $mnt
+
+       # we generally expect a zero-sized file (this should be silent)
+       hexdump $file
+
+       $UMOUNT_PROG $mnt
+}
+
+# Modify as appropriate.
+_supported_fs xfs
+_supported_os Linux
+_require_scratch
+_require_xfs_io_command "falloc"
+_require_xfs_io_command "fpunch"
+_require_xfs_io_command "fzero"
+
+_scratch_mkfs >/dev/null 2>&1
+_scratch_mount
+
+_crashtest "falloc -k"
+_crashtest "fpunch"
+_crashtest "fzero -k"
+
+status=0
+exit

diff --git a/tests/xfs/053.out b/tests/xfs/053.out
new file mode 100644 (file)
index 0000000..c777fe2
--- /dev/null
+++ b/tests/xfs/053.out
@@ -0,0 +1,10 @@
+QA output created by 053
+falloc -k
+wrote 65536/65536 bytes at offset 0
+XXX Bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec)
+fpunch
+wrote 65536/65536 bytes at offset 0
+XXX Bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec)
+fzero -k
+wrote 65536/65536 bytes at offset 0
+XXX Bytes, X ops; XX:XX:XX.X (XXX YYY/sec and XXX ops/sec)

diff --git a/tests/xfs/group b/tests/xfs/group
index 09bce15aa875ba938f5cf278f4937da9d1cdb968..408e617c81dec7536ae816a45fac4d0be8233d0c 100644 (file)
--- a/tests/xfs/group
+++ b/tests/xfs/group
@@ -49,6 +49,7 @@
 050 quota auto quick
 051 auto log metadata
 052 quota db auto quick
+053 auto quick rw
 054 quota auto quick
 055 dump ioctl remote tape
 056 dump ioctl auto quick