Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
authorZhihao Cheng <chengzhihao1@huawei.com>
Wed, 1 Mar 2023 12:29:18 +0000 (20:29 +0800)
committerRichard Weinberger <richard@nod.at>
Sun, 23 Apr 2023 21:36:19 +0000 (23:36 +0200)
This reverts commit 122deabfe1428 (ubifs: dirty_cow_znode: Fix memleak
in error handling path).
After commit 122deabfe1428 applied, if insert_old_idx() failed, old
index neither exists in TNC nor in old-index tree. Which means that
old index node could be overwritten in layout_leb_in_gaps(), then
ubifs image will be corrupted in power-cut.

Fixes: 122deabfe1428 (ubifs: dirty_cow_znode: Fix memleak ... path)
Cc: stable@vger.kernel.org
Signed-off-by: Zhihao Cheng <chengzhihao1@huawei.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
fs/ubifs/tnc.c

index 2469f72..2df56bb 100644 (file)
@@ -267,18 +267,11 @@ static struct ubifs_znode *dirty_cow_znode(struct ubifs_info *c,
        if (zbr->len) {
                err = insert_old_idx(c, zbr->lnum, zbr->offs);
                if (unlikely(err))
-                       /*
-                        * Obsolete znodes will be freed by tnc_destroy_cnext()
-                        * or free_obsolete_znodes(), copied up znodes should
-                        * be added back to tnc and freed by
-                        * ubifs_destroy_tnc_subtree().
-                        */
-                       goto out;
+                       return ERR_PTR(err);
                err = add_idx_dirt(c, zbr->lnum, zbr->len);
        } else
                err = 0;
 
-out:
        zbr->znode = zn;
        zbr->lnum = 0;
        zbr->offs = 0;