Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-19059

overflow in lov_stripe_size()

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Blocker Blocker
    • Lustre 2.17.0
    • Lustre 2.16.1
    • None
    • 3
    • 9223372036854775807

      u64 lov_stripe_size(struct lov_stripe_md *lsm, int index, u64 ost_size,
                          int stripeno)
      {
              u32 ssize = lsm->lsm_entries[index]->lsme_stripe_size;
      ..
              if (stripe_size)
                      lov_size = ost_size * swidth + stripeno * ssize + stripe_size;
              else
                      lov_size = (ost_size - 1) * swidth + (stripeno + 1) * ssize;
      

       (stripeno + 1) * ssize operates on 2 32-bit integers and may overflow. For instance if stripeno == 31 and ssize == 128 * 1048576.

      The causes miscalculation of file size.

            vsaveliev Vladimir Saveliev
            vsaveliev Vladimir Saveliev
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: