diff --git a/fs/jfs/jfs_dtree.c b/fs/jfs/jfs_dtree.c index 0ab83bb7bbdf..07dd01c79ca2 100644 --- a/fs/jfs/jfs_dtree.c +++ b/fs/jfs/jfs_dtree.c @@ -170,8 +170,8 @@ static void dtGetKey(dtpage_t * p, int i, struct component_name * key, static int ciGetLeafPrefixKey(dtpage_t * lp, int li, dtpage_t * rp, int ri, struct component_name * key, int flag); -static void dtInsertEntry(dtpage_t * p, int index, struct component_name * key, - ddata_t * data, struct dt_lock **); +static int dtInsertEntry(dtpage_t * p, int index, struct component_name * key, + ddata_t * data, struct dt_lock **); static void dtMoveEntry(dtpage_t * sp, int si, dtpage_t * dp, struct dt_lock ** sdtlock, struct dt_lock ** ddtlock, @@ -891,7 +891,8 @@ int dtInsert(tid_t tid, struct inode *ip, lv->length = 1; dtlck->index++; - dtInsertEntry(p, index, name, &data, &dtlck); + if (!(rc = dtInsertEntry(p, index, name, &data, &dtlck))) + return rc; /* linelock stbl of non-root leaf page */ if (!(p->header.flag & BT_ROOT)) { @@ -3627,7 +3628,7 @@ static void dtGetKey(dtpage_t * p, int i, /* entry index */ * * return: entry slot index */ -static void dtInsertEntry(dtpage_t * p, int index, struct component_name * key, +static int dtInsertEntry(dtpage_t * p, int index, struct component_name * key, ddata_t * data, struct dt_lock ** dtlock) { struct dtslot *h, *t; @@ -3649,6 +3650,10 @@ static void dtInsertEntry(dtpage_t * p, int index, struct component_name * key, /* allocate a free slot */ hsi = fsi = p->header.freelist; + if (fsi >= p->header.maxslot) { + jfs_err("Encountered corrupted dtpage before insert"); + return -EIO; + } h = &p->slot[fsi]; p->header.freelist = h->next; --p->header.freecnt; @@ -3697,6 +3702,10 @@ static void dtInsertEntry(dtpage_t * p, int index, struct component_name * key, while (klen) { /* get free slot */ fsi = p->header.freelist; + if (fsi >= p->header.maxslot) { + jfs_err("Encountered corrupted dtpage before insert"); + return -EIO; + } t = &p->slot[fsi]; p->header.freelist = t->next; --p->header.freecnt; @@ -3774,6 +3783,8 @@ static void dtInsertEntry(dtpage_t * p, int index, struct component_name * key, /* advance next available entry index of stbl */ ++p->header.nextindex; + + return 0; }