A list of new findings when fuzzing Linux btrfs module

A list of new findings when fuzzing Linux btrfs module

[Xu, Wen]

Hi BTRFS developers,

Here are a list of new issues I found:

200403	BUG() triggered in btrfs_free_dev_extent() when un-mounting a btrfs image
https://bugzilla.kernel.org/show_bug.cgi?id=200403

200405	Potential deadlock in btrfs_tree_lock() when perform writing to btrfs filesystem
https://bugzilla.kernel.org/show_bug.cgi?id=200405

200407	Potential deadlock when mount a btrfs image
https://bugzilla.kernel.org/show_bug.cgi?id=200407

200409	BUG() triggered in read_one_chunk() when mount a btrfs filesystem
https://bugzilla.kernel.org/show_bug.cgi?id=200409

200411	BUG() triggered in walk_up_proc() when mount a btrfs image
https://bugzilla.kernel.org/show_bug.cgi?id=200411

>From my testing, these issues cannot be corrected by latest introduced checks. Thanks!

-Wen

Re: A list of new findings when fuzzing Linux btrfs module

[David Sterba]

On Wed, Jul 04, 2018 at 05:54:56PM +0000, Xu, Wen wrote:
> Hi BTRFS developers,
> 
> Here are a list of new issues I found:

Thanks for sending the list to the list, hopefully this will make the
bugs more visible as bugzilla gets low attention otherwise.

Re: A list of new findings when fuzzing Linux btrfs module

[Xu, Wen]

Hi Wenruo,

Is there any update or handling with these issues?

Thanks,
Wen

> On Jul 10, 2018, at 7:13 AM, David Sterba <dsterba@suse.cz> wrote:
> 
> On Wed, Jul 04, 2018 at 05:54:56PM +0000, Xu, Wen wrote:
>> Hi BTRFS developers,
>> 
>> Here are a list of new issues I found:
> 
> Thanks for sending the list to the list, hopefully this will make the
> bugs more visible as bugzilla gets low attention otherwise.

Re: A list of new findings when fuzzing Linux btrfs module

[Qu Wenruo]

[-- Attachment #1.1: Type: text/plain, Size: 1079 bytes --]



On 2018年07月28日 03:02, Xu, Wen wrote:
> Hi Wenruo,
> 
> Is there any update or handling with these issues?

Yes, 4 of all 5 newly reported images can be handled with new patches:

[PATCH 0/5] Enhancement for block group/chunk verification
[PATCH 0/2] btrfs: chunk and dev-extent related error handler enhancement
[PATCH] btrfs: tree-checker: Add DATA_RELOC tree to essential non-empty
tree list

However, one special case, "Potential deadlock in btrfs_tree_lock() when
perform writing to btrfs filesystem" is stepping into the deadzone of
extent tree, I tried one patch but it will screw up other code.

I'm still looking into better solution for it.

Thanks,
Qu

> 
> Thanks,
> Wen
> 
>> On Jul 10, 2018, at 7:13 AM, David Sterba <dsterba@suse.cz> wrote:
>>
>> On Wed, Jul 04, 2018 at 05:54:56PM +0000, Xu, Wen wrote:
>>> Hi BTRFS developers,
>>>
>>> Here are a list of new issues I found:
>>
>> Thanks for sending the list to the list, hopefully this will make the
>> bugs more visible as bugzilla gets low attention otherwise.
> 


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 488 bytes --]