[src/trunk]: src/external/cddl/osnet/dist/uts/common/fs/zfs fix the handling ...

[chs <chs%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/7ebaeeade7d2
branches:  trunk
changeset: 932631:7ebaeeade7d2
user:      chs <chs%NetBSD.org@localhost>
date:      Wed May 13 05:52:54 2020 +0000

description:
fix the handling in putpage of the page containing EOF.

diffstat:

 external/cddl/osnet/dist/uts/common/fs/zfs/zfs_vnops.c |  22 +++++++++++++++++-
 1 files changed, 21 insertions(+), 1 deletions(-)

diffs (34 lines):

diff -r 090e26d8c28a -r 7ebaeeade7d2 external/cddl/osnet/dist/uts/common/fs/zfs/zfs_vnops.c
--- a/external/cddl/osnet/dist/uts/common/fs/zfs/zfs_vnops.c    Wed May 13 05:37:16 2020 +0000
+++ b/external/cddl/osnet/dist/uts/common/fs/zfs/zfs_vnops.c    Wed May 13 05:52:54 2020 +0000
@@ -6066,9 +6066,29 @@
                goto out_unbusy;
        }
 
+       /*
+        * Calculate the length and assert that no whole pages are past EOF.
+        * This check is equivalent to "off + len <= round_page(zp->z_size)",
+        * with gyrations to avoid signed integer overflow.
+        */
+
        off = pp[0]->offset;
        len = count * PAGESIZE;
-       KASSERT(off + len <= round_page(zp->z_size));
+       KASSERT(off <= zp->z_size);
+       KASSERT(len <= round_page(zp->z_size));
+       KASSERT(off <= round_page(zp->z_size) - len);
+
+       /*
+        * If EOF is within the last page, reduce len to avoid writing past
+        * the file size in the ZFS buffer.  Assert that
+        * "off + len <= zp->z_size", again avoiding signed integer overflow.
+        */
+
+       if (len > zp->z_size - off) {
+               len = zp->z_size - off;
+       }
+       KASSERT(len <= zp->z_size);
+       KASSERT(off <= zp->z_size - len);
 
        if (zfs_owner_overquota(zfsvfs, zp, B_FALSE) ||
            zfs_owner_overquota(zfsvfs, zp, B_TRUE)) {