jbd2: abort when failed to log metadata buffers
authorHidehiro Kawai <hidehiro.kawai.ez@hitachi.com>
Sun, 12 Oct 2008 20:39:16 +0000 (16:39 -0400)
committerTheodore Ts'o <tytso@mit.edu>
Sun, 12 Oct 2008 20:39:16 +0000 (16:39 -0400)
commit77e841de8abac4755cc83ca224fdf71418d65380
tree937694b6bfb13b2ef6e154e8ab25f5f7200159fb
parentfd048088306656824958e7783ffcee27e241b361
jbd2: abort when failed to log metadata buffers

If we failed to write metadata buffers to the journal space and
succeeded to write the commit record, stale data can be written
back to the filesystem as metadata in the recovery phase.

To avoid this, when we failed to write out metadata buffers,
abort the journal before writing the commit record.

We can also avoid this kind of corruption by using the journal
checksum feature because it can detect invalid metadata blocks in the
journal and avoid them from being replayed.  So we don't need to care
about asynchronous commit record writeout with a checksum.

Signed-off-by: Hidehiro Kawai <hidehiro.kawai.ez@hitachi.com>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
fs/jbd2/commit.c