[Devel] [PATCH VZ10 2/6] drivers/md/dm-qcow2: keep seek parse window within limit
Pavel Tikhomirov
ptikhomirov at virtuozzo.com
Fri Aug 14 12:55:26 MSK 2026
On 8/10/26 14:29, Andrey Zhadchenko wrote:
> seek_qio_next_clu() always sets the window size to the whole
> cluster, so the window may cross the scan limit. The top level qio
> then parses metadata past the virtual disk end if the disk size is
> not cluster aligned, and SEEK_HOLE may report "sector + size" past
> the limit.
> This is especially painful for lower delta seeks, since at top
> level this is luckily alleviated by blkdev_llseek_wrapper().
>
> Add seek_qio_set_sector(), which sets bi_sector and also clamps
> bi_size if needed.
>
> https://virtuozzo.atlassian.net/browse/VSTOR-139407
> Feature: dm-qcow2: block device over QCOW2 files driver
> Signed-off-by: Andrey Zhadchenko <andrey.zhadchenko at virtuozzo.com>
> ---
> drivers/md/dm-qcow2-map.c | 29 +++++++++++++++++------------
> 1 file changed, 17 insertions(+), 12 deletions(-)
>
> diff --git a/drivers/md/dm-qcow2-map.c b/drivers/md/dm-qcow2-map.c
> index 542c7949321e5..342e4af688509 100644
> --- a/drivers/md/dm-qcow2-map.c
> +++ b/drivers/md/dm-qcow2-map.c
> @@ -4352,6 +4352,16 @@ struct qio_data_llseek_hole {
>
> #define SEEK_QIO_DATA(qio) ((struct qio_data_llseek_hole *)qio->data)
>
> +static void seek_qio_set_sector(struct qio *qio, sector_t bi_sector)
> +{
> + loff_t pos = to_bytes(bi_sector);
> + loff_t end = round_up(pos + 1, qio->qcow2->clu_size);
> +
> + qio->bi_iter.bi_sector = bi_sector;
> + end = min_t(loff_t, end, SEEK_QIO_DATA(qio)->lim);
> + qio->bi_iter.bi_size = end > pos ? end - pos : 0;
> +}
> +
> static struct qio *alloc_seek_qio(struct qcow2 *qcow2, struct qio *parent, loff_t new_lim)
> {
> struct qio_data_llseek_hole *data;
> @@ -4376,12 +4386,7 @@ static struct qio *alloc_seek_qio(struct qcow2 *qcow2, struct qio *parent, loff_
>
> if (parent) {
> data->higher = parent;
> - qio->bi_iter.bi_sector = parent->bi_iter.bi_sector;
> -
> - if (to_bytes(qio->bi_iter.bi_sector) + parent->bi_iter.bi_size > new_lim)
> - qio->bi_iter.bi_size = new_lim - to_bytes(qio->bi_iter.bi_sector);
> - else
> - qio->bi_iter.bi_size = parent->bi_iter.bi_size;
> + seek_qio_set_sector(qio, parent->bi_iter.bi_sector);
Can new_lim be smaller than the end derived from qio->qcow2->clu_size?
It looks like now we ignore new_lim completely.
> }
>
> return qio;
> @@ -4422,16 +4427,18 @@ static inline sector_t get_next_clu(struct qio *qio)
>
> static inline void seek_qio_next_clu(struct qio *qio, struct qcow2_map *map)
> {
> + sector_t bi_sector;
> +
> /*
> * Whole L2 table is unmapped - skip to next l2 table,
> * but only if there is no backing image
> */
> if (map && !(map->level & L2_LEVEL) && !qio->qcow2->lower)
> - qio->bi_iter.bi_sector = get_next_l2(qio);
> + bi_sector = get_next_l2(qio);
> else
> - qio->bi_iter.bi_sector = get_next_clu(qio);
> + bi_sector = get_next_clu(qio);
>
> - qio->bi_iter.bi_size = qio->qcow2->clu_size;
> + seek_qio_set_sector(qio, bi_sector);
> }
>
> static struct qio *advance_and_spawn_lower_seek_qio(struct qio *old_qio, u32 size)
> @@ -4567,9 +4574,7 @@ loff_t qcow2_llseek_hole(struct dm_target *ti, loff_t offset, int whence)
> if (!qio)
> return -ENOMEM;
>
> - qio->bi_iter.bi_sector = to_sector(offset);
> - qio->bi_iter.bi_size = qcow2->clu_size -
> - to_bytes(qio->bi_iter.bi_sector) % qcow2->clu_size;
> + seek_qio_set_sector(qio, to_sector(offset));
>
> ret = qcow2_llseek_hole_qio(qio, whence, &result);
> /* In case of error remap ENXIO as it have special meaning for llseek */
--
Best regards, Pavel Tikhomirov
Senior Software Developer, Virtuozzo.
More information about the Devel
mailing list