From: Evgeniy Dushistov "rm" command, on file system with "ufs1" type cause system hang up. This is, in fact, not so bad as it seems to be, because of after that in "kernel control path" there are 3-4 places which may cause "oops". So the first patch fix oopses, and the second patch fix "kernel hang up". "oops" appears because of reading of group's summary info partly wrong, and access to not first group's summary info cause "oops". Signed-off-by: Evgeniy Dushistov Signed-off-by: Andrew Morton --- fs/ufs/super.c | 10 ++++++---- include/linux/ufs_fs.h | 3 +-- include/linux/ufs_fs_sb.h | 2 +- 3 files changed, 8 insertions(+), 7 deletions(-) diff -puN fs/ufs/super.c~ufs-fix-oops-with-ufs1-type fs/ufs/super.c --- devel/fs/ufs/super.c~ufs-fix-oops-with-ufs1-type 2006-01-21 23:21:53.000000000 -0800 +++ devel-akpm/fs/ufs/super.c 2006-01-21 23:21:53.000000000 -0800 @@ -388,7 +388,8 @@ static int ufs_parse_options (char * opt /* * Read on-disk structures associated with cylinder groups */ -static int ufs_read_cylinder_structures (struct super_block *sb) { +static int ufs_read_cylinder_structures (struct super_block *sb) +{ struct ufs_sb_info * sbi = UFS_SB(sb); struct ufs_sb_private_info * uspi; struct ufs_super_block *usb; @@ -415,6 +416,7 @@ static int ufs_read_cylinder_structures base = space = kmalloc(size, GFP_KERNEL); if (!base) goto failed; + sbi->s_csp = (struct ufs_csum *)space; for (i = 0; i < blks; i += uspi->s_fpb) { size = uspi->s_bsize; if (i + uspi->s_fpb > blks) @@ -430,7 +432,6 @@ static int ufs_read_cylinder_structures goto failed; ubh_ubhcpymem (space, ubh, size); - sbi->s_csp[ufs_fragstoblks(i)]=(struct ufs_csum *)space; space += size; ubh_brelse (ubh); @@ -486,7 +487,8 @@ failed: * Put on-disk structures associated with cylinder groups and * write them back to disk */ -static void ufs_put_cylinder_structures (struct super_block *sb) { +static void ufs_put_cylinder_structures (struct super_block *sb) +{ struct ufs_sb_info * sbi = UFS_SB(sb); struct ufs_sb_private_info * uspi; struct ufs_buffer_head * ubh; @@ -499,7 +501,7 @@ static void ufs_put_cylinder_structures size = uspi->s_cssize; blks = (size + uspi->s_fsize - 1) >> uspi->s_fshift; - base = space = (char*) sbi->s_csp[0]; + base = space = (char*) sbi->s_csp; for (i = 0; i < blks; i += uspi->s_fpb) { size = uspi->s_bsize; if (i + uspi->s_fpb > blks) diff -puN include/linux/ufs_fs.h~ufs-fix-oops-with-ufs1-type include/linux/ufs_fs.h --- devel/include/linux/ufs_fs.h~ufs-fix-oops-with-ufs1-type 2006-01-21 23:21:53.000000000 -0800 +++ devel-akpm/include/linux/ufs_fs.h 2006-01-21 23:21:53.000000000 -0800 @@ -502,8 +502,7 @@ struct ufs_super_block { /* * Convert cylinder group to base address of its global summary info. */ -#define fs_cs(indx) \ - s_csp[(indx) >> uspi->s_csshift][(indx) & ~uspi->s_csmask] +#define fs_cs(indx) s_csp[(indx)] /* * Cylinder group block for a file system. diff -puN include/linux/ufs_fs_sb.h~ufs-fix-oops-with-ufs1-type include/linux/ufs_fs_sb.h --- devel/include/linux/ufs_fs_sb.h~ufs-fix-oops-with-ufs1-type 2006-01-21 23:21:53.000000000 -0800 +++ devel-akpm/include/linux/ufs_fs_sb.h 2006-01-21 23:21:53.000000000 -0800 @@ -25,7 +25,7 @@ struct ufs_csum; struct ufs_sb_info { struct ufs_sb_private_info * s_uspi; - struct ufs_csum * s_csp[UFS_MAXCSBUFS]; + struct ufs_csum * s_csp; unsigned s_bytesex; unsigned s_flags; struct buffer_head ** s_ucg; _