Re: [PATCH v2 10/13] exfat: support multi-cluster for exfat_map_cluster
From: Chi Zhiling
Date: Tue Jan 13 2026 - 22:07:32 EST
On 1/13/26 18:26, Yuezhang.Mo@xxxxxxxx wrote:
On 1/13/26 14:37, Yuezhang.Mo@xxxxxxxx wrote:
@@ -281,7 +285,7 @@ static int exfat_get_block(struct inode *inode, sector_t iblock,
sec_offset = iblock & (sbi->sect_per_clus - 1);
phys = exfat_cluster_to_sector(sbi, cluster) + sec_offset;
- mapped_blocks = sbi->sect_per_clus - sec_offset;
+ mapped_blocks = (count << sbi->sect_per_clus_bits) - sec_offset;
This left shift will cause an overflow if the file is larger than 2TB
and the clusters are contiguous.
Thank you for pointing this out, I will change the type to blkcnt_t in
v3 to fix this bug.
I don't think it's necessary to change the type to blkcnt_t, because the type
of bh_result->b_size is size_t (aka unsigned long int).
The overflow was caused by '*count' being increased in exfat_map_cluster().
I think it should be fixed as below.
--- a/fs/exfat/inode.c
+++ b/fs/exfat/inode.c
@@ -153,7 +153,7 @@ static int exfat_map_cluster(struct inode *inode, unsigned int clu_offset,
last_clu += num_clusters - 1;
if (clu_offset < num_clusters) {
*clu += clu_offset;
- *count = num_clusters - clu_offset;
+ *count = min(num_clusters - clu_offset, *count);
} else {
*clu = EXFAT_EOF_CLUSTER;
*count = 0;
@@ -284,7 +284,7 @@ static int exfat_get_block(struct inode *inode, sector_t iblock,
sec_offset = iblock & (sbi->sect_per_clus - 1);
phys = exfat_cluster_to_sector(sbi, cluster) + sec_offset;
- mapped_blocks = (count << sbi->sect_per_clus_bits) - sec_offset;
+ mapped_blocks = ((unsigned long)count << sbi->sect_per_clus_bits) - sec_offset;
max_blocks = min(mapped_blocks, max_blocks);
map_bh(bh_result, sb, phys);
Okay, I got it, so the exfat_get_cluster should be updated as well.
diff --git a/fs/exfat/cache.c b/fs/exfat/cache.c
index 18d304d1d4cc..7c8b4182f5de 100644
--- a/fs/exfat/cache.c
+++ b/fs/exfat/cache.c
@@ -303,7 +303,7 @@ int exfat_get_cluster(struct inode *inode, unsigned int cluster,
/* Return if the cache covers the entire range. */
if (cid.fcluster + cid.nr_contig >= end) {
- *count = cid.fcluster + cid.nr_contig - cluster + 1;
+ *count = end - cluster + 1;
return 0;
}
Thanks,