On 20.11.2019 18:14, Michael van Elst wrote: > n54%gmx.com@localhost (Kamil Rytarowski) writes: > >> =46rom a high level point of view, we want to reject early corrupted FS o= >> n >> a mount. Today we panic the kernel needlessly. > > > Rejecting won't help much, there are so many other parts that may be corrupt > that you cannot validate on mount. > For start we want to stop the kernel from crashing on mount. > The goal should be to gracefully handle corrupted data structures by returning > errors instead of crashing the kernel. > mbouyer@ wants to panic always, after a successful mount. I have no strong opinion except handling the corrupted data either with a panic or some error returned from the kernel.
Attachment:
signature.asc
Description: OpenPGP digital signature