First of all, thanks for your replies! On 02.11.2016 00:51, Hugh Dickins wrote: > I don't think that there will be much appetite for changing the > kernel's VFS to prevent that. I hope that gocryptfs can provide > the serialization that it needs for itself, or otherwise handle > those zeroes without crashing.
Yes, I dropped the nonce sanity check, the MAC will catch the corruption anyway. Just FYI, xfstests generic/075 discovered this. The test itself does not check the data it gets back, which is why it usually passes. Best regards, Jakob
