| /* |
| * e2fsck.c - superblock checks |
| * |
| * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o. |
| * |
| * %Begin-Header% |
| * This file may be redistributed under the terms of the GNU Public |
| * License. |
| * %End-Header% |
| */ |
| |
| #ifdef HAVE_ERRNO_H |
| #include <errno.h> |
| #endif |
| |
| #ifndef EXT2_SKIP_UUID |
| #include "uuid/uuid.h" |
| #endif |
| #include "e2fsck.h" |
| #include "problem.h" |
| |
| #define MIN_CHECK 1 |
| #define MAX_CHECK 2 |
| |
| static void check_super_value(e2fsck_t ctx, const char *descr, |
| unsigned long value, int flags, |
| unsigned long min_val, unsigned long max_val) |
| { |
| struct problem_context pctx; |
| |
| if (((flags & MIN_CHECK) && (value < min_val)) || |
| ((flags & MAX_CHECK) && (value > max_val))) { |
| clear_problem_context(&pctx); |
| pctx.num = value; |
| pctx.str = descr; |
| fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx); |
| ctx->flags |= E2F_FLAG_ABORT; /* never get here! */ |
| } |
| } |
| |
| /* |
| * helper function to release an inode |
| */ |
| struct process_block_struct { |
| e2fsck_t ctx; |
| char *buf; |
| struct problem_context *pctx; |
| int truncating; |
| int truncate_offset; |
| e2_blkcnt_t truncate_block; |
| int truncated_blocks; |
| int abort; |
| errcode_t errcode; |
| }; |
| |
| static int release_inode_block(ext2_filsys fs, |
| blk_t *block_nr, |
| e2_blkcnt_t blockcnt, |
| blk_t ref_blk EXT2FS_ATTR((unused)), |
| int ref_offset EXT2FS_ATTR((unused)), |
| void *priv_data) |
| { |
| struct process_block_struct *pb; |
| e2fsck_t ctx; |
| struct problem_context *pctx; |
| blk_t blk = *block_nr; |
| int retval = 0; |
| |
| pb = (struct process_block_struct *) priv_data; |
| ctx = pb->ctx; |
| pctx = pb->pctx; |
| |
| pctx->blk = blk; |
| pctx->blkcount = blockcnt; |
| |
| if (HOLE_BLKADDR(blk)) |
| return 0; |
| |
| if ((blk < fs->super->s_first_data_block) || |
| (blk >= fs->super->s_blocks_count)) { |
| fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx); |
| return_abort: |
| pb->abort = 1; |
| return BLOCK_ABORT; |
| } |
| |
| if (!ext2fs_test_block_bitmap(fs->block_map, blk)) { |
| fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx); |
| goto return_abort; |
| } |
| |
| /* |
| * If we are deleting an orphan, then we leave the fields alone. |
| * If we are truncating an orphan, then update the inode fields |
| * and clean up any partial block data. |
| */ |
| if (pb->truncating) { |
| /* |
| * We only remove indirect blocks if they are |
| * completely empty. |
| */ |
| if (blockcnt < 0) { |
| int i, limit; |
| blk_t *bp; |
| |
| pb->errcode = io_channel_read_blk(fs->io, blk, 1, |
| pb->buf); |
| if (pb->errcode) |
| goto return_abort; |
| |
| limit = fs->blocksize >> 2; |
| for (i = 0, bp = (blk_t *) pb->buf; |
| i < limit; i++, bp++) |
| if (*bp) |
| return 0; |
| } |
| /* |
| * We don't remove direct blocks until we've reached |
| * the truncation block. |
| */ |
| if (blockcnt >= 0 && blockcnt < pb->truncate_block) |
| return 0; |
| /* |
| * If part of the last block needs truncating, we do |
| * it here. |
| */ |
| if ((blockcnt == pb->truncate_block) && pb->truncate_offset) { |
| pb->errcode = io_channel_read_blk(fs->io, blk, 1, |
| pb->buf); |
| if (pb->errcode) |
| goto return_abort; |
| memset(pb->buf + pb->truncate_offset, 0, |
| fs->blocksize - pb->truncate_offset); |
| pb->errcode = io_channel_write_blk(fs->io, blk, 1, |
| pb->buf); |
| if (pb->errcode) |
| goto return_abort; |
| } |
| pb->truncated_blocks++; |
| *block_nr = 0; |
| retval |= BLOCK_CHANGED; |
| } |
| |
| ext2fs_block_alloc_stats(fs, blk, -1); |
| return retval; |
| } |
| |
| /* |
| * This function releases an inode. Returns 1 if an inconsistency was |
| * found. If the inode has a link count, then it is being truncated and |
| * not deleted. |
| */ |
| static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino, |
| struct ext2_inode *inode, char *block_buf, |
| struct problem_context *pctx) |
| { |
| struct process_block_struct pb; |
| ext2_filsys fs = ctx->fs; |
| errcode_t retval; |
| __u32 count; |
| |
| if (!ext2fs_inode_has_valid_blocks(inode)) |
| return 0; |
| |
| pb.buf = block_buf + 3 * ctx->fs->blocksize; |
| pb.ctx = ctx; |
| pb.abort = 0; |
| pb.errcode = 0; |
| pb.pctx = pctx; |
| if (inode->i_links_count) { |
| pb.truncating = 1; |
| pb.truncate_block = (e2_blkcnt_t) |
| ((((long long)inode->i_size_high << 32) + |
| inode->i_size + fs->blocksize - 1) / |
| fs->blocksize); |
| pb.truncate_offset = inode->i_size % fs->blocksize; |
| } else { |
| pb.truncating = 0; |
| pb.truncate_block = 0; |
| pb.truncate_offset = 0; |
| } |
| pb.truncated_blocks = 0; |
| retval = ext2fs_block_iterate2(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE, |
| block_buf, release_inode_block, &pb); |
| if (retval) { |
| com_err("release_inode_blocks", retval, |
| _("while calling ext2fs_block_iterate for inode %d"), |
| ino); |
| return 1; |
| } |
| if (pb.abort) |
| return 1; |
| |
| /* Refresh the inode since ext2fs_block_iterate may have changed it */ |
| e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks"); |
| |
| if (pb.truncated_blocks) |
| ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks); |
| |
| if (inode->i_file_acl) { |
| retval = ext2fs_adjust_ea_refcount(fs, inode->i_file_acl, |
| block_buf, -1, &count); |
| if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) { |
| retval = 0; |
| count = 1; |
| } |
| if (retval) { |
| com_err("release_inode_blocks", retval, |
| _("while calling ext2fs_adjust_ea_refcount for inode %d"), |
| ino); |
| return 1; |
| } |
| if (count == 0) |
| ext2fs_block_alloc_stats(fs, inode->i_file_acl, -1); |
| inode->i_file_acl = 0; |
| } |
| return 0; |
| } |
| |
| /* |
| * This function releases all of the orphan inodes. It returns 1 if |
| * it hit some error, and 0 on success. |
| */ |
| static int release_orphan_inodes(e2fsck_t ctx) |
| { |
| ext2_filsys fs = ctx->fs; |
| ext2_ino_t ino, next_ino; |
| struct ext2_inode inode; |
| struct problem_context pctx; |
| char *block_buf; |
| |
| if ((ino = fs->super->s_last_orphan) == 0) |
| return 0; |
| |
| /* |
| * Win or lose, we won't be using the head of the orphan inode |
| * list again. |
| */ |
| fs->super->s_last_orphan = 0; |
| ext2fs_mark_super_dirty(fs); |
| |
| /* |
| * If the filesystem contains errors, don't run the orphan |
| * list, since the orphan list can't be trusted; and we're |
| * going to be running a full e2fsck run anyway... |
| */ |
| if (fs->super->s_state & EXT2_ERROR_FS) |
| return 0; |
| |
| if ((ino < EXT2_FIRST_INODE(fs->super)) || |
| (ino > fs->super->s_inodes_count)) { |
| clear_problem_context(&pctx); |
| pctx.ino = ino; |
| fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx); |
| return 1; |
| } |
| |
| block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4, |
| "block iterate buffer"); |
| e2fsck_read_bitmaps(ctx); |
| |
| while (ino) { |
| e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes"); |
| clear_problem_context(&pctx); |
| pctx.ino = ino; |
| pctx.inode = &inode; |
| pctx.str = inode.i_links_count ? _("Truncating") : |
| _("Clearing"); |
| |
| fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx); |
| |
| next_ino = inode.i_dtime; |
| if (next_ino && |
| ((next_ino < EXT2_FIRST_INODE(fs->super)) || |
| (next_ino > fs->super->s_inodes_count))) { |
| pctx.ino = next_ino; |
| fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx); |
| goto return_abort; |
| } |
| |
| if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx)) |
| goto return_abort; |
| |
| if (!inode.i_links_count) { |
| ext2fs_inode_alloc_stats2(fs, ino, -1, |
| LINUX_S_ISDIR(inode.i_mode)); |
| inode.i_dtime = ctx->now; |
| } else { |
| inode.i_dtime = 0; |
| } |
| e2fsck_write_inode(ctx, ino, &inode, "delete_file"); |
| ino = next_ino; |
| } |
| ext2fs_free_mem(&block_buf); |
| return 0; |
| return_abort: |
| ext2fs_free_mem(&block_buf); |
| return 1; |
| } |
| |
| /* |
| * Check the resize inode to make sure it is sane. We check both for |
| * the case where on-line resizing is not enabled (in which case the |
| * resize inode should be cleared) as well as the case where on-line |
| * resizing is enabled. |
| */ |
| void check_resize_inode(e2fsck_t ctx) |
| { |
| ext2_filsys fs = ctx->fs; |
| struct ext2_inode inode; |
| struct problem_context pctx; |
| int i, gdt_off, ind_off; |
| dgrp_t j; |
| blk_t blk, pblk, expect; |
| __u32 *dind_buf = 0, *ind_buf; |
| errcode_t retval; |
| |
| clear_problem_context(&pctx); |
| |
| /* |
| * If the resize inode feature isn't set, then |
| * s_reserved_gdt_blocks must be zero. |
| */ |
| if (!(fs->super->s_feature_compat & |
| EXT2_FEATURE_COMPAT_RESIZE_INODE)) { |
| if (fs->super->s_reserved_gdt_blocks) { |
| pctx.num = fs->super->s_reserved_gdt_blocks; |
| if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS, |
| &pctx)) { |
| fs->super->s_reserved_gdt_blocks = 0; |
| ext2fs_mark_super_dirty(fs); |
| } |
| } |
| } |
| |
| /* Read the resize inode */ |
| pctx.ino = EXT2_RESIZE_INO; |
| retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode); |
| if (retval) { |
| if (fs->super->s_feature_compat & |
| EXT2_FEATURE_COMPAT_RESIZE_INODE) |
| ctx->flags |= E2F_FLAG_RESIZE_INODE; |
| return; |
| } |
| |
| /* |
| * If the resize inode feature isn't set, check to make sure |
| * the resize inode is cleared; then we're done. |
| */ |
| if (!(fs->super->s_feature_compat & |
| EXT2_FEATURE_COMPAT_RESIZE_INODE)) { |
| for (i=0; i < EXT2_N_BLOCKS; i++) { |
| if (inode.i_block[i]) |
| break; |
| } |
| if ((i < EXT2_N_BLOCKS) && |
| fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) { |
| memset(&inode, 0, sizeof(inode)); |
| e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode, |
| "clear_resize"); |
| } |
| return; |
| } |
| |
| /* |
| * The resize inode feature is enabled; check to make sure the |
| * only block in use is the double indirect block |
| */ |
| blk = inode.i_block[EXT2_DIND_BLOCK]; |
| for (i=0; i < EXT2_N_BLOCKS; i++) { |
| if (i != EXT2_DIND_BLOCK && inode.i_block[i]) |
| break; |
| } |
| if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count || |
| !(inode.i_mode & LINUX_S_IFREG) || |
| (blk < fs->super->s_first_data_block || |
| blk >= fs->super->s_blocks_count)) { |
| resize_inode_invalid: |
| if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) { |
| memset(&inode, 0, sizeof(inode)); |
| e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode, |
| "clear_resize"); |
| ctx->flags |= E2F_FLAG_RESIZE_INODE; |
| } |
| if (!(ctx->options & E2F_OPT_READONLY)) { |
| fs->super->s_state &= ~EXT2_VALID_FS; |
| ext2fs_mark_super_dirty(fs); |
| } |
| goto cleanup; |
| } |
| dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2, |
| "resize dind buffer"); |
| ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize); |
| |
| retval = ext2fs_read_ind_block(fs, blk, dind_buf); |
| if (retval) |
| goto resize_inode_invalid; |
| |
| gdt_off = fs->desc_blocks; |
| pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks; |
| for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4; |
| i++, gdt_off++, pblk++) { |
| gdt_off %= fs->blocksize/4; |
| if (dind_buf[gdt_off] != pblk) |
| goto resize_inode_invalid; |
| retval = ext2fs_read_ind_block(fs, pblk, ind_buf); |
| if (retval) |
| goto resize_inode_invalid; |
| ind_off = 0; |
| for (j = 1; j < fs->group_desc_count; j++) { |
| if (!ext2fs_bg_has_super(fs, j)) |
| continue; |
| expect = pblk + (j * fs->super->s_blocks_per_group); |
| if (ind_buf[ind_off] != expect) |
| goto resize_inode_invalid; |
| ind_off++; |
| } |
| } |
| |
| cleanup: |
| if (dind_buf) |
| ext2fs_free_mem(&dind_buf); |
| |
| } |
| |
| /* |
| * This function checks the dirhash signed/unsigned hint if necessary. |
| */ |
| static void e2fsck_fix_dirhash_hint(e2fsck_t ctx) |
| { |
| struct ext2_super_block *sb = ctx->fs->super; |
| struct problem_context pctx; |
| char c; |
| |
| if ((ctx->options & E2F_OPT_READONLY) || |
| !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) || |
| (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH))) |
| return; |
| |
| c = (char) 255; |
| |
| clear_problem_context(&pctx); |
| if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) { |
| if (((int) c) == -1) { |
| sb->s_flags |= EXT2_FLAGS_SIGNED_HASH; |
| } else { |
| sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH; |
| } |
| ext2fs_mark_super_dirty(ctx->fs); |
| } |
| } |
| |
| |
| void check_super_block(e2fsck_t ctx) |
| { |
| ext2_filsys fs = ctx->fs; |
| blk_t first_block, last_block; |
| struct ext2_super_block *sb = fs->super; |
| struct ext2_group_desc *gd; |
| problem_t problem; |
| blk_t blocks_per_group = fs->super->s_blocks_per_group; |
| blk_t bpg_max; |
| int inodes_per_block; |
| int ipg_max; |
| int inode_size; |
| int accept_time_fudge; |
| int broken_system_clock; |
| dgrp_t i; |
| blk_t should_be; |
| struct problem_context pctx; |
| blk_t free_blocks = 0; |
| ino_t free_inodes = 0; |
| int csum_flag, clear_test_fs_flag; |
| |
| inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super); |
| ipg_max = inodes_per_block * (blocks_per_group - 4); |
| if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb)) |
| ipg_max = EXT2_MAX_INODES_PER_GROUP(sb); |
| bpg_max = 8 * EXT2_BLOCK_SIZE(sb); |
| if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb)) |
| bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb); |
| |
| ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx, |
| sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap"); |
| ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx, |
| sizeof(int) * fs->group_desc_count, "invalid_block_bitmap"); |
| ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx, |
| sizeof(int) * fs->group_desc_count, "invalid_inode_table"); |
| |
| clear_problem_context(&pctx); |
| |
| /* |
| * Verify the super block constants... |
| */ |
| check_super_value(ctx, "inodes_count", sb->s_inodes_count, |
| MIN_CHECK, 1, 0); |
| check_super_value(ctx, "blocks_count", sb->s_blocks_count, |
| MIN_CHECK, 1, 0); |
| check_super_value(ctx, "first_data_block", sb->s_first_data_block, |
| MAX_CHECK, 0, sb->s_blocks_count); |
| check_super_value(ctx, "log_block_size", sb->s_log_block_size, |
| MIN_CHECK | MAX_CHECK, 0, |
| EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE); |
| check_super_value(ctx, "log_frag_size", sb->s_log_frag_size, |
| MIN_CHECK | MAX_CHECK, 0, sb->s_log_block_size); |
| check_super_value(ctx, "frags_per_group", sb->s_frags_per_group, |
| MIN_CHECK | MAX_CHECK, sb->s_blocks_per_group, |
| bpg_max); |
| check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group, |
| MIN_CHECK | MAX_CHECK, 8, bpg_max); |
| check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group, |
| MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max); |
| check_super_value(ctx, "r_blocks_count", sb->s_r_blocks_count, |
| MAX_CHECK, 0, sb->s_blocks_count / 2); |
| check_super_value(ctx, "reserved_gdt_blocks", |
| sb->s_reserved_gdt_blocks, MAX_CHECK, 0, |
| fs->blocksize/4); |
| if (sb->s_rev_level > EXT2_GOOD_OLD_REV) |
| check_super_value(ctx, "first_ino", sb->s_first_ino, |
| MIN_CHECK | MAX_CHECK, |
| EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count); |
| inode_size = EXT2_INODE_SIZE(sb); |
| check_super_value(ctx, "inode_size", |
| inode_size, MIN_CHECK | MAX_CHECK, |
| EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize); |
| if (inode_size & (inode_size - 1)) { |
| pctx.num = inode_size; |
| pctx.str = "inode_size"; |
| fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx); |
| ctx->flags |= E2F_FLAG_ABORT; /* never get here! */ |
| return; |
| } |
| |
| if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) && |
| (ctx->num_blocks < sb->s_blocks_count)) { |
| pctx.blk = sb->s_blocks_count; |
| pctx.blk2 = ctx->num_blocks; |
| if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) { |
| ctx->flags |= E2F_FLAG_ABORT; |
| return; |
| } |
| } |
| |
| if (sb->s_log_block_size != (__u32) sb->s_log_frag_size) { |
| pctx.blk = EXT2_BLOCK_SIZE(sb); |
| pctx.blk2 = EXT2_FRAG_SIZE(sb); |
| fix_problem(ctx, PR_0_NO_FRAGMENTS, &pctx); |
| ctx->flags |= E2F_FLAG_ABORT; |
| return; |
| } |
| |
| should_be = sb->s_frags_per_group >> |
| (sb->s_log_block_size - sb->s_log_frag_size); |
| if (sb->s_blocks_per_group != should_be) { |
| pctx.blk = sb->s_blocks_per_group; |
| pctx.blk2 = should_be; |
| fix_problem(ctx, PR_0_BLOCKS_PER_GROUP, &pctx); |
| ctx->flags |= E2F_FLAG_ABORT; |
| return; |
| } |
| |
| should_be = (sb->s_log_block_size == 0) ? 1 : 0; |
| if (sb->s_first_data_block != should_be) { |
| pctx.blk = sb->s_first_data_block; |
| pctx.blk2 = should_be; |
| fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx); |
| ctx->flags |= E2F_FLAG_ABORT; |
| return; |
| } |
| |
| should_be = sb->s_inodes_per_group * fs->group_desc_count; |
| if (sb->s_inodes_count != should_be) { |
| pctx.ino = sb->s_inodes_count; |
| pctx.ino2 = should_be; |
| if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) { |
| sb->s_inodes_count = should_be; |
| ext2fs_mark_super_dirty(fs); |
| } |
| } |
| |
| /* |
| * Verify the group descriptors.... |
| */ |
| first_block = sb->s_first_data_block; |
| last_block = sb->s_blocks_count-1; |
| |
| csum_flag = EXT2_HAS_RO_COMPAT_FEATURE(fs->super, |
| EXT4_FEATURE_RO_COMPAT_GDT_CSUM); |
| for (i = 0, gd=fs->group_desc; i < fs->group_desc_count; i++, gd++) { |
| pctx.group = i; |
| |
| if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super, |
| EXT4_FEATURE_INCOMPAT_FLEX_BG)) { |
| first_block = ext2fs_group_first_block(fs, i); |
| last_block = ext2fs_group_last_block(fs, i); |
| } |
| |
| if ((gd->bg_block_bitmap < first_block) || |
| (gd->bg_block_bitmap > last_block)) { |
| pctx.blk = gd->bg_block_bitmap; |
| if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx)) |
| gd->bg_block_bitmap = 0; |
| } |
| if (gd->bg_block_bitmap == 0) { |
| ctx->invalid_block_bitmap_flag[i]++; |
| ctx->invalid_bitmaps++; |
| } |
| if ((gd->bg_inode_bitmap < first_block) || |
| (gd->bg_inode_bitmap > last_block)) { |
| pctx.blk = gd->bg_inode_bitmap; |
| if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx)) |
| gd->bg_inode_bitmap = 0; |
| } |
| if (gd->bg_inode_bitmap == 0) { |
| ctx->invalid_inode_bitmap_flag[i]++; |
| ctx->invalid_bitmaps++; |
| } |
| if ((gd->bg_inode_table < first_block) || |
| ((gd->bg_inode_table + |
| fs->inode_blocks_per_group - 1) > last_block)) { |
| pctx.blk = gd->bg_inode_table; |
| if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx)) |
| gd->bg_inode_table = 0; |
| } |
| if (gd->bg_inode_table == 0) { |
| ctx->invalid_inode_table_flag[i]++; |
| ctx->invalid_bitmaps++; |
| } |
| free_blocks += gd->bg_free_blocks_count; |
| free_inodes += gd->bg_free_inodes_count; |
| |
| if ((gd->bg_free_blocks_count > sb->s_blocks_per_group) || |
| (gd->bg_free_inodes_count > sb->s_inodes_per_group) || |
| (gd->bg_used_dirs_count > sb->s_inodes_per_group)) |
| ext2fs_unmark_valid(fs); |
| |
| should_be = 0; |
| if (!ext2fs_group_desc_csum_verify(fs, i)) { |
| if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) { |
| gd->bg_flags &= ~(EXT2_BG_BLOCK_UNINIT | |
| EXT2_BG_INODE_UNINIT); |
| gd->bg_itable_unused = 0; |
| should_be = 1; |
| } |
| ext2fs_unmark_valid(fs); |
| } |
| |
| if (!csum_flag && |
| (gd->bg_flags &(EXT2_BG_BLOCK_UNINIT|EXT2_BG_INODE_UNINIT)|| |
| gd->bg_itable_unused != 0)){ |
| if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) { |
| gd->bg_flags &= ~(EXT2_BG_BLOCK_UNINIT | |
| EXT2_BG_INODE_UNINIT); |
| gd->bg_itable_unused = 0; |
| should_be = 1; |
| } |
| ext2fs_unmark_valid(fs); |
| } |
| |
| if (i == fs->group_desc_count - 1 && |
| gd->bg_flags & EXT2_BG_BLOCK_UNINIT) { |
| if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) { |
| gd->bg_flags &= ~EXT2_BG_BLOCK_UNINIT; |
| should_be = 1; |
| } |
| ext2fs_unmark_valid(fs); |
| } |
| |
| if (gd->bg_flags & EXT2_BG_BLOCK_UNINIT && |
| !(gd->bg_flags & EXT2_BG_INODE_UNINIT)) { |
| if (fix_problem(ctx, PR_0_BB_UNINIT_IB_INIT, &pctx)) { |
| gd->bg_flags &= ~EXT2_BG_BLOCK_UNINIT; |
| should_be = 1; |
| } |
| ext2fs_unmark_valid(fs); |
| } |
| |
| if (csum_flag && |
| (gd->bg_itable_unused > gd->bg_free_inodes_count || |
| gd->bg_itable_unused > sb->s_inodes_per_group)) { |
| pctx.blk = gd->bg_itable_unused; |
| if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) { |
| gd->bg_itable_unused = 0; |
| should_be = 1; |
| } |
| ext2fs_unmark_valid(fs); |
| } |
| |
| if (should_be) |
| ext2fs_group_desc_csum_set(fs, i); |
| } |
| |
| /* |
| * Update the global counts from the block group counts. This |
| * is needed for an experimental patch which eliminates |
| * locking the entire filesystem when allocating blocks or |
| * inodes; if the filesystem is not unmounted cleanly, the |
| * global counts may not be accurate. |
| */ |
| if ((free_blocks != sb->s_free_blocks_count) || |
| (free_inodes != sb->s_free_inodes_count)) { |
| if (ctx->options & E2F_OPT_READONLY) |
| ext2fs_unmark_valid(fs); |
| else { |
| sb->s_free_blocks_count = free_blocks; |
| sb->s_free_inodes_count = free_inodes; |
| ext2fs_mark_super_dirty(fs); |
| } |
| } |
| |
| if ((sb->s_free_blocks_count > sb->s_blocks_count) || |
| (sb->s_free_inodes_count > sb->s_inodes_count)) |
| ext2fs_unmark_valid(fs); |
| |
| |
| /* |
| * If we have invalid bitmaps, set the error state of the |
| * filesystem. |
| */ |
| if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) { |
| sb->s_state &= ~EXT2_VALID_FS; |
| ext2fs_mark_super_dirty(fs); |
| } |
| |
| clear_problem_context(&pctx); |
| |
| #ifndef EXT2_SKIP_UUID |
| /* |
| * If the UUID field isn't assigned, assign it. |
| */ |
| if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) { |
| if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) { |
| uuid_generate(sb->s_uuid); |
| ext2fs_mark_super_dirty(fs); |
| fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; |
| } |
| } |
| #endif |
| |
| /* |
| * Check to see if we should disable the test_fs flag |
| */ |
| profile_get_boolean(ctx->profile, "options", |
| "clear_test_fs_flag", 0, 1, |
| &clear_test_fs_flag); |
| if (!(ctx->options & E2F_OPT_READONLY) && |
| clear_test_fs_flag && |
| (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) && |
| (fs_proc_check("ext4") || check_for_modules("ext4"))) { |
| if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) { |
| fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS; |
| ext2fs_mark_super_dirty(fs); |
| fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; |
| } |
| } |
| |
| /* |
| * For the Hurd, check to see if the filetype option is set, |
| * since it doesn't support it. |
| */ |
| if (!(ctx->options & E2F_OPT_READONLY) && |
| fs->super->s_creator_os == EXT2_OS_HURD && |
| (fs->super->s_feature_incompat & |
| EXT2_FEATURE_INCOMPAT_FILETYPE)) { |
| if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) { |
| fs->super->s_feature_incompat &= |
| ~EXT2_FEATURE_INCOMPAT_FILETYPE; |
| ext2fs_mark_super_dirty(fs); |
| fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; |
| } |
| } |
| |
| /* |
| * If we have any of the compatibility flags set, we need to have a |
| * revision 1 filesystem. Most kernels will not check the flags on |
| * a rev 0 filesystem and we may have corruption issues because of |
| * the incompatible changes to the filesystem. |
| */ |
| if (!(ctx->options & E2F_OPT_READONLY) && |
| fs->super->s_rev_level == EXT2_GOOD_OLD_REV && |
| (fs->super->s_feature_compat || |
| fs->super->s_feature_ro_compat || |
| fs->super->s_feature_incompat) && |
| fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) { |
| ext2fs_update_dynamic_rev(fs); |
| ext2fs_mark_super_dirty(fs); |
| fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; |
| } |
| |
| /* |
| * Clean up any orphan inodes, if present. |
| */ |
| if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) { |
| fs->super->s_state &= ~EXT2_VALID_FS; |
| ext2fs_mark_super_dirty(fs); |
| } |
| |
| /* |
| * Unfortunately, due to Windows' unfortunate design decision |
| * to configure the hardware clock to tick localtime, instead |
| * of the more proper and less error-prone UTC time, many |
| * users end up in the situation where the system clock is |
| * incorrectly set at the time when e2fsck is run. |
| * |
| * Historically this was usually due to some distributions |
| * having buggy init scripts and/or installers that didn't |
| * correctly detect this case and take appropriate |
| * countermeasures. However, it's still possible, despite the |
| * best efforts of init script and installer authors to not be |
| * able to detect this misconfiguration, usually due to a |
| * buggy or misconfigured virtualization manager or the |
| * installer not having access to a network time server during |
| * the installation process. So by default, we allow the |
| * superblock times to be fudged by up to 24 hours. This can |
| * be disabled by setting options.accept_time_fudge to the |
| * boolean value of false in e2fsck.conf. We also support |
| * options.buggy_init_scripts for backwards compatibility. |
| */ |
| profile_get_boolean(ctx->profile, "options", "accept_time_fudge", |
| 0, 1, &accept_time_fudge); |
| profile_get_boolean(ctx->profile, "options", "buggy_init_scripts", |
| 0, accept_time_fudge, &accept_time_fudge); |
| ctx->time_fudge = accept_time_fudge ? 86400 : 0; |
| |
| profile_get_boolean(ctx->profile, "options", "broken_system_clock", |
| 0, 0, &broken_system_clock); |
| |
| /* |
| * Check to see if the superblock last mount time or last |
| * write time is in the future. |
| */ |
| if (!broken_system_clock && |
| !(ctx->flags & E2F_FLAG_TIME_INSANE) && |
| fs->super->s_mtime > (__u32) ctx->now) { |
| pctx.num = fs->super->s_mtime; |
| problem = PR_0_FUTURE_SB_LAST_MOUNT; |
| if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge) |
| problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED; |
| if (fix_problem(ctx, problem, &pctx)) { |
| fs->super->s_mtime = ctx->now; |
| ext2fs_mark_super_dirty(fs); |
| } |
| } |
| if (!broken_system_clock && |
| !(ctx->flags & E2F_FLAG_TIME_INSANE) && |
| fs->super->s_wtime > (__u32) ctx->now) { |
| pctx.num = fs->super->s_wtime; |
| problem = PR_0_FUTURE_SB_LAST_WRITE; |
| if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge) |
| problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED; |
| if (fix_problem(ctx, problem, &pctx)) { |
| fs->super->s_wtime = ctx->now; |
| ext2fs_mark_super_dirty(fs); |
| } |
| } |
| |
| /* |
| * Move the ext3 journal file, if necessary. |
| */ |
| e2fsck_move_ext3_journal(ctx); |
| |
| /* |
| * Fix journal hint, if necessary |
| */ |
| e2fsck_fix_ext3_journal_hint(ctx); |
| |
| /* |
| * Add dirhash hint if necessary |
| */ |
| e2fsck_fix_dirhash_hint(ctx); |
| |
| return; |
| } |
| |
| /* |
| * Check to see if we should backup the master sb to the backup super |
| * blocks. Returns non-zero if the sb should be backed up. |
| */ |
| |
| /* |
| * A few flags are set on the fly by the kernel, but only in the |
| * primary superblock. This is actually a bad thing, and we should |
| * try to discourage it in the future. In particular, for the newer |
| * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and |
| * EXT3_FEATURE_INCOMPAT_EXTENTS. So some of these may go away in the |
| * future. EXT3_FEATURE_INCOMPAT_RECOVER may also get set when |
| * copying the primary superblock during online resize. |
| * |
| * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but |
| * unfortunately, we shouldn't ignore it since if it's not set in the |
| * backup, the extended attributes in the filesystem will be stripped |
| * away. |
| */ |
| #define FEATURE_RO_COMPAT_IGNORE (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \ |
| EXT4_FEATURE_RO_COMPAT_DIR_NLINK) |
| #define FEATURE_INCOMPAT_IGNORE (EXT3_FEATURE_INCOMPAT_EXTENTS| \ |
| EXT3_FEATURE_INCOMPAT_RECOVER) |
| |
| int check_backup_super_block(e2fsck_t ctx) |
| { |
| ext2_filsys fs = ctx->fs; |
| errcode_t retval; |
| dgrp_t g; |
| blk_t sb; |
| int ret = 0; |
| char buf[SUPERBLOCK_SIZE]; |
| struct ext2_super_block *backup_sb; |
| |
| /* |
| * If we are already writing out the backup blocks, then we |
| * don't need to test. Also, if the filesystem is invalid, or |
| * the check was aborted or cancelled, we also don't want to |
| * do the backup. If the filesystem was opened read-only then |
| * we can't do the backup. |
| */ |
| if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) || |
| !ext2fs_test_valid(fs) || |
| (fs->super->s_state & EXT2_ERROR_FS) || |
| (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) || |
| (ctx->options & E2F_OPT_READONLY)) |
| return 0; |
| |
| for (g = 1; g < fs->group_desc_count; g++) { |
| if (!ext2fs_bg_has_super(fs, g)) |
| continue; |
| |
| sb = fs->super->s_first_data_block + |
| (g * fs->super->s_blocks_per_group); |
| |
| retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE, |
| buf); |
| if (retval) |
| continue; |
| backup_sb = (struct ext2_super_block *) buf; |
| #ifdef WORDS_BIGENDIAN |
| ext2fs_swap_super(backup_sb); |
| #endif |
| if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) || |
| (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) || |
| ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) > |
| EXT2_MAX_BLOCK_LOG_SIZE) || |
| (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE)) |
| continue; |
| |
| #define SUPER_INCOMPAT_DIFFERENT(x) \ |
| ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) != \ |
| (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE)) |
| #define SUPER_RO_COMPAT_DIFFERENT(x) \ |
| ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) != \ |
| (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE)) |
| #define SUPER_DIFFERENT(x) \ |
| (fs->super->x != backup_sb->x) |
| |
| if (SUPER_DIFFERENT(s_feature_compat) || |
| SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) || |
| SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) || |
| SUPER_DIFFERENT(s_blocks_count) || |
| SUPER_DIFFERENT(s_inodes_count) || |
| memcmp(fs->super->s_uuid, backup_sb->s_uuid, |
| sizeof(fs->super->s_uuid))) |
| ret = 1; |
| break; |
| } |
| return ret; |
| } |