]> git.ipfire.org Git - thirdparty/e2fsprogs.git/blob - e2fsck/super.c
5501c9e27fe677ce0bc0600fd96ea535d72b0621
[thirdparty/e2fsprogs.git] / e2fsck / super.c
1 /*
2 * e2fsck.c - superblock checks
3 *
4 * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
5 *
6 * %Begin-Header%
7 * This file may be redistributed under the terms of the GNU Public
8 * License.
9 * %End-Header%
10 */
11
12 #include "config.h"
13 #ifdef HAVE_ERRNO_H
14 #include <errno.h>
15 #endif
16
17 #ifndef EXT2_SKIP_UUID
18 #include "uuid/uuid.h"
19 #endif
20 #include "e2fsck.h"
21 #include "problem.h"
22
23 #define MIN_CHECK 1
24 #define MAX_CHECK 2
25 #define LOG2_CHECK 4
26
27 static void check_super_value(e2fsck_t ctx, const char *descr,
28 unsigned long value, int flags,
29 unsigned long min_val, unsigned long max_val)
30 {
31 struct problem_context pctx;
32
33 if ((flags & MIN_CHECK && value < min_val) ||
34 (flags & MAX_CHECK && value > max_val) ||
35 (flags & LOG2_CHECK && (value & (value - 1)) != 0)) {
36 clear_problem_context(&pctx);
37 pctx.num = value;
38 pctx.str = descr;
39 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
40 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
41 }
42 }
43
44 static void check_super_value64(e2fsck_t ctx, const char *descr,
45 __u64 value, int flags,
46 __u64 min_val, __u64 max_val)
47 {
48 struct problem_context pctx;
49
50 if ((flags & MIN_CHECK && value < min_val) ||
51 (flags & MAX_CHECK && value > max_val) ||
52 (flags & LOG2_CHECK && (value & (value - 1)) != 0)) {
53 clear_problem_context(&pctx);
54 pctx.num = value;
55 pctx.str = descr;
56 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
57 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
58 }
59 }
60
61 /*
62 * helper function to release an inode
63 */
64 struct process_block_struct {
65 e2fsck_t ctx;
66 char *buf;
67 struct problem_context *pctx;
68 int truncating;
69 int truncate_offset;
70 e2_blkcnt_t truncate_block;
71 int truncated_blocks;
72 int abort;
73 errcode_t errcode;
74 };
75
76 static int release_inode_block(ext2_filsys fs,
77 blk64_t *block_nr,
78 e2_blkcnt_t blockcnt,
79 blk64_t ref_blk EXT2FS_ATTR((unused)),
80 int ref_offset EXT2FS_ATTR((unused)),
81 void *priv_data)
82 {
83 struct process_block_struct *pb;
84 e2fsck_t ctx;
85 struct problem_context *pctx;
86 blk64_t blk = *block_nr;
87 int retval = 0;
88
89 pb = (struct process_block_struct *) priv_data;
90 ctx = pb->ctx;
91 pctx = pb->pctx;
92
93 pctx->blk = blk;
94 pctx->blkcount = blockcnt;
95
96 if (blk == 0)
97 return 0;
98
99 if ((blk < fs->super->s_first_data_block) ||
100 (blk >= ext2fs_blocks_count(fs->super))) {
101 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
102 return_abort:
103 pb->abort = 1;
104 return BLOCK_ABORT;
105 }
106
107 if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
108 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
109 goto return_abort;
110 }
111
112 /*
113 * If we are deleting an orphan, then we leave the fields alone.
114 * If we are truncating an orphan, then update the inode fields
115 * and clean up any partial block data.
116 */
117 if (pb->truncating) {
118 /*
119 * We only remove indirect blocks if they are
120 * completely empty.
121 */
122 if (blockcnt < 0) {
123 int i, limit;
124 blk_t *bp;
125
126 pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
127 pb->buf);
128 if (pb->errcode)
129 goto return_abort;
130
131 limit = fs->blocksize >> 2;
132 for (i = 0, bp = (blk_t *) pb->buf;
133 i < limit; i++, bp++)
134 if (*bp)
135 return 0;
136 }
137 /*
138 * We don't remove direct blocks until we've reached
139 * the truncation block.
140 */
141 if (blockcnt >= 0 && blockcnt < pb->truncate_block)
142 return 0;
143 /*
144 * If part of the last block needs truncating, we do
145 * it here.
146 */
147 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
148 pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
149 pb->buf);
150 if (pb->errcode)
151 goto return_abort;
152 memset(pb->buf + pb->truncate_offset, 0,
153 fs->blocksize - pb->truncate_offset);
154 pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
155 pb->buf);
156 if (pb->errcode)
157 goto return_abort;
158 }
159 pb->truncated_blocks++;
160 *block_nr = 0;
161 retval |= BLOCK_CHANGED;
162 }
163
164 ext2fs_block_alloc_stats2(fs, blk, -1);
165 ctx->free_blocks++;
166 return retval;
167 }
168
169 /*
170 * This function releases an inode. Returns 1 if an inconsistency was
171 * found. If the inode has a link count, then it is being truncated and
172 * not deleted.
173 */
174 static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
175 struct ext2_inode *inode, char *block_buf,
176 struct problem_context *pctx)
177 {
178 struct process_block_struct pb;
179 ext2_filsys fs = ctx->fs;
180 errcode_t retval;
181 __u32 count;
182
183 if (!ext2fs_inode_has_valid_blocks2(fs, inode))
184 return 0;
185
186 pb.buf = block_buf + 3 * ctx->fs->blocksize;
187 pb.ctx = ctx;
188 pb.abort = 0;
189 pb.errcode = 0;
190 pb.pctx = pctx;
191 if (inode->i_links_count) {
192 pb.truncating = 1;
193 pb.truncate_block = (e2_blkcnt_t)
194 ((EXT2_I_SIZE(inode) + fs->blocksize - 1) /
195 fs->blocksize);
196 pb.truncate_offset = inode->i_size % fs->blocksize;
197 } else {
198 pb.truncating = 0;
199 pb.truncate_block = 0;
200 pb.truncate_offset = 0;
201 }
202 pb.truncated_blocks = 0;
203 retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
204 block_buf, release_inode_block, &pb);
205 if (retval) {
206 com_err("release_inode_blocks", retval,
207 _("while calling ext2fs_block_iterate for inode %u"),
208 ino);
209 return 1;
210 }
211 if (pb.abort)
212 return 1;
213
214 /* Refresh the inode since ext2fs_block_iterate may have changed it */
215 e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
216
217 if (pb.truncated_blocks)
218 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
219
220 if (ext2fs_file_acl_block(fs, inode)) {
221 retval = ext2fs_adjust_ea_refcount3(fs,
222 ext2fs_file_acl_block(fs, inode),
223 block_buf, -1, &count, ino);
224 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
225 retval = 0;
226 count = 1;
227 }
228 if (retval) {
229 com_err("release_inode_blocks", retval,
230 _("while calling ext2fs_adjust_ea_refcount2 for inode %u"),
231 ino);
232 return 1;
233 }
234 if (count == 0) {
235 ext2fs_block_alloc_stats2(fs,
236 ext2fs_file_acl_block(fs, inode), -1);
237 ctx->free_blocks++;
238 }
239 ext2fs_file_acl_block_set(fs, inode, 0);
240 }
241 return 0;
242 }
243
244 /*
245 * This function releases all of the orphan inodes. It returns 1 if
246 * it hit some error, and 0 on success.
247 */
248 static int release_orphan_inodes(e2fsck_t ctx)
249 {
250 ext2_filsys fs = ctx->fs;
251 ext2_ino_t ino, next_ino;
252 struct ext2_inode inode;
253 struct problem_context pctx;
254 char *block_buf;
255
256 if ((ino = fs->super->s_last_orphan) == 0)
257 return 0;
258
259 /*
260 * Win or lose, we won't be using the head of the orphan inode
261 * list again.
262 */
263 fs->super->s_last_orphan = 0;
264 ext2fs_mark_super_dirty(fs);
265
266 /*
267 * If the filesystem contains errors, don't run the orphan
268 * list, since the orphan list can't be trusted; and we're
269 * going to be running a full e2fsck run anyway...
270 */
271 if (fs->super->s_state & EXT2_ERROR_FS)
272 return 0;
273
274 if ((ino < EXT2_FIRST_INODE(fs->super)) ||
275 (ino > fs->super->s_inodes_count)) {
276 clear_problem_context(&pctx);
277 pctx.ino = ino;
278 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
279 return 1;
280 }
281
282 block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
283 "block iterate buffer");
284 e2fsck_read_bitmaps(ctx);
285
286 while (ino) {
287 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
288 clear_problem_context(&pctx);
289 pctx.ino = ino;
290 pctx.inode = &inode;
291 pctx.str = inode.i_links_count ? _("Truncating") :
292 _("Clearing");
293
294 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
295
296 next_ino = inode.i_dtime;
297 if (next_ino &&
298 ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
299 (next_ino > fs->super->s_inodes_count))) {
300 pctx.ino = next_ino;
301 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
302 goto return_abort;
303 }
304
305 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
306 goto return_abort;
307
308 if (!inode.i_links_count) {
309 ext2fs_inode_alloc_stats2(fs, ino, -1,
310 LINUX_S_ISDIR(inode.i_mode));
311 ctx->free_inodes++;
312 inode.i_dtime = ctx->now;
313 } else {
314 inode.i_dtime = 0;
315 }
316 e2fsck_write_inode(ctx, ino, &inode, "delete_file");
317 ino = next_ino;
318 }
319 ext2fs_free_mem(&block_buf);
320 return 0;
321 return_abort:
322 ext2fs_free_mem(&block_buf);
323 return 1;
324 }
325
326 /*
327 * Check the resize inode to make sure it is sane. We check both for
328 * the case where on-line resizing is not enabled (in which case the
329 * resize inode should be cleared) as well as the case where on-line
330 * resizing is enabled.
331 */
332 void check_resize_inode(e2fsck_t ctx)
333 {
334 ext2_filsys fs = ctx->fs;
335 struct ext2_inode inode;
336 struct problem_context pctx;
337 int i, gdt_off, ind_off;
338 dgrp_t j;
339 blk_t blk, pblk;
340 blk_t expect; /* for resize inode, which is 32-bit only */
341 __u32 *dind_buf = 0, *ind_buf;
342 errcode_t retval;
343
344 clear_problem_context(&pctx);
345
346 /*
347 * If the resize inode feature isn't set, then
348 * s_reserved_gdt_blocks must be zero.
349 */
350 if (!ext2fs_has_feature_resize_inode(fs->super)) {
351 if (fs->super->s_reserved_gdt_blocks) {
352 pctx.num = fs->super->s_reserved_gdt_blocks;
353 if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
354 &pctx)) {
355 fs->super->s_reserved_gdt_blocks = 0;
356 ext2fs_mark_super_dirty(fs);
357 }
358 }
359 }
360
361 /* Read the resize inode */
362 pctx.ino = EXT2_RESIZE_INO;
363 retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
364 if (retval) {
365 if (ext2fs_has_feature_resize_inode(fs->super))
366 ctx->flags |= E2F_FLAG_RESIZE_INODE;
367 return;
368 }
369
370 /*
371 * If the resize inode feature isn't set, check to make sure
372 * the resize inode is cleared; then we're done.
373 */
374 if (!ext2fs_has_feature_resize_inode(fs->super)) {
375 for (i=0; i < EXT2_N_BLOCKS; i++) {
376 if (inode.i_block[i])
377 break;
378 }
379 if ((i < EXT2_N_BLOCKS) &&
380 fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
381 memset(&inode, 0, sizeof(inode));
382 e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
383 "clear_resize");
384 }
385 return;
386 }
387
388 /*
389 * The resize inode feature is enabled; check to make sure the
390 * only block in use is the double indirect block
391 */
392 blk = inode.i_block[EXT2_DIND_BLOCK];
393 for (i=0; i < EXT2_N_BLOCKS; i++) {
394 if (i != EXT2_DIND_BLOCK && inode.i_block[i])
395 break;
396 }
397 if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
398 !(inode.i_mode & LINUX_S_IFREG) ||
399 (blk < fs->super->s_first_data_block ||
400 blk >= ext2fs_blocks_count(fs->super))) {
401 resize_inode_invalid:
402 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
403 memset(&inode, 0, sizeof(inode));
404 e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
405 "clear_resize");
406 ctx->flags |= E2F_FLAG_RESIZE_INODE;
407 }
408 if (!(ctx->options & E2F_OPT_READONLY)) {
409 fs->super->s_state &= ~EXT2_VALID_FS;
410 ext2fs_mark_super_dirty(fs);
411 }
412 goto cleanup;
413 }
414 dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
415 "resize dind buffer");
416 ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
417
418 retval = ext2fs_read_ind_block(fs, blk, dind_buf);
419 if (retval)
420 goto resize_inode_invalid;
421
422 gdt_off = fs->desc_blocks;
423 pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
424 if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0)
425 pblk++; /* Deal with 1024 blocksize bigalloc fs */
426 for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
427 i++, gdt_off++, pblk++) {
428 gdt_off %= fs->blocksize/4;
429 if (dind_buf[gdt_off] != pblk)
430 goto resize_inode_invalid;
431 retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
432 if (retval)
433 goto resize_inode_invalid;
434 ind_off = 0;
435 for (j = 1; j < fs->group_desc_count; j++) {
436 if (!ext2fs_bg_has_super(fs, j))
437 continue;
438 expect = pblk + EXT2_GROUPS_TO_BLOCKS(fs->super, j);
439 if (ind_buf[ind_off] != expect)
440 goto resize_inode_invalid;
441 ind_off++;
442 }
443 }
444
445 cleanup:
446 if (dind_buf)
447 ext2fs_free_mem(&dind_buf);
448
449 }
450
451 /*
452 * This function checks the dirhash signed/unsigned hint if necessary.
453 */
454 static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
455 {
456 struct ext2_super_block *sb = ctx->fs->super;
457 struct problem_context pctx;
458 char c;
459
460 if ((ctx->options & E2F_OPT_READONLY) ||
461 !ext2fs_has_feature_dir_index(sb) ||
462 (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
463 return;
464
465 c = (char) 255;
466
467 clear_problem_context(&pctx);
468 if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
469 if (((int) c) == -1) {
470 sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
471 } else {
472 sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
473 }
474 ext2fs_mark_super_dirty(ctx->fs);
475 }
476 }
477
478
479 void check_super_block(e2fsck_t ctx)
480 {
481 ext2_filsys fs = ctx->fs;
482 blk64_t first_block, last_block;
483 struct ext2_super_block *sb = fs->super;
484 unsigned int ipg_max;
485 problem_t problem;
486 blk64_t blocks_per_group = fs->super->s_blocks_per_group;
487 __u32 bpg_max, cpg_max;
488 __u64 blks_max;
489 int inodes_per_block;
490 int inode_size;
491 int accept_time_fudge;
492 int broken_system_clock;
493 dgrp_t i;
494 blk64_t should_be;
495 struct problem_context pctx;
496 blk64_t free_blocks = 0;
497 ino_t free_inodes = 0;
498 int csum_flag, clear_test_fs_flag;
499
500 inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
501 ipg_max = inodes_per_block * (blocks_per_group - 4);
502 if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
503 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
504 cpg_max = 8 * EXT2_BLOCK_SIZE(sb);
505 if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb))
506 cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb);
507 bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs);
508 if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
509 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
510
511 ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
512 sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
513 ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
514 sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
515 ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
516 sizeof(int) * fs->group_desc_count, "invalid_inode_table");
517
518 blks_max = (1ULL << 32) * EXT2_MAX_BLOCKS_PER_GROUP(fs->super);
519 if (ext2fs_has_feature_64bit(fs->super)) {
520 if (blks_max > ((1ULL << 48) - 1))
521 blks_max = (1ULL << 48) - 1;
522 } else {
523 if (blks_max > ((1ULL << 32) - 1))
524 blks_max = (1ULL << 32) - 1;
525 }
526
527 clear_problem_context(&pctx);
528
529 /*
530 * Verify the super block constants...
531 */
532 check_super_value(ctx, "inodes_count", sb->s_inodes_count,
533 MIN_CHECK, 1, 0);
534 check_super_value64(ctx, "blocks_count", ext2fs_blocks_count(sb),
535 MIN_CHECK | MAX_CHECK, 1, blks_max);
536 check_super_value(ctx, "first_data_block", sb->s_first_data_block,
537 MAX_CHECK, 0, ext2fs_blocks_count(sb));
538 check_super_value(ctx, "log_block_size", sb->s_log_block_size,
539 MIN_CHECK | MAX_CHECK, 0,
540 EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
541 check_super_value(ctx, "log_cluster_size",
542 sb->s_log_cluster_size,
543 MIN_CHECK | MAX_CHECK, sb->s_log_block_size,
544 (EXT2_MAX_CLUSTER_LOG_SIZE -
545 EXT2_MIN_CLUSTER_LOG_SIZE));
546 check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group,
547 MIN_CHECK | MAX_CHECK, 8, cpg_max);
548 check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
549 MIN_CHECK | MAX_CHECK, 8, bpg_max);
550 check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
551 MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
552 check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb),
553 MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2);
554 check_super_value(ctx, "reserved_gdt_blocks",
555 sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
556 fs->blocksize / sizeof(__u32));
557 check_super_value(ctx, "desc_size",
558 sb->s_desc_size, MAX_CHECK | LOG2_CHECK, 0,
559 EXT2_MAX_DESC_SIZE);
560 if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
561 check_super_value(ctx, "first_ino", sb->s_first_ino,
562 MIN_CHECK | MAX_CHECK,
563 EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
564 inode_size = EXT2_INODE_SIZE(sb);
565 check_super_value(ctx, "inode_size",
566 inode_size, MIN_CHECK | MAX_CHECK | LOG2_CHECK,
567 EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
568 if (sb->s_blocks_per_group != (sb->s_clusters_per_group *
569 EXT2FS_CLUSTER_RATIO(fs))) {
570 pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs);
571 pctx.str = "block_size";
572 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
573 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
574 return;
575 }
576
577 if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
578 (ctx->num_blocks < ext2fs_blocks_count(sb))) {
579 pctx.blk = ext2fs_blocks_count(sb);
580 pctx.blk2 = ctx->num_blocks;
581 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
582 ctx->flags |= E2F_FLAG_ABORT;
583 return;
584 }
585 }
586
587 should_be = (sb->s_log_block_size == 0 &&
588 EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0;
589 if (sb->s_first_data_block != should_be) {
590 pctx.blk = sb->s_first_data_block;
591 pctx.blk2 = should_be;
592 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
593 ctx->flags |= E2F_FLAG_ABORT;
594 return;
595 }
596
597 should_be = (blk64_t)sb->s_inodes_per_group * fs->group_desc_count;
598 if (should_be > UINT_MAX)
599 should_be = UINT_MAX;
600 if (sb->s_inodes_count != should_be) {
601 pctx.ino = sb->s_inodes_count;
602 pctx.ino2 = should_be;
603 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
604 sb->s_inodes_count = should_be;
605 ext2fs_mark_super_dirty(fs);
606 }
607 }
608 if (EXT2_INODE_SIZE(sb) > EXT2_GOOD_OLD_INODE_SIZE) {
609 unsigned min =
610 sizeof(((struct ext2_inode_large *) 0)->i_extra_isize) +
611 sizeof(((struct ext2_inode_large *) 0)->i_checksum_hi);
612 unsigned max = EXT2_INODE_SIZE(sb) - EXT2_GOOD_OLD_INODE_SIZE;
613 pctx.num = sb->s_min_extra_isize;
614 if (sb->s_min_extra_isize &&
615 (sb->s_min_extra_isize < min ||
616 sb->s_min_extra_isize > max ||
617 sb->s_min_extra_isize & 3) &&
618 fix_problem(ctx, PR_0_BAD_MIN_EXTRA_ISIZE, &pctx)) {
619 sb->s_min_extra_isize =
620 (sizeof(struct ext2_inode_large) -
621 EXT2_GOOD_OLD_INODE_SIZE);
622 ext2fs_mark_super_dirty(fs);
623 }
624 pctx.num = sb->s_want_extra_isize;
625 if (sb->s_want_extra_isize &&
626 (sb->s_want_extra_isize < min ||
627 sb->s_want_extra_isize > max ||
628 sb->s_want_extra_isize & 3) &&
629 fix_problem(ctx, PR_0_BAD_WANT_EXTRA_ISIZE, &pctx)) {
630 sb->s_want_extra_isize =
631 (sizeof(struct ext2_inode_large) -
632 EXT2_GOOD_OLD_INODE_SIZE);
633 ext2fs_mark_super_dirty(fs);
634 }
635 }
636
637 /* Are metadata_csum and uninit_bg both set? */
638 if (ext2fs_has_feature_metadata_csum(fs->super) &&
639 ext2fs_has_feature_gdt_csum(fs->super) &&
640 fix_problem(ctx, PR_0_META_AND_GDT_CSUM_SET, &pctx)) {
641 ext2fs_clear_feature_gdt_csum(fs->super);
642 ext2fs_mark_super_dirty(fs);
643 for (i = 0; i < fs->group_desc_count; i++)
644 ext2fs_group_desc_csum_set(fs, i);
645 }
646
647 /* We can't have ^metadata_csum,metadata_csum_seed */
648 if (!ext2fs_has_feature_metadata_csum(fs->super) &&
649 ext2fs_has_feature_csum_seed(fs->super) &&
650 fix_problem(ctx, PR_0_CSUM_SEED_WITHOUT_META_CSUM, &pctx)) {
651 ext2fs_clear_feature_csum_seed(fs->super);
652 fs->super->s_checksum_seed = 0;
653 ext2fs_mark_super_dirty(fs);
654 }
655
656 /* Is 64bit set and extents unset? */
657 if (ext2fs_has_feature_64bit(fs->super) &&
658 !ext2fs_has_feature_extents(fs->super) &&
659 fix_problem(ctx, PR_0_64BIT_WITHOUT_EXTENTS, &pctx)) {
660 ext2fs_set_feature_extents(fs->super);
661 ext2fs_mark_super_dirty(fs);
662 }
663
664 /* Did user ask us to convert files to extents? */
665 if (ctx->options & E2F_OPT_CONVERT_BMAP) {
666 ext2fs_set_feature_extents(fs->super);
667 ext2fs_mark_super_dirty(fs);
668 }
669
670 if (ext2fs_has_feature_meta_bg(fs->super) &&
671 (fs->super->s_first_meta_bg > fs->desc_blocks)) {
672 pctx.group = fs->desc_blocks;
673 pctx.num = fs->super->s_first_meta_bg;
674 if (fix_problem(ctx, PR_0_FIRST_META_BG_TOO_BIG, &pctx)) {
675 ext2fs_clear_feature_meta_bg(fs->super);
676 fs->super->s_first_meta_bg = 0;
677 ext2fs_mark_super_dirty(fs);
678 }
679 }
680
681 /*
682 * Verify the group descriptors....
683 */
684 first_block = sb->s_first_data_block;
685 last_block = ext2fs_blocks_count(sb)-1;
686
687 csum_flag = ext2fs_has_group_desc_csum(fs);
688 for (i = 0; i < fs->group_desc_count; i++) {
689 pctx.group = i;
690
691 if (!ext2fs_has_feature_flex_bg(fs->super)) {
692 first_block = ext2fs_group_first_block2(fs, i);
693 last_block = ext2fs_group_last_block2(fs, i);
694 }
695
696 if ((ext2fs_block_bitmap_loc(fs, i) < first_block) ||
697 (ext2fs_block_bitmap_loc(fs, i) > last_block)) {
698 pctx.blk = ext2fs_block_bitmap_loc(fs, i);
699 if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
700 ext2fs_block_bitmap_loc_set(fs, i, 0);
701 }
702 if (ext2fs_block_bitmap_loc(fs, i) == 0) {
703 ctx->invalid_block_bitmap_flag[i]++;
704 ctx->invalid_bitmaps++;
705 }
706 if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) ||
707 (ext2fs_inode_bitmap_loc(fs, i) > last_block)) {
708 pctx.blk = ext2fs_inode_bitmap_loc(fs, i);
709 if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
710 ext2fs_inode_bitmap_loc_set(fs, i, 0);
711 }
712 if (ext2fs_inode_bitmap_loc(fs, i) == 0) {
713 ctx->invalid_inode_bitmap_flag[i]++;
714 ctx->invalid_bitmaps++;
715 }
716 if ((ext2fs_inode_table_loc(fs, i) < first_block) ||
717 ((ext2fs_inode_table_loc(fs, i) +
718 fs->inode_blocks_per_group - 1) > last_block)) {
719 pctx.blk = ext2fs_inode_table_loc(fs, i);
720 if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
721 ext2fs_inode_table_loc_set(fs, i, 0);
722 }
723 if (ext2fs_inode_table_loc(fs, i) == 0) {
724 ctx->invalid_inode_table_flag[i]++;
725 ctx->invalid_bitmaps++;
726 }
727 free_blocks += ext2fs_bg_free_blocks_count(fs, i);
728 free_inodes += ext2fs_bg_free_inodes_count(fs, i);
729
730 if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) ||
731 (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) ||
732 (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group))
733 ext2fs_unmark_valid(fs);
734
735 should_be = 0;
736 if (!ext2fs_group_desc_csum_verify(fs, i)) {
737 pctx.csum1 = ext2fs_bg_checksum(fs, i);
738 pctx.csum2 = ext2fs_group_desc_csum(fs, i);
739 if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
740 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
741 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
742 ext2fs_bg_itable_unused_set(fs, i, 0);
743 should_be = 1;
744 }
745 ext2fs_unmark_valid(fs);
746 }
747
748 if (!csum_flag &&
749 (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
750 ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) ||
751 ext2fs_bg_itable_unused(fs, i) != 0)) {
752 if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
753 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
754 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
755 ext2fs_bg_itable_unused_set(fs, i, 0);
756 should_be = 1;
757 }
758 ext2fs_unmark_valid(fs);
759 }
760
761 if (i == fs->group_desc_count - 1 &&
762 ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
763 if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
764 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
765 should_be = 1;
766 }
767 ext2fs_unmark_valid(fs);
768 }
769
770 if (csum_flag &&
771 (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) ||
772 ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) {
773 pctx.blk = ext2fs_bg_itable_unused(fs, i);
774 if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
775 ext2fs_bg_itable_unused_set(fs, i, 0);
776 should_be = 1;
777 }
778 ext2fs_unmark_valid(fs);
779 }
780
781 if (should_be)
782 ext2fs_group_desc_csum_set(fs, i);
783 /* If the user aborts e2fsck by typing ^C, stop right away */
784 if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
785 return;
786 }
787
788 ctx->free_blocks = EXT2FS_C2B(fs, free_blocks);
789 ctx->free_inodes = free_inodes;
790
791 if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) ||
792 (sb->s_free_inodes_count > sb->s_inodes_count))
793 ext2fs_unmark_valid(fs);
794
795
796 /*
797 * If we have invalid bitmaps, set the error state of the
798 * filesystem.
799 */
800 if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
801 sb->s_state &= ~EXT2_VALID_FS;
802 ext2fs_mark_super_dirty(fs);
803 }
804
805 clear_problem_context(&pctx);
806
807 #ifndef EXT2_SKIP_UUID
808 /*
809 * If the UUID field isn't assigned, assign it.
810 * Skip if checksums are enabled and the filesystem is mounted,
811 * if the id changes under the kernel remounting rw may fail.
812 */
813 if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid) &&
814 !ext2fs_has_feature_metadata_csum(ctx->fs->super) &&
815 (!csum_flag || !(ctx->mount_flags & EXT2_MF_MOUNTED))) {
816 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
817 uuid_generate(sb->s_uuid);
818 ext2fs_init_csum_seed(fs);
819 fs->flags |= EXT2_FLAG_DIRTY;
820 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
821 }
822 }
823 #endif
824
825 /*
826 * Check to see if we should disable the test_fs flag
827 */
828 profile_get_boolean(ctx->profile, "options",
829 "clear_test_fs_flag", 0, 1,
830 &clear_test_fs_flag);
831 if (!(ctx->options & E2F_OPT_READONLY) &&
832 clear_test_fs_flag &&
833 (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
834 (fs_proc_check("ext4") || check_for_modules("ext4"))) {
835 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
836 fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
837 fs->flags |= EXT2_FLAG_DIRTY;
838 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
839 }
840 }
841
842 /*
843 * For the Hurd, check to see if the filetype option is set,
844 * since it doesn't support it.
845 */
846 if (!(ctx->options & E2F_OPT_READONLY) &&
847 fs->super->s_creator_os == EXT2_OS_HURD &&
848 ext2fs_has_feature_filetype(fs->super)) {
849 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
850 ext2fs_clear_feature_filetype(fs->super);
851 ext2fs_mark_super_dirty(fs);
852 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
853 }
854 }
855
856 /*
857 * If we have any of the compatibility flags set, we need to have a
858 * revision 1 filesystem. Most kernels will not check the flags on
859 * a rev 0 filesystem and we may have corruption issues because of
860 * the incompatible changes to the filesystem.
861 */
862 if (!(ctx->options & E2F_OPT_READONLY) &&
863 fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
864 (fs->super->s_feature_compat ||
865 fs->super->s_feature_ro_compat ||
866 fs->super->s_feature_incompat) &&
867 fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
868 ext2fs_update_dynamic_rev(fs);
869 ext2fs_mark_super_dirty(fs);
870 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
871 }
872
873 /*
874 * Clean up any orphan inodes, if present.
875 */
876 if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
877 fs->super->s_state &= ~EXT2_VALID_FS;
878 ext2fs_mark_super_dirty(fs);
879 }
880
881 /*
882 * Unfortunately, due to Windows' unfortunate design decision
883 * to configure the hardware clock to tick localtime, instead
884 * of the more proper and less error-prone UTC time, many
885 * users end up in the situation where the system clock is
886 * incorrectly set at the time when e2fsck is run.
887 *
888 * Historically this was usually due to some distributions
889 * having buggy init scripts and/or installers that didn't
890 * correctly detect this case and take appropriate
891 * countermeasures. However, it's still possible, despite the
892 * best efforts of init script and installer authors to not be
893 * able to detect this misconfiguration, usually due to a
894 * buggy or misconfigured virtualization manager or the
895 * installer not having access to a network time server during
896 * the installation process. So by default, we allow the
897 * superblock times to be fudged by up to 24 hours. This can
898 * be disabled by setting options.accept_time_fudge to the
899 * boolean value of false in e2fsck.conf. We also support
900 * options.buggy_init_scripts for backwards compatibility.
901 */
902 profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
903 0, 1, &accept_time_fudge);
904 profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
905 0, accept_time_fudge, &accept_time_fudge);
906 ctx->time_fudge = accept_time_fudge ? 86400 : 0;
907
908 profile_get_boolean(ctx->profile, "options", "broken_system_clock",
909 0, 0, &broken_system_clock);
910
911 /*
912 * Check to see if the superblock last mount time or last
913 * write time is in the future.
914 */
915 if (!broken_system_clock &&
916 !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
917 fs->super->s_mtime > (__u32) ctx->now) {
918 pctx.num = fs->super->s_mtime;
919 problem = PR_0_FUTURE_SB_LAST_MOUNT;
920 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
921 problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
922 if (fix_problem(ctx, problem, &pctx)) {
923 fs->super->s_mtime = ctx->now;
924 fs->flags |= EXT2_FLAG_DIRTY;
925 }
926 }
927 if (!broken_system_clock &&
928 !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
929 fs->super->s_wtime > (__u32) ctx->now) {
930 pctx.num = fs->super->s_wtime;
931 problem = PR_0_FUTURE_SB_LAST_WRITE;
932 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
933 problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
934 if (fix_problem(ctx, problem, &pctx)) {
935 fs->super->s_wtime = ctx->now;
936 fs->flags |= EXT2_FLAG_DIRTY;
937 }
938 }
939
940 e2fsck_validate_quota_inodes(ctx);
941
942 /*
943 * Move the ext3 journal file, if necessary.
944 */
945 e2fsck_move_ext3_journal(ctx);
946
947 /*
948 * Fix journal hint, if necessary
949 */
950 e2fsck_fix_ext3_journal_hint(ctx);
951
952 /*
953 * Add dirhash hint if necessary
954 */
955 e2fsck_fix_dirhash_hint(ctx);
956
957 /*
958 * Hide quota inodes if necessary.
959 */
960 e2fsck_hide_quota(ctx);
961
962 return;
963 }
964
965 /*
966 * Check to see if we should backup the master sb to the backup super
967 * blocks. Returns non-zero if the sb should be backed up.
968 */
969
970 /*
971 * A few flags are set on the fly by the kernel, but only in the
972 * primary superblock. This is actually a bad thing, and we should
973 * try to discourage it in the future. In particular, for the newer
974 * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
975 * EXT3_FEATURE_INCOMPAT_EXTENTS. So some of these may go away in the
976 * future. EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
977 * copying the primary superblock during online resize.
978 *
979 * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
980 * unfortunately, we shouldn't ignore it since if it's not set in the
981 * backup, the extended attributes in the filesystem will be stripped
982 * away.
983 */
984 #define FEATURE_RO_COMPAT_IGNORE (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
985 EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
986 #define FEATURE_INCOMPAT_IGNORE (EXT3_FEATURE_INCOMPAT_EXTENTS| \
987 EXT3_FEATURE_INCOMPAT_RECOVER)
988
989 int check_backup_super_block(e2fsck_t ctx)
990 {
991 ext2_filsys fs = ctx->fs;
992 errcode_t retval;
993 dgrp_t g;
994 blk64_t sb;
995 int ret = 0;
996 char buf[SUPERBLOCK_SIZE];
997 struct ext2_super_block *backup_sb;
998
999 /*
1000 * If we are already writing out the backup blocks, then we
1001 * don't need to test. Also, if the filesystem is invalid, or
1002 * the check was aborted or cancelled, we also don't want to
1003 * do the backup. If the filesystem was opened read-only then
1004 * we can't do the backup.
1005 */
1006 if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
1007 !ext2fs_test_valid(fs) ||
1008 (fs->super->s_state & EXT2_ERROR_FS) ||
1009 (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
1010 (ctx->options & E2F_OPT_READONLY))
1011 return 0;
1012
1013 for (g = 1; g < fs->group_desc_count; g++) {
1014 if (!ext2fs_bg_has_super(fs, g))
1015 continue;
1016
1017 sb = ext2fs_group_first_block2(fs, g);
1018
1019 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
1020 buf);
1021 if (retval)
1022 continue;
1023 backup_sb = (struct ext2_super_block *) buf;
1024 #ifdef WORDS_BIGENDIAN
1025 ext2fs_swap_super(backup_sb);
1026 #endif
1027 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
1028 (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
1029 ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
1030 EXT2_MAX_BLOCK_LOG_SIZE) ||
1031 (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
1032 continue;
1033
1034 #define SUPER_INCOMPAT_DIFFERENT(x) \
1035 ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) != \
1036 (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
1037 #define SUPER_RO_COMPAT_DIFFERENT(x) \
1038 ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) != \
1039 (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
1040 #define SUPER_DIFFERENT(x) \
1041 (fs->super->x != backup_sb->x)
1042
1043 if (SUPER_DIFFERENT(s_feature_compat) ||
1044 SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
1045 SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
1046 SUPER_DIFFERENT(s_blocks_count) ||
1047 SUPER_DIFFERENT(s_blocks_count_hi) ||
1048 SUPER_DIFFERENT(s_inodes_count) ||
1049 memcmp(fs->super->s_uuid, backup_sb->s_uuid,
1050 sizeof(fs->super->s_uuid)))
1051 ret = 1;
1052 break;
1053 }
1054 return ret;
1055 }