]> git.ipfire.org Git - thirdparty/xfsprogs-dev.git/blob - libxfs/xfs_inode_buf.c
xfs: optimise CRC updates
[thirdparty/xfsprogs-dev.git] / libxfs / xfs_inode_buf.c
1 /*
2 * Copyright (c) 2000-2006 Silicon Graphics, Inc.
3 * All Rights Reserved.
4 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
8 *
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
17 */
18 #include "libxfs_priv.h"
19 #include "xfs_fs.h"
20 #include "xfs_shared.h"
21 #include "xfs_format.h"
22 #include "xfs_log_format.h"
23 #include "xfs_trans_resv.h"
24 #include "xfs_mount.h"
25 #include "xfs_defer.h"
26 #include "xfs_inode.h"
27 #include "xfs_cksum.h"
28 #include "xfs_trans.h"
29 #include "xfs_ialloc.h"
30
31 /*
32 * Check that none of the inode's in the buffer have a next
33 * unlinked field of 0.
34 */
35 #if defined(DEBUG)
36 void
37 xfs_inobp_check(
38 xfs_mount_t *mp,
39 xfs_buf_t *bp)
40 {
41 int i;
42 int j;
43 xfs_dinode_t *dip;
44
45 j = mp->m_inode_cluster_size >> mp->m_sb.sb_inodelog;
46
47 for (i = 0; i < j; i++) {
48 dip = xfs_buf_offset(bp, i * mp->m_sb.sb_inodesize);
49 if (!dip->di_next_unlinked) {
50 xfs_alert(mp,
51 "Detected bogus zero next_unlinked field in inode %d buffer 0x%llx.",
52 i, (long long)bp->b_bn);
53 }
54 }
55 }
56 #endif
57
58 bool
59 xfs_dinode_good_version(
60 struct xfs_mount *mp,
61 __u8 version)
62 {
63 if (xfs_sb_version_hascrc(&mp->m_sb))
64 return version == 3;
65
66 return version == 1 || version == 2;
67 }
68
69 /*
70 * If we are doing readahead on an inode buffer, we might be in log recovery
71 * reading an inode allocation buffer that hasn't yet been replayed, and hence
72 * has not had the inode cores stamped into it. Hence for readahead, the buffer
73 * may be potentially invalid.
74 *
75 * If the readahead buffer is invalid, we need to mark it with an error and
76 * clear the DONE status of the buffer so that a followup read will re-read it
77 * from disk. We don't report the error otherwise to avoid warnings during log
78 * recovery and we don't get unnecssary panics on debug kernels. We use EIO here
79 * because all we want to do is say readahead failed; there is no-one to report
80 * the error to, so this will distinguish it from a non-ra verifier failure.
81 * Changes to this readahead error behavour also need to be reflected in
82 * xfs_dquot_buf_readahead_verify().
83 */
84 static void
85 xfs_inode_buf_verify(
86 struct xfs_buf *bp,
87 bool readahead)
88 {
89 struct xfs_mount *mp = bp->b_target->bt_mount;
90 int i;
91 int ni;
92
93 /*
94 * Validate the magic number and version of every inode in the buffer
95 */
96 ni = XFS_BB_TO_FSB(mp, bp->b_length) * mp->m_sb.sb_inopblock;
97 for (i = 0; i < ni; i++) {
98 int di_ok;
99 xfs_dinode_t *dip;
100
101 dip = xfs_buf_offset(bp, (i << mp->m_sb.sb_inodelog));
102 di_ok = dip->di_magic == cpu_to_be16(XFS_DINODE_MAGIC) &&
103 xfs_dinode_good_version(mp, dip->di_version);
104 if (unlikely(XFS_TEST_ERROR(!di_ok, mp,
105 XFS_ERRTAG_ITOBP_INOTOBP,
106 XFS_RANDOM_ITOBP_INOTOBP))) {
107 if (readahead) {
108 bp->b_flags &= ~XBF_DONE;
109 xfs_buf_ioerror(bp, -EIO);
110 return;
111 }
112
113 xfs_buf_ioerror(bp, -EFSCORRUPTED);
114 xfs_verifier_error(bp);
115 #ifdef DEBUG
116 xfs_alert(mp,
117 "bad inode magic/vsn daddr %lld #%d (magic=%x)",
118 (unsigned long long)bp->b_bn, i,
119 be16_to_cpu(dip->di_magic));
120 #endif
121 }
122 }
123 xfs_inobp_check(mp, bp);
124 }
125
126
127 static void
128 xfs_inode_buf_read_verify(
129 struct xfs_buf *bp)
130 {
131 xfs_inode_buf_verify(bp, false);
132 }
133
134 static void
135 xfs_inode_buf_readahead_verify(
136 struct xfs_buf *bp)
137 {
138 xfs_inode_buf_verify(bp, true);
139 }
140
141 static void
142 xfs_inode_buf_write_verify(
143 struct xfs_buf *bp)
144 {
145 xfs_inode_buf_verify(bp, false);
146 }
147
148 const struct xfs_buf_ops xfs_inode_buf_ops = {
149 .name = "xfs_inode",
150 .verify_read = xfs_inode_buf_read_verify,
151 .verify_write = xfs_inode_buf_write_verify,
152 };
153
154 const struct xfs_buf_ops xfs_inode_buf_ra_ops = {
155 .name = "xxfs_inode_ra",
156 .verify_read = xfs_inode_buf_readahead_verify,
157 .verify_write = xfs_inode_buf_write_verify,
158 };
159
160
161 /*
162 * This routine is called to map an inode to the buffer containing the on-disk
163 * version of the inode. It returns a pointer to the buffer containing the
164 * on-disk inode in the bpp parameter, and in the dipp parameter it returns a
165 * pointer to the on-disk inode within that buffer.
166 *
167 * If a non-zero error is returned, then the contents of bpp and dipp are
168 * undefined.
169 */
170 int
171 xfs_imap_to_bp(
172 struct xfs_mount *mp,
173 struct xfs_trans *tp,
174 struct xfs_imap *imap,
175 struct xfs_dinode **dipp,
176 struct xfs_buf **bpp,
177 uint buf_flags,
178 uint iget_flags)
179 {
180 struct xfs_buf *bp;
181 int error;
182
183 buf_flags |= XBF_UNMAPPED;
184 error = xfs_trans_read_buf(mp, tp, mp->m_ddev_targp, imap->im_blkno,
185 (int)imap->im_len, buf_flags, &bp,
186 &xfs_inode_buf_ops);
187 if (error) {
188 if (error == -EAGAIN) {
189 ASSERT(buf_flags & XBF_TRYLOCK);
190 return error;
191 }
192
193 if (error == -EFSCORRUPTED &&
194 (iget_flags & XFS_IGET_UNTRUSTED))
195 return -EINVAL;
196
197 xfs_warn(mp, "%s: xfs_trans_read_buf() returned error %d.",
198 __func__, error);
199 return error;
200 }
201
202 *bpp = bp;
203 *dipp = xfs_buf_offset(bp, imap->im_boffset);
204 return 0;
205 }
206
207 void
208 xfs_inode_from_disk(
209 struct xfs_inode *ip,
210 struct xfs_dinode *from)
211 {
212 struct xfs_icdinode *to = &ip->i_d;
213 struct inode *inode = VFS_I(ip);
214
215
216 /*
217 * Convert v1 inodes immediately to v2 inode format as this is the
218 * minimum inode version format we support in the rest of the code.
219 */
220 to->di_version = from->di_version;
221 if (to->di_version == 1) {
222 set_nlink(inode, be16_to_cpu(from->di_onlink));
223 to->di_projid_lo = 0;
224 to->di_projid_hi = 0;
225 to->di_version = 2;
226 } else {
227 set_nlink(inode, be32_to_cpu(from->di_nlink));
228 to->di_projid_lo = be16_to_cpu(from->di_projid_lo);
229 to->di_projid_hi = be16_to_cpu(from->di_projid_hi);
230 }
231
232 to->di_format = from->di_format;
233 to->di_uid = be32_to_cpu(from->di_uid);
234 to->di_gid = be32_to_cpu(from->di_gid);
235 to->di_flushiter = be16_to_cpu(from->di_flushiter);
236
237 /*
238 * Time is signed, so need to convert to signed 32 bit before
239 * storing in inode timestamp which may be 64 bit. Otherwise
240 * a time before epoch is converted to a time long after epoch
241 * on 64 bit systems.
242 */
243 inode->i_atime.tv_sec = (int)be32_to_cpu(from->di_atime.t_sec);
244 inode->i_atime.tv_nsec = (int)be32_to_cpu(from->di_atime.t_nsec);
245 inode->i_mtime.tv_sec = (int)be32_to_cpu(from->di_mtime.t_sec);
246 inode->i_mtime.tv_nsec = (int)be32_to_cpu(from->di_mtime.t_nsec);
247 inode->i_ctime.tv_sec = (int)be32_to_cpu(from->di_ctime.t_sec);
248 inode->i_ctime.tv_nsec = (int)be32_to_cpu(from->di_ctime.t_nsec);
249 inode->i_generation = be32_to_cpu(from->di_gen);
250 inode->i_mode = be16_to_cpu(from->di_mode);
251
252 to->di_size = be64_to_cpu(from->di_size);
253 to->di_nblocks = be64_to_cpu(from->di_nblocks);
254 to->di_extsize = be32_to_cpu(from->di_extsize);
255 to->di_nextents = be32_to_cpu(from->di_nextents);
256 to->di_anextents = be16_to_cpu(from->di_anextents);
257 to->di_forkoff = from->di_forkoff;
258 to->di_aformat = from->di_aformat;
259 to->di_dmevmask = be32_to_cpu(from->di_dmevmask);
260 to->di_dmstate = be16_to_cpu(from->di_dmstate);
261 to->di_flags = be16_to_cpu(from->di_flags);
262
263 if (to->di_version == 3) {
264 inode->i_version = be64_to_cpu(from->di_changecount);
265 to->di_crtime.t_sec = be32_to_cpu(from->di_crtime.t_sec);
266 to->di_crtime.t_nsec = be32_to_cpu(from->di_crtime.t_nsec);
267 to->di_flags2 = be64_to_cpu(from->di_flags2);
268 to->di_cowextsize = be32_to_cpu(from->di_cowextsize);
269 }
270 }
271
272 void
273 xfs_inode_to_disk(
274 struct xfs_inode *ip,
275 struct xfs_dinode *to,
276 xfs_lsn_t lsn)
277 {
278 struct xfs_icdinode *from = &ip->i_d;
279 struct inode *inode = VFS_I(ip);
280
281 to->di_magic = cpu_to_be16(XFS_DINODE_MAGIC);
282 to->di_onlink = 0;
283
284 to->di_version = from->di_version;
285 to->di_format = from->di_format;
286 to->di_uid = cpu_to_be32(from->di_uid);
287 to->di_gid = cpu_to_be32(from->di_gid);
288 to->di_projid_lo = cpu_to_be16(from->di_projid_lo);
289 to->di_projid_hi = cpu_to_be16(from->di_projid_hi);
290
291 memset(to->di_pad, 0, sizeof(to->di_pad));
292 to->di_atime.t_sec = cpu_to_be32(inode->i_atime.tv_sec);
293 to->di_atime.t_nsec = cpu_to_be32(inode->i_atime.tv_nsec);
294 to->di_mtime.t_sec = cpu_to_be32(inode->i_mtime.tv_sec);
295 to->di_mtime.t_nsec = cpu_to_be32(inode->i_mtime.tv_nsec);
296 to->di_ctime.t_sec = cpu_to_be32(inode->i_ctime.tv_sec);
297 to->di_ctime.t_nsec = cpu_to_be32(inode->i_ctime.tv_nsec);
298 to->di_nlink = cpu_to_be32(inode->i_nlink);
299 to->di_gen = cpu_to_be32(inode->i_generation);
300 to->di_mode = cpu_to_be16(inode->i_mode);
301
302 to->di_size = cpu_to_be64(from->di_size);
303 to->di_nblocks = cpu_to_be64(from->di_nblocks);
304 to->di_extsize = cpu_to_be32(from->di_extsize);
305 to->di_nextents = cpu_to_be32(from->di_nextents);
306 to->di_anextents = cpu_to_be16(from->di_anextents);
307 to->di_forkoff = from->di_forkoff;
308 to->di_aformat = from->di_aformat;
309 to->di_dmevmask = cpu_to_be32(from->di_dmevmask);
310 to->di_dmstate = cpu_to_be16(from->di_dmstate);
311 to->di_flags = cpu_to_be16(from->di_flags);
312
313 if (from->di_version == 3) {
314 to->di_changecount = cpu_to_be64(inode->i_version);
315 to->di_crtime.t_sec = cpu_to_be32(from->di_crtime.t_sec);
316 to->di_crtime.t_nsec = cpu_to_be32(from->di_crtime.t_nsec);
317 to->di_flags2 = cpu_to_be64(from->di_flags2);
318 to->di_cowextsize = cpu_to_be32(from->di_cowextsize);
319 to->di_ino = cpu_to_be64(ip->i_ino);
320 to->di_lsn = cpu_to_be64(lsn);
321 memset(to->di_pad2, 0, sizeof(to->di_pad2));
322 uuid_copy(&to->di_uuid, &ip->i_mount->m_sb.sb_meta_uuid);
323 to->di_flushiter = 0;
324 } else {
325 to->di_flushiter = cpu_to_be16(from->di_flushiter);
326 }
327 }
328
329 void
330 xfs_log_dinode_to_disk(
331 struct xfs_log_dinode *from,
332 struct xfs_dinode *to)
333 {
334 to->di_magic = cpu_to_be16(from->di_magic);
335 to->di_mode = cpu_to_be16(from->di_mode);
336 to->di_version = from->di_version;
337 to->di_format = from->di_format;
338 to->di_onlink = 0;
339 to->di_uid = cpu_to_be32(from->di_uid);
340 to->di_gid = cpu_to_be32(from->di_gid);
341 to->di_nlink = cpu_to_be32(from->di_nlink);
342 to->di_projid_lo = cpu_to_be16(from->di_projid_lo);
343 to->di_projid_hi = cpu_to_be16(from->di_projid_hi);
344 memcpy(to->di_pad, from->di_pad, sizeof(to->di_pad));
345
346 to->di_atime.t_sec = cpu_to_be32(from->di_atime.t_sec);
347 to->di_atime.t_nsec = cpu_to_be32(from->di_atime.t_nsec);
348 to->di_mtime.t_sec = cpu_to_be32(from->di_mtime.t_sec);
349 to->di_mtime.t_nsec = cpu_to_be32(from->di_mtime.t_nsec);
350 to->di_ctime.t_sec = cpu_to_be32(from->di_ctime.t_sec);
351 to->di_ctime.t_nsec = cpu_to_be32(from->di_ctime.t_nsec);
352
353 to->di_size = cpu_to_be64(from->di_size);
354 to->di_nblocks = cpu_to_be64(from->di_nblocks);
355 to->di_extsize = cpu_to_be32(from->di_extsize);
356 to->di_nextents = cpu_to_be32(from->di_nextents);
357 to->di_anextents = cpu_to_be16(from->di_anextents);
358 to->di_forkoff = from->di_forkoff;
359 to->di_aformat = from->di_aformat;
360 to->di_dmevmask = cpu_to_be32(from->di_dmevmask);
361 to->di_dmstate = cpu_to_be16(from->di_dmstate);
362 to->di_flags = cpu_to_be16(from->di_flags);
363 to->di_gen = cpu_to_be32(from->di_gen);
364
365 if (from->di_version == 3) {
366 to->di_changecount = cpu_to_be64(from->di_changecount);
367 to->di_crtime.t_sec = cpu_to_be32(from->di_crtime.t_sec);
368 to->di_crtime.t_nsec = cpu_to_be32(from->di_crtime.t_nsec);
369 to->di_flags2 = cpu_to_be64(from->di_flags2);
370 to->di_cowextsize = cpu_to_be32(from->di_cowextsize);
371 to->di_ino = cpu_to_be64(from->di_ino);
372 to->di_lsn = cpu_to_be64(from->di_lsn);
373 memcpy(to->di_pad2, from->di_pad2, sizeof(to->di_pad2));
374 uuid_copy(&to->di_uuid, &from->di_uuid);
375 to->di_flushiter = 0;
376 } else {
377 to->di_flushiter = cpu_to_be16(from->di_flushiter);
378 }
379 }
380
381 static bool
382 xfs_dinode_verify(
383 struct xfs_mount *mp,
384 xfs_ino_t ino,
385 struct xfs_dinode *dip)
386 {
387 uint16_t flags;
388 uint64_t flags2;
389
390 if (dip->di_magic != cpu_to_be16(XFS_DINODE_MAGIC))
391 return false;
392
393 /* don't allow invalid i_size */
394 if (be64_to_cpu(dip->di_size) & (1ULL << 63))
395 return false;
396
397 /* No zero-length symlinks. */
398 if (S_ISLNK(be16_to_cpu(dip->di_mode)) && dip->di_size == 0)
399 return false;
400
401 /* only version 3 or greater inodes are extensively verified here */
402 if (dip->di_version < 3)
403 return true;
404
405 if (!xfs_sb_version_hascrc(&mp->m_sb))
406 return false;
407 if (!xfs_verify_cksum((char *)dip, mp->m_sb.sb_inodesize,
408 XFS_DINODE_CRC_OFF))
409 return false;
410 if (be64_to_cpu(dip->di_ino) != ino)
411 return false;
412 if (!uuid_equal(&dip->di_uuid, &mp->m_sb.sb_meta_uuid))
413 return false;
414
415 flags = be16_to_cpu(dip->di_flags);
416 flags2 = be64_to_cpu(dip->di_flags2);
417
418 /* don't allow reflink/cowextsize if we don't have reflink */
419 if ((flags2 & (XFS_DIFLAG2_REFLINK | XFS_DIFLAG2_COWEXTSIZE)) &&
420 !xfs_sb_version_hasreflink(&mp->m_sb))
421 return false;
422
423 /* don't let reflink and realtime mix */
424 if ((flags2 & XFS_DIFLAG2_REFLINK) && (flags & XFS_DIFLAG_REALTIME))
425 return false;
426
427 /* don't let reflink and dax mix */
428 if ((flags2 & XFS_DIFLAG2_REFLINK) && (flags2 & XFS_DIFLAG2_DAX))
429 return false;
430
431 return true;
432 }
433
434 void
435 xfs_dinode_calc_crc(
436 struct xfs_mount *mp,
437 struct xfs_dinode *dip)
438 {
439 __uint32_t crc;
440
441 if (dip->di_version < 3)
442 return;
443
444 ASSERT(xfs_sb_version_hascrc(&mp->m_sb));
445 crc = xfs_start_cksum_update((char *)dip, mp->m_sb.sb_inodesize,
446 XFS_DINODE_CRC_OFF);
447 dip->di_crc = xfs_end_cksum(crc);
448 }
449
450 /*
451 * Read the disk inode attributes into the in-core inode structure.
452 *
453 * For version 5 superblocks, if we are initialising a new inode and we are not
454 * utilising the XFS_MOUNT_IKEEP inode cluster mode, we can simple build the new
455 * inode core with a random generation number. If we are keeping inodes around,
456 * we need to read the inode cluster to get the existing generation number off
457 * disk. Further, if we are using version 4 superblocks (i.e. v1/v2 inode
458 * format) then log recovery is dependent on the di_flushiter field being
459 * initialised from the current on-disk value and hence we must also read the
460 * inode off disk.
461 */
462 int
463 xfs_iread(
464 xfs_mount_t *mp,
465 xfs_trans_t *tp,
466 xfs_inode_t *ip,
467 uint iget_flags)
468 {
469 xfs_buf_t *bp;
470 xfs_dinode_t *dip;
471 int error;
472
473 /*
474 * Fill in the location information in the in-core inode.
475 */
476 error = xfs_imap(mp, tp, ip->i_ino, &ip->i_imap, iget_flags);
477 if (error)
478 return error;
479
480 /* shortcut IO on inode allocation if possible */
481 if ((iget_flags & XFS_IGET_CREATE) &&
482 xfs_sb_version_hascrc(&mp->m_sb) &&
483 !(mp->m_flags & XFS_MOUNT_IKEEP)) {
484 /* initialise the on-disk inode core */
485 memset(&ip->i_d, 0, sizeof(ip->i_d));
486 VFS_I(ip)->i_generation = prandom_u32();
487 if (xfs_sb_version_hascrc(&mp->m_sb))
488 ip->i_d.di_version = 3;
489 else
490 ip->i_d.di_version = 2;
491 return 0;
492 }
493
494 /*
495 * Get pointers to the on-disk inode and the buffer containing it.
496 */
497 error = xfs_imap_to_bp(mp, tp, &ip->i_imap, &dip, &bp, 0, iget_flags);
498 if (error)
499 return error;
500
501 /* even unallocated inodes are verified */
502 if (!xfs_dinode_verify(mp, ip->i_ino, dip)) {
503 xfs_alert(mp, "%s: validation failed for inode %lld failed",
504 __func__, ip->i_ino);
505
506 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, dip);
507 error = -EFSCORRUPTED;
508 goto out_brelse;
509 }
510
511 /*
512 * If the on-disk inode is already linked to a directory
513 * entry, copy all of the inode into the in-core inode.
514 * xfs_iformat_fork() handles copying in the inode format
515 * specific information.
516 * Otherwise, just get the truly permanent information.
517 */
518 if (dip->di_mode) {
519 xfs_inode_from_disk(ip, dip);
520 error = xfs_iformat_fork(ip, dip);
521 if (error) {
522 #ifdef DEBUG
523 xfs_alert(mp, "%s: xfs_iformat() returned error %d",
524 __func__, error);
525 #endif /* DEBUG */
526 goto out_brelse;
527 }
528 } else {
529 /*
530 * Partial initialisation of the in-core inode. Just the bits
531 * that xfs_ialloc won't overwrite or relies on being correct.
532 */
533 ip->i_d.di_version = dip->di_version;
534 VFS_I(ip)->i_generation = be32_to_cpu(dip->di_gen);
535 ip->i_d.di_flushiter = be16_to_cpu(dip->di_flushiter);
536
537 /*
538 * Make sure to pull in the mode here as well in
539 * case the inode is released without being used.
540 * This ensures that xfs_inactive() will see that
541 * the inode is already free and not try to mess
542 * with the uninitialized part of it.
543 */
544 VFS_I(ip)->i_mode = 0;
545 }
546
547 ASSERT(ip->i_d.di_version >= 2);
548 ip->i_delayed_blks = 0;
549
550 /*
551 * Mark the buffer containing the inode as something to keep
552 * around for a while. This helps to keep recently accessed
553 * meta-data in-core longer.
554 */
555 xfs_buf_set_ref(bp, XFS_INO_REF);
556
557 /*
558 * Use xfs_trans_brelse() to release the buffer containing the on-disk
559 * inode, because it was acquired with xfs_trans_read_buf() in
560 * xfs_imap_to_bp() above. If tp is NULL, this is just a normal
561 * brelse(). If we're within a transaction, then xfs_trans_brelse()
562 * will only release the buffer if it is not dirty within the
563 * transaction. It will be OK to release the buffer in this case,
564 * because inodes on disk are never destroyed and we will be locking the
565 * new in-core inode before putting it in the cache where other
566 * processes can find it. Thus we don't have to worry about the inode
567 * being changed just because we released the buffer.
568 */
569 out_brelse:
570 xfs_trans_brelse(tp, bp);
571 return error;
572 }