1/*
2 * e2fsck.c - superblock checks
3 *
4 * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
5 *
6 * %Begin-Header%
7 * This file may be redistributed under the terms of the GNU Public
8 * License.
9 * %End-Header%
10 */
11
12#ifdef HAVE_ERRNO_H
13#include <errno.h>
14#endif
15
16#ifndef EXT2_SKIP_UUID
17#include "uuid/uuid.h"
18#endif
19#include "e2fsck.h"
20#include "problem.h"
21
22#define MIN_CHECK 1
23#define MAX_CHECK 2
24#define LOG2_CHECK 4
25
26static void check_super_value(e2fsck_t ctx, const char *descr,
27			      unsigned long value, int flags,
28			      unsigned long min_val, unsigned long max_val)
29{
30	struct		problem_context pctx;
31
32	if (((flags & MIN_CHECK) && (value < min_val)) ||
33	    ((flags & MAX_CHECK) && (value > max_val)) ||
34	    ((flags & LOG2_CHECK) && (value & (value - 1) != 0))) {
35		clear_problem_context(&pctx);
36		pctx.num = value;
37		pctx.str = descr;
38		fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
39		ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
40	}
41}
42
43/*
44 * helper function to release an inode
45 */
46struct process_block_struct {
47	e2fsck_t 	ctx;
48	char 		*buf;
49	struct problem_context *pctx;
50	int		truncating;
51	int		truncate_offset;
52	e2_blkcnt_t	truncate_block;
53	int		truncated_blocks;
54	int		abort;
55	errcode_t	errcode;
56};
57
58static int release_inode_block(ext2_filsys fs,
59			       blk64_t	*block_nr,
60			       e2_blkcnt_t blockcnt,
61			       blk64_t	ref_blk EXT2FS_ATTR((unused)),
62			       int	ref_offset EXT2FS_ATTR((unused)),
63			       void *priv_data)
64{
65	struct process_block_struct *pb;
66	e2fsck_t 		ctx;
67	struct problem_context	*pctx;
68	blk64_t			blk = *block_nr;
69	int			retval = 0;
70
71	pb = (struct process_block_struct *) priv_data;
72	ctx = pb->ctx;
73	pctx = pb->pctx;
74
75	pctx->blk = blk;
76	pctx->blkcount = blockcnt;
77
78	if (HOLE_BLKADDR(blk))
79		return 0;
80
81	if ((blk < fs->super->s_first_data_block) ||
82	    (blk >= ext2fs_blocks_count(fs->super))) {
83		fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
84	return_abort:
85		pb->abort = 1;
86		return BLOCK_ABORT;
87	}
88
89	if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
90		fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
91		goto return_abort;
92	}
93
94	/*
95	 * If we are deleting an orphan, then we leave the fields alone.
96	 * If we are truncating an orphan, then update the inode fields
97	 * and clean up any partial block data.
98	 */
99	if (pb->truncating) {
100		/*
101		 * We only remove indirect blocks if they are
102		 * completely empty.
103		 */
104		if (blockcnt < 0) {
105			int	i, limit;
106			blk_t	*bp;
107
108			pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
109							pb->buf);
110			if (pb->errcode)
111				goto return_abort;
112
113			limit = fs->blocksize >> 2;
114			for (i = 0, bp = (blk_t *) pb->buf;
115			     i < limit;	 i++, bp++)
116				if (*bp)
117					return 0;
118		}
119		/*
120		 * We don't remove direct blocks until we've reached
121		 * the truncation block.
122		 */
123		if (blockcnt >= 0 && blockcnt < pb->truncate_block)
124			return 0;
125		/*
126		 * If part of the last block needs truncating, we do
127		 * it here.
128		 */
129		if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
130			pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
131							pb->buf);
132			if (pb->errcode)
133				goto return_abort;
134			memset(pb->buf + pb->truncate_offset, 0,
135			       fs->blocksize - pb->truncate_offset);
136			pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
137							 pb->buf);
138			if (pb->errcode)
139				goto return_abort;
140		}
141		pb->truncated_blocks++;
142		*block_nr = 0;
143		retval |= BLOCK_CHANGED;
144	}
145
146	ext2fs_block_alloc_stats2(fs, blk, -1);
147	ctx->free_blocks++;
148	return retval;
149}
150
151/*
152 * This function releases an inode.  Returns 1 if an inconsistency was
153 * found.  If the inode has a link count, then it is being truncated and
154 * not deleted.
155 */
156static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
157				struct ext2_inode *inode, char *block_buf,
158				struct problem_context *pctx)
159{
160	struct process_block_struct 	pb;
161	ext2_filsys			fs = ctx->fs;
162	errcode_t			retval;
163	__u32				count;
164
165	if (!ext2fs_inode_has_valid_blocks2(fs, inode))
166		return 0;
167
168	pb.buf = block_buf + 3 * ctx->fs->blocksize;
169	pb.ctx = ctx;
170	pb.abort = 0;
171	pb.errcode = 0;
172	pb.pctx = pctx;
173	if (inode->i_links_count) {
174		pb.truncating = 1;
175		pb.truncate_block = (e2_blkcnt_t)
176			((EXT2_I_SIZE(inode) + fs->blocksize - 1) /
177			 fs->blocksize);
178		pb.truncate_offset = inode->i_size % fs->blocksize;
179	} else {
180		pb.truncating = 0;
181		pb.truncate_block = 0;
182		pb.truncate_offset = 0;
183	}
184	pb.truncated_blocks = 0;
185	retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
186				      block_buf, release_inode_block, &pb);
187	if (retval) {
188		com_err("release_inode_blocks", retval,
189			_("while calling ext2fs_block_iterate for inode %d"),
190			ino);
191		return 1;
192	}
193	if (pb.abort)
194		return 1;
195
196	/* Refresh the inode since ext2fs_block_iterate may have changed it */
197	e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
198
199	if (pb.truncated_blocks)
200		ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
201
202	if (ext2fs_file_acl_block(fs, inode)) {
203		retval = ext2fs_adjust_ea_refcount2(fs,
204					ext2fs_file_acl_block(fs, inode),
205					block_buf, -1, &count);
206		if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
207			retval = 0;
208			count = 1;
209		}
210		if (retval) {
211			com_err("release_inode_blocks", retval,
212		_("while calling ext2fs_adjust_ea_refcount2 for inode %d"),
213				ino);
214			return 1;
215		}
216		if (count == 0) {
217			ext2fs_block_alloc_stats2(fs,
218					ext2fs_file_acl_block(fs, inode), -1);
219			ctx->free_blocks++;
220		}
221		ext2fs_file_acl_block_set(fs, inode, 0);
222	}
223	return 0;
224}
225
226/*
227 * This function releases all of the orphan inodes.  It returns 1 if
228 * it hit some error, and 0 on success.
229 */
230static int release_orphan_inodes(e2fsck_t ctx)
231{
232	ext2_filsys fs = ctx->fs;
233	ext2_ino_t	ino, next_ino;
234	struct ext2_inode inode;
235	struct problem_context pctx;
236	char *block_buf;
237
238	if ((ino = fs->super->s_last_orphan) == 0)
239		return 0;
240
241	/*
242	 * Win or lose, we won't be using the head of the orphan inode
243	 * list again.
244	 */
245	fs->super->s_last_orphan = 0;
246	ext2fs_mark_super_dirty(fs);
247
248	/*
249	 * If the filesystem contains errors, don't run the orphan
250	 * list, since the orphan list can't be trusted; and we're
251	 * going to be running a full e2fsck run anyway...
252	 */
253	if (fs->super->s_state & EXT2_ERROR_FS)
254		return 0;
255
256	if ((ino < EXT2_FIRST_INODE(fs->super)) ||
257	    (ino > fs->super->s_inodes_count)) {
258		clear_problem_context(&pctx);
259		pctx.ino = ino;
260		fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
261		return 1;
262	}
263
264	block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
265						    "block iterate buffer");
266	e2fsck_read_bitmaps(ctx);
267
268	while (ino) {
269		e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
270		clear_problem_context(&pctx);
271		pctx.ino = ino;
272		pctx.inode = &inode;
273		pctx.str = inode.i_links_count ? _("Truncating") :
274			_("Clearing");
275
276		fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
277
278		next_ino = inode.i_dtime;
279		if (next_ino &&
280		    ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
281		     (next_ino > fs->super->s_inodes_count))) {
282			pctx.ino = next_ino;
283			fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
284			goto return_abort;
285		}
286
287		if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
288			goto return_abort;
289
290		if (!inode.i_links_count) {
291			ext2fs_inode_alloc_stats2(fs, ino, -1,
292						  LINUX_S_ISDIR(inode.i_mode));
293			ctx->free_inodes++;
294			inode.i_dtime = ctx->now;
295		} else {
296			inode.i_dtime = 0;
297		}
298		e2fsck_write_inode(ctx, ino, &inode, "delete_file");
299		ino = next_ino;
300	}
301	ext2fs_free_mem(&block_buf);
302	return 0;
303return_abort:
304	ext2fs_free_mem(&block_buf);
305	return 1;
306}
307
308/*
309 * Check the resize inode to make sure it is sane.  We check both for
310 * the case where on-line resizing is not enabled (in which case the
311 * resize inode should be cleared) as well as the case where on-line
312 * resizing is enabled.
313 */
314void check_resize_inode(e2fsck_t ctx)
315{
316	ext2_filsys fs = ctx->fs;
317	struct ext2_inode inode;
318	struct problem_context	pctx;
319	int		i, gdt_off, ind_off;
320	dgrp_t		j;
321	blk_t		blk, pblk;
322	blk_t		expect;	/* for resize inode, which is 32-bit only */
323	__u32 		*dind_buf = 0, *ind_buf;
324	errcode_t	retval;
325
326	clear_problem_context(&pctx);
327
328	/*
329	 * If the resize inode feature isn't set, then
330	 * s_reserved_gdt_blocks must be zero.
331	 */
332	if (!(fs->super->s_feature_compat &
333	      EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
334		if (fs->super->s_reserved_gdt_blocks) {
335			pctx.num = fs->super->s_reserved_gdt_blocks;
336			if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
337					&pctx)) {
338				fs->super->s_reserved_gdt_blocks = 0;
339				ext2fs_mark_super_dirty(fs);
340			}
341		}
342	}
343
344	/* Read the resize inode */
345	pctx.ino = EXT2_RESIZE_INO;
346	retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
347	if (retval) {
348		if (fs->super->s_feature_compat &
349		    EXT2_FEATURE_COMPAT_RESIZE_INODE)
350			ctx->flags |= E2F_FLAG_RESIZE_INODE;
351		return;
352	}
353
354	/*
355	 * If the resize inode feature isn't set, check to make sure
356	 * the resize inode is cleared; then we're done.
357	 */
358	if (!(fs->super->s_feature_compat &
359	      EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
360		for (i=0; i < EXT2_N_BLOCKS; i++) {
361			if (inode.i_block[i])
362				break;
363		}
364		if ((i < EXT2_N_BLOCKS) &&
365		    fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
366			memset(&inode, 0, sizeof(inode));
367			e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
368					   "clear_resize");
369		}
370		return;
371	}
372
373	/*
374	 * The resize inode feature is enabled; check to make sure the
375	 * only block in use is the double indirect block
376	 */
377	blk = inode.i_block[EXT2_DIND_BLOCK];
378	for (i=0; i < EXT2_N_BLOCKS; i++) {
379		if (i != EXT2_DIND_BLOCK && inode.i_block[i])
380			break;
381	}
382	if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
383	    !(inode.i_mode & LINUX_S_IFREG) ||
384	    (blk < fs->super->s_first_data_block ||
385	     blk >= ext2fs_blocks_count(fs->super))) {
386	resize_inode_invalid:
387		if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
388			memset(&inode, 0, sizeof(inode));
389			e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
390					   "clear_resize");
391			ctx->flags |= E2F_FLAG_RESIZE_INODE;
392		}
393		if (!(ctx->options & E2F_OPT_READONLY)) {
394			fs->super->s_state &= ~EXT2_VALID_FS;
395			ext2fs_mark_super_dirty(fs);
396		}
397		goto cleanup;
398	}
399	dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
400						    "resize dind buffer");
401	ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
402
403	retval = ext2fs_read_ind_block(fs, blk, dind_buf);
404	if (retval)
405		goto resize_inode_invalid;
406
407	gdt_off = fs->desc_blocks;
408	pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
409	if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0)
410		pblk++;	/* Deal with 1024 blocksize bigalloc fs */
411	for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
412	     i++, gdt_off++, pblk++) {
413		gdt_off %= fs->blocksize/4;
414		if (dind_buf[gdt_off] != pblk)
415			goto resize_inode_invalid;
416		retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
417		if (retval)
418			goto resize_inode_invalid;
419		ind_off = 0;
420		for (j = 1; j < fs->group_desc_count; j++) {
421			if (!ext2fs_bg_has_super(fs, j))
422				continue;
423			expect = pblk + (j * fs->super->s_blocks_per_group);
424			if (ind_buf[ind_off] != expect)
425				goto resize_inode_invalid;
426			ind_off++;
427		}
428	}
429
430cleanup:
431	if (dind_buf)
432		ext2fs_free_mem(&dind_buf);
433
434 }
435
436/*
437 * This function checks the dirhash signed/unsigned hint if necessary.
438 */
439static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
440{
441	struct ext2_super_block *sb = ctx->fs->super;
442	struct problem_context pctx;
443	char	c;
444
445	if ((ctx->options & E2F_OPT_READONLY) ||
446	    !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
447	    (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
448		return;
449
450	c = (char) 255;
451
452	clear_problem_context(&pctx);
453	if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
454		if (((int) c) == -1) {
455			sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
456		} else {
457			sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
458		}
459		ext2fs_mark_super_dirty(ctx->fs);
460	}
461}
462
463
464void check_super_block(e2fsck_t ctx)
465{
466	ext2_filsys fs = ctx->fs;
467	blk64_t	first_block, last_block;
468	struct ext2_super_block *sb = fs->super;
469	unsigned int	ipg_max;
470	problem_t	problem;
471	blk64_t	blocks_per_group = fs->super->s_blocks_per_group;
472	__u32	bpg_max, cpg_max;
473	int	inodes_per_block;
474	int	inode_size;
475	int	accept_time_fudge;
476	int	broken_system_clock;
477	dgrp_t	i;
478	blk64_t	should_be;
479	struct problem_context	pctx;
480	blk64_t	free_blocks = 0;
481	ino_t	free_inodes = 0;
482	int     csum_flag, clear_test_fs_flag;
483
484	inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
485	ipg_max = inodes_per_block * (blocks_per_group - 4);
486	if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
487		ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
488	cpg_max = 8 * EXT2_BLOCK_SIZE(sb);
489	if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb))
490		cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb);
491	bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs);
492	if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
493		bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
494
495	ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
496		 sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
497	ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
498		 sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
499	ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
500		sizeof(int) * fs->group_desc_count, "invalid_inode_table");
501
502	clear_problem_context(&pctx);
503
504	/*
505	 * Verify the super block constants...
506	 */
507	check_super_value(ctx, "inodes_count", sb->s_inodes_count,
508			  MIN_CHECK, 1, 0);
509	check_super_value(ctx, "blocks_count", ext2fs_blocks_count(sb),
510			  MIN_CHECK, 1, 0);
511	check_super_value(ctx, "first_data_block", sb->s_first_data_block,
512			  MAX_CHECK, 0, ext2fs_blocks_count(sb));
513	check_super_value(ctx, "log_block_size", sb->s_log_block_size,
514			  MIN_CHECK | MAX_CHECK, 0,
515			  EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
516	check_super_value(ctx, "log_cluster_size",
517			  sb->s_log_cluster_size,
518			  MIN_CHECK | MAX_CHECK, sb->s_log_block_size,
519			  (EXT2_MAX_CLUSTER_LOG_SIZE -
520			   EXT2_MIN_CLUSTER_LOG_SIZE));
521	check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group,
522			  MIN_CHECK | MAX_CHECK, 8, cpg_max);
523	check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
524			  MIN_CHECK | MAX_CHECK, 8, bpg_max);
525	check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
526			  MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
527	check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb),
528			  MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2);
529	check_super_value(ctx, "reserved_gdt_blocks",
530			  sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
531			  fs->blocksize / sizeof(__u32));
532	check_super_value(ctx, "desc_size",
533			  sb->s_desc_size, MAX_CHECK | LOG2_CHECK, 0,
534			  EXT2_MAX_DESC_SIZE);
535	if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
536		check_super_value(ctx, "first_ino", sb->s_first_ino,
537				  MIN_CHECK | MAX_CHECK,
538				  EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
539	inode_size = EXT2_INODE_SIZE(sb);
540	check_super_value(ctx, "inode_size",
541			  inode_size, MIN_CHECK | MAX_CHECK | LOG2_CHECK,
542			  EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
543	if (sb->s_blocks_per_group != (sb->s_clusters_per_group *
544				       EXT2FS_CLUSTER_RATIO(fs))) {
545		pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs);
546		pctx.str = "block_size";
547		fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
548		ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
549		return;
550	}
551
552	if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
553	    (ctx->num_blocks < ext2fs_blocks_count(sb))) {
554		pctx.blk = ext2fs_blocks_count(sb);
555		pctx.blk2 = ctx->num_blocks;
556		if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
557			ctx->flags |= E2F_FLAG_ABORT;
558			return;
559		}
560	}
561
562	should_be = (sb->s_log_block_size == 0 &&
563		     EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0;
564	if (sb->s_first_data_block != should_be) {
565		pctx.blk = sb->s_first_data_block;
566		pctx.blk2 = should_be;
567		fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
568		ctx->flags |= E2F_FLAG_ABORT;
569		return;
570	}
571
572	should_be = sb->s_inodes_per_group * fs->group_desc_count;
573	if (sb->s_inodes_count != should_be) {
574		pctx.ino = sb->s_inodes_count;
575		pctx.ino2 = should_be;
576		if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
577			sb->s_inodes_count = should_be;
578			ext2fs_mark_super_dirty(fs);
579		}
580	}
581
582	/* Is 64bit set and extents unset? */
583	if (EXT2_HAS_INCOMPAT_FEATURE(fs->super,
584				      EXT4_FEATURE_INCOMPAT_64BIT) &&
585	    !EXT2_HAS_INCOMPAT_FEATURE(fs->super,
586				       EXT3_FEATURE_INCOMPAT_EXTENTS) &&
587	    fix_problem(ctx, PR_0_64BIT_WITHOUT_EXTENTS, &pctx)) {
588		fs->super->s_feature_incompat |=
589			EXT3_FEATURE_INCOMPAT_EXTENTS;
590		ext2fs_mark_super_dirty(fs);
591	}
592
593	/*
594	 * Verify the group descriptors....
595	 */
596	first_block = sb->s_first_data_block;
597	last_block = ext2fs_blocks_count(sb)-1;
598
599	csum_flag = EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
600					       EXT4_FEATURE_RO_COMPAT_GDT_CSUM);
601	for (i = 0; i < fs->group_desc_count; i++) {
602		pctx.group = i;
603
604		if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
605					       EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
606			first_block = ext2fs_group_first_block2(fs, i);
607			last_block = ext2fs_group_last_block2(fs, i);
608		}
609
610		if ((ext2fs_block_bitmap_loc(fs, i) < first_block) ||
611		    (ext2fs_block_bitmap_loc(fs, i) > last_block)) {
612			pctx.blk = ext2fs_block_bitmap_loc(fs, i);
613			if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
614				ext2fs_block_bitmap_loc_set(fs, i, 0);
615		}
616		if (ext2fs_block_bitmap_loc(fs, i) == 0) {
617			ctx->invalid_block_bitmap_flag[i]++;
618			ctx->invalid_bitmaps++;
619		}
620		if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) ||
621		    (ext2fs_inode_bitmap_loc(fs, i) > last_block)) {
622			pctx.blk = ext2fs_inode_bitmap_loc(fs, i);
623			if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
624				ext2fs_inode_bitmap_loc_set(fs, i, 0);
625		}
626		if (ext2fs_inode_bitmap_loc(fs, i) == 0) {
627			ctx->invalid_inode_bitmap_flag[i]++;
628			ctx->invalid_bitmaps++;
629		}
630		if ((ext2fs_inode_table_loc(fs, i) < first_block) ||
631		    ((ext2fs_inode_table_loc(fs, i) +
632		      fs->inode_blocks_per_group - 1) > last_block)) {
633			pctx.blk = ext2fs_inode_table_loc(fs, i);
634			if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
635				ext2fs_inode_table_loc_set(fs, i, 0);
636		}
637		if (ext2fs_inode_table_loc(fs, i) == 0) {
638			ctx->invalid_inode_table_flag[i]++;
639			ctx->invalid_bitmaps++;
640		}
641		free_blocks += ext2fs_bg_free_blocks_count(fs, i);
642		free_inodes += ext2fs_bg_free_inodes_count(fs, i);
643
644		if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) ||
645		    (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) ||
646		    (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group))
647			ext2fs_unmark_valid(fs);
648
649		should_be = 0;
650		if (!ext2fs_group_desc_csum_verify(fs, i)) {
651			pctx.csum1 = ext2fs_bg_checksum(fs, i);
652			pctx.csum2 = ext2fs_group_desc_csum(fs, i);
653			if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
654				ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
655				ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
656				ext2fs_bg_itable_unused_set(fs, i, 0);
657				should_be = 1;
658			}
659			ext2fs_unmark_valid(fs);
660		}
661
662		if (!csum_flag &&
663		    (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
664		     ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) ||
665		     ext2fs_bg_itable_unused(fs, i) != 0)) {
666			if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
667				ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
668				ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
669				ext2fs_bg_itable_unused_set(fs, i, 0);
670				should_be = 1;
671			}
672			ext2fs_unmark_valid(fs);
673		}
674
675		if (i == fs->group_desc_count - 1 &&
676		    ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
677			if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
678				ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
679				should_be = 1;
680			}
681			ext2fs_unmark_valid(fs);
682		}
683
684		if (csum_flag &&
685		    (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) ||
686		     ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) {
687			pctx.blk = ext2fs_bg_itable_unused(fs, i);
688			if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
689				ext2fs_bg_itable_unused_set(fs, i, 0);
690				should_be = 1;
691			}
692			ext2fs_unmark_valid(fs);
693		}
694
695		if (should_be)
696			ext2fs_group_desc_csum_set(fs, i);
697		/* If the user aborts e2fsck by typing ^C, stop right away */
698		if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
699			return;
700	}
701
702	ctx->free_blocks = EXT2FS_C2B(fs, free_blocks);
703	ctx->free_inodes = free_inodes;
704
705	if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) ||
706	    (sb->s_free_inodes_count > sb->s_inodes_count))
707		ext2fs_unmark_valid(fs);
708
709
710	/*
711	 * If we have invalid bitmaps, set the error state of the
712	 * filesystem.
713	 */
714	if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
715		sb->s_state &= ~EXT2_VALID_FS;
716		ext2fs_mark_super_dirty(fs);
717	}
718
719	clear_problem_context(&pctx);
720
721#ifndef EXT2_SKIP_UUID
722	/*
723	 * If the UUID field isn't assigned, assign it.
724	 */
725	if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
726		if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
727			uuid_generate(sb->s_uuid);
728			fs->flags |= EXT2_FLAG_DIRTY;
729			fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
730		}
731	}
732#endif
733
734	/*
735	 * Check to see if we should disable the test_fs flag
736	 */
737	profile_get_boolean(ctx->profile, "options",
738			    "clear_test_fs_flag", 0, 1,
739			    &clear_test_fs_flag);
740	if (!(ctx->options & E2F_OPT_READONLY) &&
741	    clear_test_fs_flag &&
742	    (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
743	    (fs_proc_check("ext4") || check_for_modules("ext4"))) {
744		if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
745			fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
746			fs->flags |= EXT2_FLAG_DIRTY;
747			fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
748		}
749	}
750
751	/*
752	 * For the Hurd, check to see if the filetype option is set,
753	 * since it doesn't support it.
754	 */
755	if (!(ctx->options & E2F_OPT_READONLY) &&
756	    fs->super->s_creator_os == EXT2_OS_HURD &&
757	    (fs->super->s_feature_incompat &
758	     EXT2_FEATURE_INCOMPAT_FILETYPE)) {
759		if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
760			fs->super->s_feature_incompat &=
761				~EXT2_FEATURE_INCOMPAT_FILETYPE;
762			ext2fs_mark_super_dirty(fs);
763			fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
764		}
765	}
766
767	/*
768	 * If we have any of the compatibility flags set, we need to have a
769	 * revision 1 filesystem.  Most kernels will not check the flags on
770	 * a rev 0 filesystem and we may have corruption issues because of
771	 * the incompatible changes to the filesystem.
772	 */
773	if (!(ctx->options & E2F_OPT_READONLY) &&
774	    fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
775	    (fs->super->s_feature_compat ||
776	     fs->super->s_feature_ro_compat ||
777	     fs->super->s_feature_incompat) &&
778	    fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
779		ext2fs_update_dynamic_rev(fs);
780		ext2fs_mark_super_dirty(fs);
781		fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
782	}
783
784	/*
785	 * Clean up any orphan inodes, if present.
786	 */
787	if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
788		fs->super->s_state &= ~EXT2_VALID_FS;
789		ext2fs_mark_super_dirty(fs);
790	}
791
792	/*
793	 * Unfortunately, due to Windows' unfortunate design decision
794	 * to configure the hardware clock to tick localtime, instead
795	 * of the more proper and less error-prone UTC time, many
796	 * users end up in the situation where the system clock is
797	 * incorrectly set at the time when e2fsck is run.
798	 *
799	 * Historically this was usually due to some distributions
800	 * having buggy init scripts and/or installers that didn't
801	 * correctly detect this case and take appropriate
802	 * countermeasures.  However, it's still possible, despite the
803	 * best efforts of init script and installer authors to not be
804	 * able to detect this misconfiguration, usually due to a
805	 * buggy or misconfigured virtualization manager or the
806	 * installer not having access to a network time server during
807	 * the installation process.  So by default, we allow the
808	 * superblock times to be fudged by up to 24 hours.  This can
809	 * be disabled by setting options.accept_time_fudge to the
810	 * boolean value of false in e2fsck.conf.  We also support
811	 * options.buggy_init_scripts for backwards compatibility.
812	 */
813	profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
814			    0, 1, &accept_time_fudge);
815	profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
816			    0, accept_time_fudge, &accept_time_fudge);
817	ctx->time_fudge = accept_time_fudge ? 86400 : 0;
818
819	profile_get_boolean(ctx->profile, "options", "broken_system_clock",
820			    0, 0, &broken_system_clock);
821
822	/*
823	 * Check to see if the superblock last mount time or last
824	 * write time is in the future.
825	 */
826	if (!broken_system_clock &&
827	    !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
828	    fs->super->s_mtime > (__u32) ctx->now) {
829		pctx.num = fs->super->s_mtime;
830		problem = PR_0_FUTURE_SB_LAST_MOUNT;
831		if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
832			problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
833		if (fix_problem(ctx, problem, &pctx)) {
834			fs->super->s_mtime = ctx->now;
835			fs->flags |= EXT2_FLAG_DIRTY;
836		}
837	}
838	if (!broken_system_clock &&
839	    !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
840	    fs->super->s_wtime > (__u32) ctx->now) {
841		pctx.num = fs->super->s_wtime;
842		problem = PR_0_FUTURE_SB_LAST_WRITE;
843		if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
844			problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
845		if (fix_problem(ctx, problem, &pctx)) {
846			fs->super->s_wtime = ctx->now;
847			fs->flags |= EXT2_FLAG_DIRTY;
848		}
849	}
850
851	/*
852	 * Move the ext3 journal file, if necessary.
853	 */
854	e2fsck_move_ext3_journal(ctx);
855
856	/*
857	 * Fix journal hint, if necessary
858	 */
859	e2fsck_fix_ext3_journal_hint(ctx);
860
861	/*
862	 * Add dirhash hint if necessary
863	 */
864	e2fsck_fix_dirhash_hint(ctx);
865
866	/*
867	 * Hide quota inodes if necessary.
868	 */
869	e2fsck_hide_quota(ctx);
870
871	return;
872}
873
874/*
875 * Check to see if we should backup the master sb to the backup super
876 * blocks.  Returns non-zero if the sb should be backed up.
877 */
878
879/*
880 * A few flags are set on the fly by the kernel, but only in the
881 * primary superblock.  This is actually a bad thing, and we should
882 * try to discourage it in the future.  In particular, for the newer
883 * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
884 * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
885 * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
886 * copying the primary superblock during online resize.
887 *
888 * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
889 * unfortunately, we shouldn't ignore it since if it's not set in the
890 * backup, the extended attributes in the filesystem will be stripped
891 * away.
892 */
893#define FEATURE_RO_COMPAT_IGNORE	(EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
894					 EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
895#define FEATURE_INCOMPAT_IGNORE		(EXT3_FEATURE_INCOMPAT_EXTENTS| \
896					 EXT3_FEATURE_INCOMPAT_RECOVER)
897
898int check_backup_super_block(e2fsck_t ctx)
899{
900	ext2_filsys	fs = ctx->fs;
901	errcode_t	retval;
902	dgrp_t		g;
903	blk64_t		sb;
904	int		ret = 0;
905	char		buf[SUPERBLOCK_SIZE];
906	struct ext2_super_block	*backup_sb;
907
908	/*
909	 * If we are already writing out the backup blocks, then we
910	 * don't need to test.  Also, if the filesystem is invalid, or
911	 * the check was aborted or cancelled, we also don't want to
912	 * do the backup.  If the filesystem was opened read-only then
913	 * we can't do the backup.
914	 */
915	if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
916	    !ext2fs_test_valid(fs) ||
917	    (fs->super->s_state & EXT2_ERROR_FS) ||
918	    (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
919	    (ctx->options & E2F_OPT_READONLY))
920		return 0;
921
922	for (g = 1; g < fs->group_desc_count; g++) {
923		if (!ext2fs_bg_has_super(fs, g))
924			continue;
925
926		sb = ext2fs_group_first_block2(fs, g);
927
928		retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
929					     buf);
930		if (retval)
931			continue;
932		backup_sb = (struct ext2_super_block *) buf;
933#ifdef WORDS_BIGENDIAN
934		ext2fs_swap_super(backup_sb);
935#endif
936		if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
937		    (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
938		    ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
939		     EXT2_MAX_BLOCK_LOG_SIZE) ||
940		    (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
941			continue;
942
943#define SUPER_INCOMPAT_DIFFERENT(x)	\
944	((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=	\
945	 (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
946#define SUPER_RO_COMPAT_DIFFERENT(x)	\
947	((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=	\
948	 (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
949#define SUPER_DIFFERENT(x)		\
950	(fs->super->x != backup_sb->x)
951
952		if (SUPER_DIFFERENT(s_feature_compat) ||
953		    SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
954		    SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
955		    SUPER_DIFFERENT(s_blocks_count) ||
956		    SUPER_DIFFERENT(s_blocks_count_hi) ||
957		    SUPER_DIFFERENT(s_inodes_count) ||
958		    memcmp(fs->super->s_uuid, backup_sb->s_uuid,
959			   sizeof(fs->super->s_uuid)))
960			ret = 1;
961		break;
962	}
963	return ret;
964}
965