super.c revision 2fe2d408a4e231eb5d2342b7f3dbd155563aa755
1/*
2 * e2fsck.c - superblock checks
3 *
4 * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
5 *
6 * %Begin-Header%
7 * This file may be redistributed under the terms of the GNU Public
8 * License.
9 * %End-Header%
10 */
11
12#include "config.h"
13#ifdef HAVE_ERRNO_H
14#include <errno.h>
15#endif
16
17#ifndef EXT2_SKIP_UUID
18#include "uuid/uuid.h"
19#endif
20#include "e2fsck.h"
21#include "problem.h"
22
23#define MIN_CHECK 1
24#define MAX_CHECK 2
25
26static void check_super_value(e2fsck_t ctx, const char *descr,
27			      unsigned long value, int flags,
28			      unsigned long min_val, unsigned long max_val)
29{
30	struct		problem_context pctx;
31
32	if (((flags & MIN_CHECK) && (value < min_val)) ||
33	    ((flags & MAX_CHECK) && (value > max_val))) {
34		clear_problem_context(&pctx);
35		pctx.num = value;
36		pctx.str = descr;
37		fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
38		ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
39	}
40}
41
42/*
43 * helper function to release an inode
44 */
45struct process_block_struct {
46	e2fsck_t 	ctx;
47	char 		*buf;
48	struct problem_context *pctx;
49	int		truncating;
50	int		truncate_offset;
51	e2_blkcnt_t	truncate_block;
52	int		truncated_blocks;
53	int		abort;
54	errcode_t	errcode;
55};
56
57static int release_inode_block(ext2_filsys fs,
58			       blk64_t	*block_nr,
59			       e2_blkcnt_t blockcnt,
60			       blk64_t	ref_blk EXT2FS_ATTR((unused)),
61			       int	ref_offset EXT2FS_ATTR((unused)),
62			       void *priv_data)
63{
64	struct process_block_struct *pb;
65	e2fsck_t 		ctx;
66	struct problem_context	*pctx;
67	blk64_t			blk = *block_nr;
68	int			retval = 0;
69
70	pb = (struct process_block_struct *) priv_data;
71	ctx = pb->ctx;
72	pctx = pb->pctx;
73
74	pctx->blk = blk;
75	pctx->blkcount = blockcnt;
76
77	if (HOLE_BLKADDR(blk))
78		return 0;
79
80	if ((blk < fs->super->s_first_data_block) ||
81	    (blk >= ext2fs_blocks_count(fs->super))) {
82		fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
83	return_abort:
84		pb->abort = 1;
85		return BLOCK_ABORT;
86	}
87
88	if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
89		fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
90		goto return_abort;
91	}
92
93	/*
94	 * If we are deleting an orphan, then we leave the fields alone.
95	 * If we are truncating an orphan, then update the inode fields
96	 * and clean up any partial block data.
97	 */
98	if (pb->truncating) {
99		/*
100		 * We only remove indirect blocks if they are
101		 * completely empty.
102		 */
103		if (blockcnt < 0) {
104			int	i, limit;
105			blk_t	*bp;
106
107			pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
108							pb->buf);
109			if (pb->errcode)
110				goto return_abort;
111
112			limit = fs->blocksize >> 2;
113			for (i = 0, bp = (blk_t *) pb->buf;
114			     i < limit;	 i++, bp++)
115				if (*bp)
116					return 0;
117		}
118		/*
119		 * We don't remove direct blocks until we've reached
120		 * the truncation block.
121		 */
122		if (blockcnt >= 0 && blockcnt < pb->truncate_block)
123			return 0;
124		/*
125		 * If part of the last block needs truncating, we do
126		 * it here.
127		 */
128		if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
129			pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
130							pb->buf);
131			if (pb->errcode)
132				goto return_abort;
133			memset(pb->buf + pb->truncate_offset, 0,
134			       fs->blocksize - pb->truncate_offset);
135			pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
136							 pb->buf);
137			if (pb->errcode)
138				goto return_abort;
139		}
140		pb->truncated_blocks++;
141		*block_nr = 0;
142		retval |= BLOCK_CHANGED;
143	}
144
145	ext2fs_block_alloc_stats2(fs, blk, -1);
146	ctx->free_blocks++;
147	return retval;
148}
149
150/*
151 * This function releases an inode.  Returns 1 if an inconsistency was
152 * found.  If the inode has a link count, then it is being truncated and
153 * not deleted.
154 */
155static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
156				struct ext2_inode *inode, char *block_buf,
157				struct problem_context *pctx)
158{
159	struct process_block_struct 	pb;
160	ext2_filsys			fs = ctx->fs;
161	errcode_t			retval;
162	__u32				count;
163
164	if (!ext2fs_inode_has_valid_blocks2(fs, inode))
165		return 0;
166
167	pb.buf = block_buf + 3 * ctx->fs->blocksize;
168	pb.ctx = ctx;
169	pb.abort = 0;
170	pb.errcode = 0;
171	pb.pctx = pctx;
172	if (inode->i_links_count) {
173		pb.truncating = 1;
174		pb.truncate_block = (e2_blkcnt_t)
175			((EXT2_I_SIZE(inode) + fs->blocksize - 1) /
176			 fs->blocksize);
177		pb.truncate_offset = inode->i_size % fs->blocksize;
178	} else {
179		pb.truncating = 0;
180		pb.truncate_block = 0;
181		pb.truncate_offset = 0;
182	}
183	pb.truncated_blocks = 0;
184	retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
185				      block_buf, release_inode_block, &pb);
186	if (retval) {
187		com_err("release_inode_blocks", retval,
188			_("while calling ext2fs_block_iterate for inode %d"),
189			ino);
190		return 1;
191	}
192	if (pb.abort)
193		return 1;
194
195	/* Refresh the inode since ext2fs_block_iterate may have changed it */
196	e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
197
198	if (pb.truncated_blocks)
199		ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
200
201	if (ext2fs_file_acl_block(fs, inode)) {
202		retval = ext2fs_adjust_ea_refcount2(fs,
203					ext2fs_file_acl_block(fs, inode),
204					block_buf, -1, &count);
205		if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
206			retval = 0;
207			count = 1;
208		}
209		if (retval) {
210			com_err("release_inode_blocks", retval,
211		_("while calling ext2fs_adjust_ea_refcount2 for inode %d"),
212				ino);
213			return 1;
214		}
215		if (count == 0) {
216			ext2fs_block_alloc_stats2(fs,
217					ext2fs_file_acl_block(fs, inode), -1);
218			ctx->free_blocks++;
219		}
220		ext2fs_file_acl_block_set(fs, inode, 0);
221	}
222	return 0;
223}
224
225/*
226 * This function releases all of the orphan inodes.  It returns 1 if
227 * it hit some error, and 0 on success.
228 */
229static int release_orphan_inodes(e2fsck_t ctx)
230{
231	ext2_filsys fs = ctx->fs;
232	ext2_ino_t	ino, next_ino;
233	struct ext2_inode inode;
234	struct problem_context pctx;
235	char *block_buf;
236
237	if ((ino = fs->super->s_last_orphan) == 0)
238		return 0;
239
240	/*
241	 * Win or lose, we won't be using the head of the orphan inode
242	 * list again.
243	 */
244	fs->super->s_last_orphan = 0;
245	ext2fs_mark_super_dirty(fs);
246
247	/*
248	 * If the filesystem contains errors, don't run the orphan
249	 * list, since the orphan list can't be trusted; and we're
250	 * going to be running a full e2fsck run anyway...
251	 */
252	if (fs->super->s_state & EXT2_ERROR_FS)
253		return 0;
254
255	if ((ino < EXT2_FIRST_INODE(fs->super)) ||
256	    (ino > fs->super->s_inodes_count)) {
257		clear_problem_context(&pctx);
258		pctx.ino = ino;
259		fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
260		return 1;
261	}
262
263	block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
264						    "block iterate buffer");
265	e2fsck_read_bitmaps(ctx);
266
267	while (ino) {
268		e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
269		clear_problem_context(&pctx);
270		pctx.ino = ino;
271		pctx.inode = &inode;
272		pctx.str = inode.i_links_count ? _("Truncating") :
273			_("Clearing");
274
275		fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
276
277		next_ino = inode.i_dtime;
278		if (next_ino &&
279		    ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
280		     (next_ino > fs->super->s_inodes_count))) {
281			pctx.ino = next_ino;
282			fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
283			goto return_abort;
284		}
285
286		if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
287			goto return_abort;
288
289		if (!inode.i_links_count) {
290			ext2fs_inode_alloc_stats2(fs, ino, -1,
291						  LINUX_S_ISDIR(inode.i_mode));
292			ctx->free_inodes++;
293			inode.i_dtime = ctx->now;
294		} else {
295			inode.i_dtime = 0;
296		}
297		e2fsck_write_inode(ctx, ino, &inode, "delete_file");
298		ino = next_ino;
299	}
300	ext2fs_free_mem(&block_buf);
301	return 0;
302return_abort:
303	ext2fs_free_mem(&block_buf);
304	return 1;
305}
306
307/*
308 * Check the resize inode to make sure it is sane.  We check both for
309 * the case where on-line resizing is not enabled (in which case the
310 * resize inode should be cleared) as well as the case where on-line
311 * resizing is enabled.
312 */
313void check_resize_inode(e2fsck_t ctx)
314{
315	ext2_filsys fs = ctx->fs;
316	struct ext2_inode inode;
317	struct problem_context	pctx;
318	int		i, gdt_off, ind_off;
319	dgrp_t		j;
320	blk_t		blk, pblk;
321	blk_t		expect;	/* for resize inode, which is 32-bit only */
322	__u32 		*dind_buf = 0, *ind_buf;
323	errcode_t	retval;
324
325	clear_problem_context(&pctx);
326
327	/*
328	 * If the resize inode feature isn't set, then
329	 * s_reserved_gdt_blocks must be zero.
330	 */
331	if (!(fs->super->s_feature_compat &
332	      EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
333		if (fs->super->s_reserved_gdt_blocks) {
334			pctx.num = fs->super->s_reserved_gdt_blocks;
335			if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
336					&pctx)) {
337				fs->super->s_reserved_gdt_blocks = 0;
338				ext2fs_mark_super_dirty(fs);
339			}
340		}
341	}
342
343	/* Read the resize inode */
344	pctx.ino = EXT2_RESIZE_INO;
345	retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
346	if (retval) {
347		if (fs->super->s_feature_compat &
348		    EXT2_FEATURE_COMPAT_RESIZE_INODE)
349			ctx->flags |= E2F_FLAG_RESIZE_INODE;
350		return;
351	}
352
353	/*
354	 * If the resize inode feature isn't set, check to make sure
355	 * the resize inode is cleared; then we're done.
356	 */
357	if (!(fs->super->s_feature_compat &
358	      EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
359		for (i=0; i < EXT2_N_BLOCKS; i++) {
360			if (inode.i_block[i])
361				break;
362		}
363		if ((i < EXT2_N_BLOCKS) &&
364		    fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
365			memset(&inode, 0, sizeof(inode));
366			e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
367					   "clear_resize");
368		}
369		return;
370	}
371
372	/*
373	 * The resize inode feature is enabled; check to make sure the
374	 * only block in use is the double indirect block
375	 */
376	blk = inode.i_block[EXT2_DIND_BLOCK];
377	for (i=0; i < EXT2_N_BLOCKS; i++) {
378		if (i != EXT2_DIND_BLOCK && inode.i_block[i])
379			break;
380	}
381	if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
382	    !(inode.i_mode & LINUX_S_IFREG) ||
383	    (blk < fs->super->s_first_data_block ||
384	     blk >= ext2fs_blocks_count(fs->super))) {
385	resize_inode_invalid:
386		if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
387			memset(&inode, 0, sizeof(inode));
388			e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
389					   "clear_resize");
390			ctx->flags |= E2F_FLAG_RESIZE_INODE;
391		}
392		if (!(ctx->options & E2F_OPT_READONLY)) {
393			fs->super->s_state &= ~EXT2_VALID_FS;
394			ext2fs_mark_super_dirty(fs);
395		}
396		goto cleanup;
397	}
398	dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
399						    "resize dind buffer");
400	ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
401
402	retval = ext2fs_read_ind_block(fs, blk, dind_buf);
403	if (retval)
404		goto resize_inode_invalid;
405
406	gdt_off = fs->desc_blocks;
407	pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
408	if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0)
409		pblk++;	/* Deal with 1024 blocksize bigalloc fs */
410	for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
411	     i++, gdt_off++, pblk++) {
412		gdt_off %= fs->blocksize/4;
413		if (dind_buf[gdt_off] != pblk)
414			goto resize_inode_invalid;
415		retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
416		if (retval)
417			goto resize_inode_invalid;
418		ind_off = 0;
419		for (j = 1; j < fs->group_desc_count; j++) {
420			if (!ext2fs_bg_has_super(fs, j))
421				continue;
422			expect = pblk + (j * fs->super->s_blocks_per_group);
423			if (ind_buf[ind_off] != expect)
424				goto resize_inode_invalid;
425			ind_off++;
426		}
427	}
428
429cleanup:
430	if (dind_buf)
431		ext2fs_free_mem(&dind_buf);
432
433 }
434
435/*
436 * This function checks the dirhash signed/unsigned hint if necessary.
437 */
438static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
439{
440	struct ext2_super_block *sb = ctx->fs->super;
441	struct problem_context pctx;
442	char	c;
443
444	if ((ctx->options & E2F_OPT_READONLY) ||
445	    !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
446	    (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
447		return;
448
449	c = (char) 255;
450
451	clear_problem_context(&pctx);
452	if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
453		if (((int) c) == -1) {
454			sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
455		} else {
456			sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
457		}
458		ext2fs_mark_super_dirty(ctx->fs);
459	}
460}
461
462
463void check_super_block(e2fsck_t ctx)
464{
465	ext2_filsys fs = ctx->fs;
466	blk64_t	first_block, last_block;
467	struct ext2_super_block *sb = fs->super;
468	unsigned int	ipg_max;
469	problem_t	problem;
470	blk64_t	blocks_per_group = fs->super->s_blocks_per_group;
471	__u32	bpg_max, cpg_max;
472	int	inodes_per_block;
473	int	inode_size;
474	int	accept_time_fudge;
475	int	broken_system_clock;
476	dgrp_t	i;
477	blk64_t	should_be;
478	struct problem_context	pctx;
479	blk64_t	free_blocks = 0;
480	ino_t	free_inodes = 0;
481	int     csum_flag, clear_test_fs_flag;
482
483	inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
484	ipg_max = inodes_per_block * (blocks_per_group - 4);
485	if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
486		ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
487	cpg_max = 8 * EXT2_BLOCK_SIZE(sb);
488	if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb))
489		cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb);
490	bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs);
491	if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
492		bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
493
494	ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
495		 sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
496	ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
497		 sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
498	ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
499		sizeof(int) * fs->group_desc_count, "invalid_inode_table");
500
501	clear_problem_context(&pctx);
502
503	/*
504	 * Verify the super block constants...
505	 */
506	check_super_value(ctx, "inodes_count", sb->s_inodes_count,
507			  MIN_CHECK, 1, 0);
508	check_super_value(ctx, "blocks_count", ext2fs_blocks_count(sb),
509			  MIN_CHECK, 1, 0);
510	check_super_value(ctx, "first_data_block", sb->s_first_data_block,
511			  MAX_CHECK, 0, ext2fs_blocks_count(sb));
512	check_super_value(ctx, "log_block_size", sb->s_log_block_size,
513			  MIN_CHECK | MAX_CHECK, 0,
514			  EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
515	check_super_value(ctx, "log_cluster_size",
516			  sb->s_log_cluster_size,
517			  MIN_CHECK | MAX_CHECK, sb->s_log_block_size,
518			  (EXT2_MAX_CLUSTER_LOG_SIZE -
519			   EXT2_MIN_CLUSTER_LOG_SIZE));
520	check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group,
521			  MIN_CHECK | MAX_CHECK, 8, cpg_max);
522	check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
523			  MIN_CHECK | MAX_CHECK, 8, bpg_max);
524	check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
525			  MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
526	check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb),
527			  MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2);
528	check_super_value(ctx, "reserved_gdt_blocks",
529			  sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
530			  fs->blocksize/4);
531	if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
532		check_super_value(ctx, "first_ino", sb->s_first_ino,
533				  MIN_CHECK | MAX_CHECK,
534				  EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
535	inode_size = EXT2_INODE_SIZE(sb);
536	check_super_value(ctx, "inode_size",
537			  inode_size, MIN_CHECK | MAX_CHECK,
538			  EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
539	if (sb->s_blocks_per_group != (sb->s_clusters_per_group *
540				       EXT2FS_CLUSTER_RATIO(fs))) {
541		pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs);
542		pctx.str = "block_size";
543		fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
544		ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
545		return;
546	}
547	if (inode_size & (inode_size - 1)) {
548		pctx.num = inode_size;
549		pctx.str = "inode_size";
550		fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
551		ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
552		return;
553	}
554
555	if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
556	    (ctx->num_blocks < ext2fs_blocks_count(sb))) {
557		pctx.blk = ext2fs_blocks_count(sb);
558		pctx.blk2 = ctx->num_blocks;
559		if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
560			ctx->flags |= E2F_FLAG_ABORT;
561			return;
562		}
563	}
564
565	should_be = (sb->s_log_block_size == 0 &&
566		     EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0;
567	if (sb->s_first_data_block != should_be) {
568		pctx.blk = sb->s_first_data_block;
569		pctx.blk2 = should_be;
570		fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
571		ctx->flags |= E2F_FLAG_ABORT;
572		return;
573	}
574
575	should_be = sb->s_inodes_per_group * fs->group_desc_count;
576	if (sb->s_inodes_count != should_be) {
577		pctx.ino = sb->s_inodes_count;
578		pctx.ino2 = should_be;
579		if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
580			sb->s_inodes_count = should_be;
581			ext2fs_mark_super_dirty(fs);
582		}
583	}
584
585	/* Is 64bit set and extents unset? */
586	if (EXT2_HAS_INCOMPAT_FEATURE(fs->super,
587				      EXT4_FEATURE_INCOMPAT_64BIT) &&
588	    !EXT2_HAS_INCOMPAT_FEATURE(fs->super,
589				       EXT3_FEATURE_INCOMPAT_EXTENTS) &&
590	    fix_problem(ctx, PR_0_64BIT_WITHOUT_EXTENTS, &pctx)) {
591		fs->super->s_feature_incompat |=
592			EXT3_FEATURE_INCOMPAT_EXTENTS;
593		ext2fs_mark_super_dirty(fs);
594	}
595
596	/*
597	 * Verify the group descriptors....
598	 */
599	first_block = sb->s_first_data_block;
600	last_block = ext2fs_blocks_count(sb)-1;
601
602	csum_flag = EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
603					       EXT4_FEATURE_RO_COMPAT_GDT_CSUM);
604	for (i = 0; i < fs->group_desc_count; i++) {
605		pctx.group = i;
606
607		if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
608					       EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
609			first_block = ext2fs_group_first_block2(fs, i);
610			last_block = ext2fs_group_last_block2(fs, i);
611		}
612
613		if ((ext2fs_block_bitmap_loc(fs, i) < first_block) ||
614		    (ext2fs_block_bitmap_loc(fs, i) > last_block)) {
615			pctx.blk = ext2fs_block_bitmap_loc(fs, i);
616			if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
617				ext2fs_block_bitmap_loc_set(fs, i, 0);
618		}
619		if (ext2fs_block_bitmap_loc(fs, i) == 0) {
620			ctx->invalid_block_bitmap_flag[i]++;
621			ctx->invalid_bitmaps++;
622		}
623		if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) ||
624		    (ext2fs_inode_bitmap_loc(fs, i) > last_block)) {
625			pctx.blk = ext2fs_inode_bitmap_loc(fs, i);
626			if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
627				ext2fs_inode_bitmap_loc_set(fs, i, 0);
628		}
629		if (ext2fs_inode_bitmap_loc(fs, i) == 0) {
630			ctx->invalid_inode_bitmap_flag[i]++;
631			ctx->invalid_bitmaps++;
632		}
633		if ((ext2fs_inode_table_loc(fs, i) < first_block) ||
634		    ((ext2fs_inode_table_loc(fs, i) +
635		      fs->inode_blocks_per_group - 1) > last_block)) {
636			pctx.blk = ext2fs_inode_table_loc(fs, i);
637			if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
638				ext2fs_inode_table_loc_set(fs, i, 0);
639		}
640		if (ext2fs_inode_table_loc(fs, i) == 0) {
641			ctx->invalid_inode_table_flag[i]++;
642			ctx->invalid_bitmaps++;
643		}
644		free_blocks += ext2fs_bg_free_blocks_count(fs, i);
645		free_inodes += ext2fs_bg_free_inodes_count(fs, i);
646
647		if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) ||
648		    (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) ||
649		    (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group))
650			ext2fs_unmark_valid(fs);
651
652		should_be = 0;
653		if (!ext2fs_group_desc_csum_verify(fs, i)) {
654			pctx.csum1 = ext2fs_bg_checksum(fs, i);
655			pctx.csum2 = ext2fs_group_desc_csum(fs, i);
656			if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
657				ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
658				ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
659				ext2fs_bg_itable_unused_set(fs, i, 0);
660				should_be = 1;
661			}
662			ext2fs_unmark_valid(fs);
663		}
664
665		if (!csum_flag &&
666		    (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
667		     ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) ||
668		     ext2fs_bg_itable_unused(fs, i) != 0)) {
669			if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
670				ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
671				ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
672				ext2fs_bg_itable_unused_set(fs, i, 0);
673				should_be = 1;
674			}
675			ext2fs_unmark_valid(fs);
676		}
677
678		if (i == fs->group_desc_count - 1 &&
679		    ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
680			if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
681				ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
682				should_be = 1;
683			}
684			ext2fs_unmark_valid(fs);
685		}
686
687		if (csum_flag &&
688		    (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) ||
689		     ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) {
690			pctx.blk = ext2fs_bg_itable_unused(fs, i);
691			if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
692				ext2fs_bg_itable_unused_set(fs, i, 0);
693				should_be = 1;
694			}
695			ext2fs_unmark_valid(fs);
696		}
697
698		if (should_be)
699			ext2fs_group_desc_csum_set(fs, i);
700		/* If the user aborts e2fsck by typing ^C, stop right away */
701		if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
702			return;
703	}
704
705	ctx->free_blocks = EXT2FS_C2B(fs, free_blocks);
706	ctx->free_inodes = free_inodes;
707
708	if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) ||
709	    (sb->s_free_inodes_count > sb->s_inodes_count))
710		ext2fs_unmark_valid(fs);
711
712
713	/*
714	 * If we have invalid bitmaps, set the error state of the
715	 * filesystem.
716	 */
717	if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
718		sb->s_state &= ~EXT2_VALID_FS;
719		ext2fs_mark_super_dirty(fs);
720	}
721
722	clear_problem_context(&pctx);
723
724#ifndef EXT2_SKIP_UUID
725	/*
726	 * If the UUID field isn't assigned, assign it.
727	 */
728	if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
729		if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
730			uuid_generate(sb->s_uuid);
731			fs->flags |= EXT2_FLAG_DIRTY;
732			fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
733		}
734	}
735#endif
736
737	/*
738	 * Check to see if we should disable the test_fs flag
739	 */
740	profile_get_boolean(ctx->profile, "options",
741			    "clear_test_fs_flag", 0, 1,
742			    &clear_test_fs_flag);
743	if (!(ctx->options & E2F_OPT_READONLY) &&
744	    clear_test_fs_flag &&
745	    (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
746	    (fs_proc_check("ext4") || check_for_modules("ext4"))) {
747		if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
748			fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
749			fs->flags |= EXT2_FLAG_DIRTY;
750			fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
751		}
752	}
753
754	/*
755	 * For the Hurd, check to see if the filetype option is set,
756	 * since it doesn't support it.
757	 */
758	if (!(ctx->options & E2F_OPT_READONLY) &&
759	    fs->super->s_creator_os == EXT2_OS_HURD &&
760	    (fs->super->s_feature_incompat &
761	     EXT2_FEATURE_INCOMPAT_FILETYPE)) {
762		if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
763			fs->super->s_feature_incompat &=
764				~EXT2_FEATURE_INCOMPAT_FILETYPE;
765			ext2fs_mark_super_dirty(fs);
766			fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
767		}
768	}
769
770	/*
771	 * If we have any of the compatibility flags set, we need to have a
772	 * revision 1 filesystem.  Most kernels will not check the flags on
773	 * a rev 0 filesystem and we may have corruption issues because of
774	 * the incompatible changes to the filesystem.
775	 */
776	if (!(ctx->options & E2F_OPT_READONLY) &&
777	    fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
778	    (fs->super->s_feature_compat ||
779	     fs->super->s_feature_ro_compat ||
780	     fs->super->s_feature_incompat) &&
781	    fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
782		ext2fs_update_dynamic_rev(fs);
783		ext2fs_mark_super_dirty(fs);
784		fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
785	}
786
787	/*
788	 * Clean up any orphan inodes, if present.
789	 */
790	if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
791		fs->super->s_state &= ~EXT2_VALID_FS;
792		ext2fs_mark_super_dirty(fs);
793	}
794
795	/*
796	 * Unfortunately, due to Windows' unfortunate design decision
797	 * to configure the hardware clock to tick localtime, instead
798	 * of the more proper and less error-prone UTC time, many
799	 * users end up in the situation where the system clock is
800	 * incorrectly set at the time when e2fsck is run.
801	 *
802	 * Historically this was usually due to some distributions
803	 * having buggy init scripts and/or installers that didn't
804	 * correctly detect this case and take appropriate
805	 * countermeasures.  However, it's still possible, despite the
806	 * best efforts of init script and installer authors to not be
807	 * able to detect this misconfiguration, usually due to a
808	 * buggy or misconfigured virtualization manager or the
809	 * installer not having access to a network time server during
810	 * the installation process.  So by default, we allow the
811	 * superblock times to be fudged by up to 24 hours.  This can
812	 * be disabled by setting options.accept_time_fudge to the
813	 * boolean value of false in e2fsck.conf.  We also support
814	 * options.buggy_init_scripts for backwards compatibility.
815	 */
816	profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
817			    0, 1, &accept_time_fudge);
818	profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
819			    0, accept_time_fudge, &accept_time_fudge);
820	ctx->time_fudge = accept_time_fudge ? 86400 : 0;
821
822	profile_get_boolean(ctx->profile, "options", "broken_system_clock",
823			    0, 0, &broken_system_clock);
824
825	/*
826	 * Check to see if the superblock last mount time or last
827	 * write time is in the future.
828	 */
829	if (!broken_system_clock &&
830	    !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
831	    fs->super->s_mtime > (__u32) ctx->now) {
832		pctx.num = fs->super->s_mtime;
833		problem = PR_0_FUTURE_SB_LAST_MOUNT;
834		if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
835			problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
836		if (fix_problem(ctx, problem, &pctx)) {
837			fs->super->s_mtime = ctx->now;
838			fs->flags |= EXT2_FLAG_DIRTY;
839		}
840	}
841	if (!broken_system_clock &&
842	    !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
843	    fs->super->s_wtime > (__u32) ctx->now) {
844		pctx.num = fs->super->s_wtime;
845		problem = PR_0_FUTURE_SB_LAST_WRITE;
846		if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
847			problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
848		if (fix_problem(ctx, problem, &pctx)) {
849			fs->super->s_wtime = ctx->now;
850			fs->flags |= EXT2_FLAG_DIRTY;
851		}
852	}
853
854	/*
855	 * Move the ext3 journal file, if necessary.
856	 */
857	e2fsck_move_ext3_journal(ctx);
858
859	/*
860	 * Fix journal hint, if necessary
861	 */
862	e2fsck_fix_ext3_journal_hint(ctx);
863
864	/*
865	 * Add dirhash hint if necessary
866	 */
867	e2fsck_fix_dirhash_hint(ctx);
868
869	/*
870	 * Hide quota inodes if necessary.
871	 */
872	e2fsck_hide_quota(ctx);
873
874	return;
875}
876
877/*
878 * Check to see if we should backup the master sb to the backup super
879 * blocks.  Returns non-zero if the sb should be backed up.
880 */
881
882/*
883 * A few flags are set on the fly by the kernel, but only in the
884 * primary superblock.  This is actually a bad thing, and we should
885 * try to discourage it in the future.  In particular, for the newer
886 * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
887 * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
888 * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
889 * copying the primary superblock during online resize.
890 *
891 * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
892 * unfortunately, we shouldn't ignore it since if it's not set in the
893 * backup, the extended attributes in the filesystem will be stripped
894 * away.
895 */
896#define FEATURE_RO_COMPAT_IGNORE	(EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
897					 EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
898#define FEATURE_INCOMPAT_IGNORE		(EXT3_FEATURE_INCOMPAT_EXTENTS| \
899					 EXT3_FEATURE_INCOMPAT_RECOVER)
900
901int check_backup_super_block(e2fsck_t ctx)
902{
903	ext2_filsys	fs = ctx->fs;
904	errcode_t	retval;
905	dgrp_t		g;
906	blk64_t		sb;
907	int		ret = 0;
908	char		buf[SUPERBLOCK_SIZE];
909	struct ext2_super_block	*backup_sb;
910
911	/*
912	 * If we are already writing out the backup blocks, then we
913	 * don't need to test.  Also, if the filesystem is invalid, or
914	 * the check was aborted or cancelled, we also don't want to
915	 * do the backup.  If the filesystem was opened read-only then
916	 * we can't do the backup.
917	 */
918	if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
919	    !ext2fs_test_valid(fs) ||
920	    (fs->super->s_state & EXT2_ERROR_FS) ||
921	    (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
922	    (ctx->options & E2F_OPT_READONLY))
923		return 0;
924
925	for (g = 1; g < fs->group_desc_count; g++) {
926		if (!ext2fs_bg_has_super(fs, g))
927			continue;
928
929		sb = ext2fs_group_first_block2(fs, g);
930
931		retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
932					     buf);
933		if (retval)
934			continue;
935		backup_sb = (struct ext2_super_block *) buf;
936#ifdef WORDS_BIGENDIAN
937		ext2fs_swap_super(backup_sb);
938#endif
939		if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
940		    (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
941		    ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
942		     EXT2_MAX_BLOCK_LOG_SIZE) ||
943		    (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
944			continue;
945
946#define SUPER_INCOMPAT_DIFFERENT(x)	\
947	((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=	\
948	 (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
949#define SUPER_RO_COMPAT_DIFFERENT(x)	\
950	((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=	\
951	 (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
952#define SUPER_DIFFERENT(x)		\
953	(fs->super->x != backup_sb->x)
954
955		if (SUPER_DIFFERENT(s_feature_compat) ||
956		    SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
957		    SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
958		    SUPER_DIFFERENT(s_blocks_count) ||
959		    SUPER_DIFFERENT(s_blocks_count_hi) ||
960		    SUPER_DIFFERENT(s_inodes_count) ||
961		    memcmp(fs->super->s_uuid, backup_sb->s_uuid,
962			   sizeof(fs->super->s_uuid)))
963			ret = 1;
964		break;
965	}
966	return ret;
967}
968