1/* 2 * e2fsck.c - superblock checks 3 * 4 * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o. 5 * 6 * %Begin-Header% 7 * This file may be redistributed under the terms of the GNU Public 8 * License. 9 * %End-Header% 10 */ 11 12#include "config.h" 13#ifdef HAVE_ERRNO_H 14#include <errno.h> 15#endif 16 17#ifndef EXT2_SKIP_UUID 18#include "uuid/uuid.h" 19#endif 20#include "e2fsck.h" 21#include "problem.h" 22 23#define MIN_CHECK 1 24#define MAX_CHECK 2 25#define LOG2_CHECK 4 26 27static void check_super_value(e2fsck_t ctx, const char *descr, 28 unsigned long value, int flags, 29 unsigned long min_val, unsigned long max_val) 30{ 31 struct problem_context pctx; 32 33 if ((flags & MIN_CHECK && value < min_val) || 34 (flags & MAX_CHECK && value > max_val) || 35 (flags & LOG2_CHECK && (value & (value - 1)) != 0)) { 36 clear_problem_context(&pctx); 37 pctx.num = value; 38 pctx.str = descr; 39 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx); 40 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */ 41 } 42} 43 44/* 45 * helper function to release an inode 46 */ 47struct process_block_struct { 48 e2fsck_t ctx; 49 char *buf; 50 struct problem_context *pctx; 51 int truncating; 52 int truncate_offset; 53 e2_blkcnt_t truncate_block; 54 int truncated_blocks; 55 int abort; 56 errcode_t errcode; 57}; 58 59static int release_inode_block(ext2_filsys fs, 60 blk64_t *block_nr, 61 e2_blkcnt_t blockcnt, 62 blk64_t ref_blk EXT2FS_ATTR((unused)), 63 int ref_offset EXT2FS_ATTR((unused)), 64 void *priv_data) 65{ 66 struct process_block_struct *pb; 67 e2fsck_t ctx; 68 struct problem_context *pctx; 69 blk64_t blk = *block_nr; 70 int retval = 0; 71 72 pb = (struct process_block_struct *) priv_data; 73 ctx = pb->ctx; 74 pctx = pb->pctx; 75 76 pctx->blk = blk; 77 pctx->blkcount = blockcnt; 78 79 if (blk == 0) 80 return 0; 81 82 if ((blk < fs->super->s_first_data_block) || 83 (blk >= ext2fs_blocks_count(fs->super))) { 84 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx); 85 return_abort: 86 pb->abort = 1; 87 return BLOCK_ABORT; 88 } 89 90 if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) { 91 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx); 92 goto return_abort; 93 } 94 95 /* 96 * If we are deleting an orphan, then we leave the fields alone. 97 * If we are truncating an orphan, then update the inode fields 98 * and clean up any partial block data. 99 */ 100 if (pb->truncating) { 101 /* 102 * We only remove indirect blocks if they are 103 * completely empty. 104 */ 105 if (blockcnt < 0) { 106 int i, limit; 107 blk_t *bp; 108 109 pb->errcode = io_channel_read_blk64(fs->io, blk, 1, 110 pb->buf); 111 if (pb->errcode) 112 goto return_abort; 113 114 limit = fs->blocksize >> 2; 115 for (i = 0, bp = (blk_t *) pb->buf; 116 i < limit; i++, bp++) 117 if (*bp) 118 return 0; 119 } 120 /* 121 * We don't remove direct blocks until we've reached 122 * the truncation block. 123 */ 124 if (blockcnt >= 0 && blockcnt < pb->truncate_block) 125 return 0; 126 /* 127 * If part of the last block needs truncating, we do 128 * it here. 129 */ 130 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) { 131 pb->errcode = io_channel_read_blk64(fs->io, blk, 1, 132 pb->buf); 133 if (pb->errcode) 134 goto return_abort; 135 memset(pb->buf + pb->truncate_offset, 0, 136 fs->blocksize - pb->truncate_offset); 137 pb->errcode = io_channel_write_blk64(fs->io, blk, 1, 138 pb->buf); 139 if (pb->errcode) 140 goto return_abort; 141 } 142 pb->truncated_blocks++; 143 *block_nr = 0; 144 retval |= BLOCK_CHANGED; 145 } 146 147 ext2fs_block_alloc_stats2(fs, blk, -1); 148 ctx->free_blocks++; 149 return retval; 150} 151 152/* 153 * This function releases an inode. Returns 1 if an inconsistency was 154 * found. If the inode has a link count, then it is being truncated and 155 * not deleted. 156 */ 157static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino, 158 struct ext2_inode *inode, char *block_buf, 159 struct problem_context *pctx) 160{ 161 struct process_block_struct pb; 162 ext2_filsys fs = ctx->fs; 163 errcode_t retval; 164 __u32 count; 165 166 if (!ext2fs_inode_has_valid_blocks2(fs, inode)) 167 return 0; 168 169 pb.buf = block_buf + 3 * ctx->fs->blocksize; 170 pb.ctx = ctx; 171 pb.abort = 0; 172 pb.errcode = 0; 173 pb.pctx = pctx; 174 if (inode->i_links_count) { 175 pb.truncating = 1; 176 pb.truncate_block = (e2_blkcnt_t) 177 ((EXT2_I_SIZE(inode) + fs->blocksize - 1) / 178 fs->blocksize); 179 pb.truncate_offset = inode->i_size % fs->blocksize; 180 } else { 181 pb.truncating = 0; 182 pb.truncate_block = 0; 183 pb.truncate_offset = 0; 184 } 185 pb.truncated_blocks = 0; 186 retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE, 187 block_buf, release_inode_block, &pb); 188 if (retval) { 189 com_err("release_inode_blocks", retval, 190 _("while calling ext2fs_block_iterate for inode %d"), 191 ino); 192 return 1; 193 } 194 if (pb.abort) 195 return 1; 196 197 /* Refresh the inode since ext2fs_block_iterate may have changed it */ 198 e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks"); 199 200 if (pb.truncated_blocks) 201 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks); 202 203 if (ext2fs_file_acl_block(fs, inode)) { 204 retval = ext2fs_adjust_ea_refcount3(fs, 205 ext2fs_file_acl_block(fs, inode), 206 block_buf, -1, &count, ino); 207 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) { 208 retval = 0; 209 count = 1; 210 } 211 if (retval) { 212 com_err("release_inode_blocks", retval, 213 _("while calling ext2fs_adjust_ea_refcount2 for inode %d"), 214 ino); 215 return 1; 216 } 217 if (count == 0) { 218 ext2fs_block_alloc_stats2(fs, 219 ext2fs_file_acl_block(fs, inode), -1); 220 ctx->free_blocks++; 221 } 222 ext2fs_file_acl_block_set(fs, inode, 0); 223 } 224 return 0; 225} 226 227/* 228 * This function releases all of the orphan inodes. It returns 1 if 229 * it hit some error, and 0 on success. 230 */ 231static int release_orphan_inodes(e2fsck_t ctx) 232{ 233 ext2_filsys fs = ctx->fs; 234 ext2_ino_t ino, next_ino; 235 struct ext2_inode inode; 236 struct problem_context pctx; 237 char *block_buf; 238 239 if ((ino = fs->super->s_last_orphan) == 0) 240 return 0; 241 242 /* 243 * Win or lose, we won't be using the head of the orphan inode 244 * list again. 245 */ 246 fs->super->s_last_orphan = 0; 247 ext2fs_mark_super_dirty(fs); 248 249 /* 250 * If the filesystem contains errors, don't run the orphan 251 * list, since the orphan list can't be trusted; and we're 252 * going to be running a full e2fsck run anyway... 253 */ 254 if (fs->super->s_state & EXT2_ERROR_FS) 255 return 0; 256 257 if ((ino < EXT2_FIRST_INODE(fs->super)) || 258 (ino > fs->super->s_inodes_count)) { 259 clear_problem_context(&pctx); 260 pctx.ino = ino; 261 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx); 262 return 1; 263 } 264 265 block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4, 266 "block iterate buffer"); 267 e2fsck_read_bitmaps(ctx); 268 269 while (ino) { 270 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes"); 271 clear_problem_context(&pctx); 272 pctx.ino = ino; 273 pctx.inode = &inode; 274 pctx.str = inode.i_links_count ? _("Truncating") : 275 _("Clearing"); 276 277 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx); 278 279 next_ino = inode.i_dtime; 280 if (next_ino && 281 ((next_ino < EXT2_FIRST_INODE(fs->super)) || 282 (next_ino > fs->super->s_inodes_count))) { 283 pctx.ino = next_ino; 284 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx); 285 goto return_abort; 286 } 287 288 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx)) 289 goto return_abort; 290 291 if (!inode.i_links_count) { 292 ext2fs_inode_alloc_stats2(fs, ino, -1, 293 LINUX_S_ISDIR(inode.i_mode)); 294 ctx->free_inodes++; 295 inode.i_dtime = ctx->now; 296 } else { 297 inode.i_dtime = 0; 298 } 299 e2fsck_write_inode(ctx, ino, &inode, "delete_file"); 300 ino = next_ino; 301 } 302 ext2fs_free_mem(&block_buf); 303 return 0; 304return_abort: 305 ext2fs_free_mem(&block_buf); 306 return 1; 307} 308 309/* 310 * Check the resize inode to make sure it is sane. We check both for 311 * the case where on-line resizing is not enabled (in which case the 312 * resize inode should be cleared) as well as the case where on-line 313 * resizing is enabled. 314 */ 315void check_resize_inode(e2fsck_t ctx) 316{ 317 ext2_filsys fs = ctx->fs; 318 struct ext2_inode inode; 319 struct problem_context pctx; 320 int i, gdt_off, ind_off; 321 dgrp_t j; 322 blk_t blk, pblk; 323 blk_t expect; /* for resize inode, which is 32-bit only */ 324 __u32 *dind_buf = 0, *ind_buf; 325 errcode_t retval; 326 327 clear_problem_context(&pctx); 328 329 /* 330 * If the resize inode feature isn't set, then 331 * s_reserved_gdt_blocks must be zero. 332 */ 333 if (!ext2fs_has_feature_resize_inode(fs->super)) { 334 if (fs->super->s_reserved_gdt_blocks) { 335 pctx.num = fs->super->s_reserved_gdt_blocks; 336 if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS, 337 &pctx)) { 338 fs->super->s_reserved_gdt_blocks = 0; 339 ext2fs_mark_super_dirty(fs); 340 } 341 } 342 } 343 344 /* Read the resize inode */ 345 pctx.ino = EXT2_RESIZE_INO; 346 retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode); 347 if (retval) { 348 if (ext2fs_has_feature_resize_inode(fs->super)) 349 ctx->flags |= E2F_FLAG_RESIZE_INODE; 350 return; 351 } 352 353 /* 354 * If the resize inode feature isn't set, check to make sure 355 * the resize inode is cleared; then we're done. 356 */ 357 if (!ext2fs_has_feature_resize_inode(fs->super)) { 358 for (i=0; i < EXT2_N_BLOCKS; i++) { 359 if (inode.i_block[i]) 360 break; 361 } 362 if ((i < EXT2_N_BLOCKS) && 363 fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) { 364 memset(&inode, 0, sizeof(inode)); 365 e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode, 366 "clear_resize"); 367 } 368 return; 369 } 370 371 /* 372 * The resize inode feature is enabled; check to make sure the 373 * only block in use is the double indirect block 374 */ 375 blk = inode.i_block[EXT2_DIND_BLOCK]; 376 for (i=0; i < EXT2_N_BLOCKS; i++) { 377 if (i != EXT2_DIND_BLOCK && inode.i_block[i]) 378 break; 379 } 380 if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count || 381 !(inode.i_mode & LINUX_S_IFREG) || 382 (blk < fs->super->s_first_data_block || 383 blk >= ext2fs_blocks_count(fs->super))) { 384 resize_inode_invalid: 385 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) { 386 memset(&inode, 0, sizeof(inode)); 387 e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode, 388 "clear_resize"); 389 ctx->flags |= E2F_FLAG_RESIZE_INODE; 390 } 391 if (!(ctx->options & E2F_OPT_READONLY)) { 392 fs->super->s_state &= ~EXT2_VALID_FS; 393 ext2fs_mark_super_dirty(fs); 394 } 395 goto cleanup; 396 } 397 dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2, 398 "resize dind buffer"); 399 ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize); 400 401 retval = ext2fs_read_ind_block(fs, blk, dind_buf); 402 if (retval) 403 goto resize_inode_invalid; 404 405 gdt_off = fs->desc_blocks; 406 pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks; 407 if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0) 408 pblk++; /* Deal with 1024 blocksize bigalloc fs */ 409 for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4; 410 i++, gdt_off++, pblk++) { 411 gdt_off %= fs->blocksize/4; 412 if (dind_buf[gdt_off] != pblk) 413 goto resize_inode_invalid; 414 retval = ext2fs_read_ind_block(fs, pblk, ind_buf); 415 if (retval) 416 goto resize_inode_invalid; 417 ind_off = 0; 418 for (j = 1; j < fs->group_desc_count; j++) { 419 if (!ext2fs_bg_has_super(fs, j)) 420 continue; 421 expect = pblk + EXT2_GROUPS_TO_BLOCKS(fs->super, j); 422 if (ind_buf[ind_off] != expect) 423 goto resize_inode_invalid; 424 ind_off++; 425 } 426 } 427 428cleanup: 429 if (dind_buf) 430 ext2fs_free_mem(&dind_buf); 431 432 } 433 434/* 435 * This function checks the dirhash signed/unsigned hint if necessary. 436 */ 437static void e2fsck_fix_dirhash_hint(e2fsck_t ctx) 438{ 439 struct ext2_super_block *sb = ctx->fs->super; 440 struct problem_context pctx; 441 char c; 442 443 if ((ctx->options & E2F_OPT_READONLY) || 444 !ext2fs_has_feature_dir_index(sb) || 445 (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH))) 446 return; 447 448 c = (char) 255; 449 450 clear_problem_context(&pctx); 451 if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) { 452 if (((int) c) == -1) { 453 sb->s_flags |= EXT2_FLAGS_SIGNED_HASH; 454 } else { 455 sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH; 456 } 457 ext2fs_mark_super_dirty(ctx->fs); 458 } 459} 460 461 462void check_super_block(e2fsck_t ctx) 463{ 464 ext2_filsys fs = ctx->fs; 465 blk64_t first_block, last_block; 466 struct ext2_super_block *sb = fs->super; 467 unsigned int ipg_max; 468 problem_t problem; 469 blk64_t blocks_per_group = fs->super->s_blocks_per_group; 470 __u32 bpg_max, cpg_max; 471 int inodes_per_block; 472 int inode_size; 473 int accept_time_fudge; 474 int broken_system_clock; 475 dgrp_t i; 476 blk64_t should_be; 477 struct problem_context pctx; 478 blk64_t free_blocks = 0; 479 ino_t free_inodes = 0; 480 int csum_flag, clear_test_fs_flag; 481 482 inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super); 483 ipg_max = inodes_per_block * (blocks_per_group - 4); 484 if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb)) 485 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb); 486 cpg_max = 8 * EXT2_BLOCK_SIZE(sb); 487 if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb)) 488 cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb); 489 bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs); 490 if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb)) 491 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb); 492 493 ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx, 494 sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap"); 495 ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx, 496 sizeof(int) * fs->group_desc_count, "invalid_block_bitmap"); 497 ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx, 498 sizeof(int) * fs->group_desc_count, "invalid_inode_table"); 499 500 clear_problem_context(&pctx); 501 502 /* 503 * Verify the super block constants... 504 */ 505 check_super_value(ctx, "inodes_count", sb->s_inodes_count, 506 MIN_CHECK, 1, 0); 507 check_super_value(ctx, "blocks_count", ext2fs_blocks_count(sb), 508 MIN_CHECK, 1, 0); 509 check_super_value(ctx, "first_data_block", sb->s_first_data_block, 510 MAX_CHECK, 0, ext2fs_blocks_count(sb)); 511 check_super_value(ctx, "log_block_size", sb->s_log_block_size, 512 MIN_CHECK | MAX_CHECK, 0, 513 EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE); 514 check_super_value(ctx, "log_cluster_size", 515 sb->s_log_cluster_size, 516 MIN_CHECK | MAX_CHECK, sb->s_log_block_size, 517 (EXT2_MAX_CLUSTER_LOG_SIZE - 518 EXT2_MIN_CLUSTER_LOG_SIZE)); 519 check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group, 520 MIN_CHECK | MAX_CHECK, 8, cpg_max); 521 check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group, 522 MIN_CHECK | MAX_CHECK, 8, bpg_max); 523 check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group, 524 MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max); 525 check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb), 526 MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2); 527 check_super_value(ctx, "reserved_gdt_blocks", 528 sb->s_reserved_gdt_blocks, MAX_CHECK, 0, 529 fs->blocksize / sizeof(__u32)); 530 check_super_value(ctx, "desc_size", 531 sb->s_desc_size, MAX_CHECK | LOG2_CHECK, 0, 532 EXT2_MAX_DESC_SIZE); 533 if (sb->s_rev_level > EXT2_GOOD_OLD_REV) 534 check_super_value(ctx, "first_ino", sb->s_first_ino, 535 MIN_CHECK | MAX_CHECK, 536 EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count); 537 inode_size = EXT2_INODE_SIZE(sb); 538 check_super_value(ctx, "inode_size", 539 inode_size, MIN_CHECK | MAX_CHECK | LOG2_CHECK, 540 EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize); 541 if (sb->s_blocks_per_group != (sb->s_clusters_per_group * 542 EXT2FS_CLUSTER_RATIO(fs))) { 543 pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs); 544 pctx.str = "block_size"; 545 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx); 546 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */ 547 return; 548 } 549 550 if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) && 551 (ctx->num_blocks < ext2fs_blocks_count(sb))) { 552 pctx.blk = ext2fs_blocks_count(sb); 553 pctx.blk2 = ctx->num_blocks; 554 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) { 555 ctx->flags |= E2F_FLAG_ABORT; 556 return; 557 } 558 } 559 560 should_be = (sb->s_log_block_size == 0 && 561 EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0; 562 if (sb->s_first_data_block != should_be) { 563 pctx.blk = sb->s_first_data_block; 564 pctx.blk2 = should_be; 565 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx); 566 ctx->flags |= E2F_FLAG_ABORT; 567 return; 568 } 569 570 should_be = (blk64_t)sb->s_inodes_per_group * fs->group_desc_count; 571 if (should_be > UINT_MAX) 572 should_be = UINT_MAX; 573 if (sb->s_inodes_count != should_be) { 574 pctx.ino = sb->s_inodes_count; 575 pctx.ino2 = should_be; 576 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) { 577 sb->s_inodes_count = should_be; 578 ext2fs_mark_super_dirty(fs); 579 } 580 } 581 if (EXT2_INODE_SIZE(sb) > EXT2_GOOD_OLD_INODE_SIZE) { 582 unsigned min = 583 sizeof(((struct ext2_inode_large *) 0)->i_extra_isize) + 584 sizeof(((struct ext2_inode_large *) 0)->i_checksum_hi); 585 unsigned max = EXT2_INODE_SIZE(sb) - EXT2_GOOD_OLD_INODE_SIZE; 586 pctx.num = sb->s_min_extra_isize; 587 if (sb->s_min_extra_isize && 588 (sb->s_min_extra_isize < min || 589 sb->s_min_extra_isize > max || 590 sb->s_min_extra_isize & 3) && 591 fix_problem(ctx, PR_0_BAD_MIN_EXTRA_ISIZE, &pctx)) { 592 sb->s_min_extra_isize = 593 (sizeof(struct ext2_inode_large) - 594 EXT2_GOOD_OLD_INODE_SIZE); 595 ext2fs_mark_super_dirty(fs); 596 } 597 pctx.num = sb->s_want_extra_isize; 598 if (sb->s_want_extra_isize && 599 (sb->s_want_extra_isize < min || 600 sb->s_want_extra_isize > max || 601 sb->s_want_extra_isize & 3) && 602 fix_problem(ctx, PR_0_BAD_WANT_EXTRA_ISIZE, &pctx)) { 603 sb->s_want_extra_isize = 604 (sizeof(struct ext2_inode_large) - 605 EXT2_GOOD_OLD_INODE_SIZE); 606 ext2fs_mark_super_dirty(fs); 607 } 608 } 609 610 /* Are metadata_csum and uninit_bg both set? */ 611 if (ext2fs_has_feature_metadata_csum(fs->super) && 612 ext2fs_has_feature_gdt_csum(fs->super) && 613 fix_problem(ctx, PR_0_META_AND_GDT_CSUM_SET, &pctx)) { 614 ext2fs_clear_feature_gdt_csum(fs->super); 615 ext2fs_mark_super_dirty(fs); 616 for (i = 0; i < fs->group_desc_count; i++) 617 ext2fs_group_desc_csum_set(fs, i); 618 } 619 620 /* We can't have ^metadata_csum,metadata_csum_seed */ 621 if (!ext2fs_has_feature_metadata_csum(fs->super) && 622 ext2fs_has_feature_csum_seed(fs->super) && 623 fix_problem(ctx, PR_0_CSUM_SEED_WITHOUT_META_CSUM, &pctx)) { 624 ext2fs_clear_feature_csum_seed(fs->super); 625 fs->super->s_checksum_seed = 0; 626 ext2fs_mark_super_dirty(fs); 627 } 628 629 /* Is 64bit set and extents unset? */ 630 if (ext2fs_has_feature_64bit(fs->super) && 631 !ext2fs_has_feature_extents(fs->super) && 632 fix_problem(ctx, PR_0_64BIT_WITHOUT_EXTENTS, &pctx)) { 633 ext2fs_set_feature_extents(fs->super); 634 ext2fs_mark_super_dirty(fs); 635 } 636 637 /* Did user ask us to convert files to extents? */ 638 if (ctx->options & E2F_OPT_CONVERT_BMAP) { 639 ext2fs_set_feature_extents(fs->super); 640 ext2fs_mark_super_dirty(fs); 641 } 642 643 if (ext2fs_has_feature_meta_bg(fs->super) && 644 (fs->super->s_first_meta_bg > fs->desc_blocks)) { 645 pctx.group = fs->desc_blocks; 646 pctx.num = fs->super->s_first_meta_bg; 647 if (fix_problem(ctx, PR_0_FIRST_META_BG_TOO_BIG, &pctx)) { 648 ext2fs_clear_feature_meta_bg(fs->super); 649 fs->super->s_first_meta_bg = 0; 650 ext2fs_mark_super_dirty(fs); 651 } 652 } 653 654 /* 655 * Verify the group descriptors.... 656 */ 657 first_block = sb->s_first_data_block; 658 last_block = ext2fs_blocks_count(sb)-1; 659 660 csum_flag = ext2fs_has_group_desc_csum(fs); 661 for (i = 0; i < fs->group_desc_count; i++) { 662 pctx.group = i; 663 664 if (!ext2fs_has_feature_flex_bg(fs->super)) { 665 first_block = ext2fs_group_first_block2(fs, i); 666 last_block = ext2fs_group_last_block2(fs, i); 667 } 668 669 if ((ext2fs_block_bitmap_loc(fs, i) < first_block) || 670 (ext2fs_block_bitmap_loc(fs, i) > last_block)) { 671 pctx.blk = ext2fs_block_bitmap_loc(fs, i); 672 if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx)) 673 ext2fs_block_bitmap_loc_set(fs, i, 0); 674 } 675 if (ext2fs_block_bitmap_loc(fs, i) == 0) { 676 ctx->invalid_block_bitmap_flag[i]++; 677 ctx->invalid_bitmaps++; 678 } 679 if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) || 680 (ext2fs_inode_bitmap_loc(fs, i) > last_block)) { 681 pctx.blk = ext2fs_inode_bitmap_loc(fs, i); 682 if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx)) 683 ext2fs_inode_bitmap_loc_set(fs, i, 0); 684 } 685 if (ext2fs_inode_bitmap_loc(fs, i) == 0) { 686 ctx->invalid_inode_bitmap_flag[i]++; 687 ctx->invalid_bitmaps++; 688 } 689 if ((ext2fs_inode_table_loc(fs, i) < first_block) || 690 ((ext2fs_inode_table_loc(fs, i) + 691 fs->inode_blocks_per_group - 1) > last_block)) { 692 pctx.blk = ext2fs_inode_table_loc(fs, i); 693 if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx)) 694 ext2fs_inode_table_loc_set(fs, i, 0); 695 } 696 if (ext2fs_inode_table_loc(fs, i) == 0) { 697 ctx->invalid_inode_table_flag[i]++; 698 ctx->invalid_bitmaps++; 699 } 700 free_blocks += ext2fs_bg_free_blocks_count(fs, i); 701 free_inodes += ext2fs_bg_free_inodes_count(fs, i); 702 703 if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) || 704 (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) || 705 (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group)) 706 ext2fs_unmark_valid(fs); 707 708 should_be = 0; 709 if (!ext2fs_group_desc_csum_verify(fs, i)) { 710 pctx.csum1 = ext2fs_bg_checksum(fs, i); 711 pctx.csum2 = ext2fs_group_desc_csum(fs, i); 712 if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) { 713 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT); 714 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT); 715 ext2fs_bg_itable_unused_set(fs, i, 0); 716 should_be = 1; 717 } 718 ext2fs_unmark_valid(fs); 719 } 720 721 if (!csum_flag && 722 (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) || 723 ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) || 724 ext2fs_bg_itable_unused(fs, i) != 0)) { 725 if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) { 726 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT); 727 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT); 728 ext2fs_bg_itable_unused_set(fs, i, 0); 729 should_be = 1; 730 } 731 ext2fs_unmark_valid(fs); 732 } 733 734 if (i == fs->group_desc_count - 1 && 735 ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) { 736 if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) { 737 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT); 738 should_be = 1; 739 } 740 ext2fs_unmark_valid(fs); 741 } 742 743 if (csum_flag && 744 (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) || 745 ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) { 746 pctx.blk = ext2fs_bg_itable_unused(fs, i); 747 if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) { 748 ext2fs_bg_itable_unused_set(fs, i, 0); 749 should_be = 1; 750 } 751 ext2fs_unmark_valid(fs); 752 } 753 754 if (should_be) 755 ext2fs_group_desc_csum_set(fs, i); 756 /* If the user aborts e2fsck by typing ^C, stop right away */ 757 if (ctx->flags & E2F_FLAG_SIGNAL_MASK) 758 return; 759 } 760 761 ctx->free_blocks = EXT2FS_C2B(fs, free_blocks); 762 ctx->free_inodes = free_inodes; 763 764 if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) || 765 (sb->s_free_inodes_count > sb->s_inodes_count)) 766 ext2fs_unmark_valid(fs); 767 768 769 /* 770 * If we have invalid bitmaps, set the error state of the 771 * filesystem. 772 */ 773 if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) { 774 sb->s_state &= ~EXT2_VALID_FS; 775 ext2fs_mark_super_dirty(fs); 776 } 777 778 clear_problem_context(&pctx); 779 780#ifndef EXT2_SKIP_UUID 781 /* 782 * If the UUID field isn't assigned, assign it. 783 * Skip if checksums are enabled and the filesystem is mounted, 784 * if the id changes under the kernel remounting rw may fail. 785 */ 786 if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid) && 787 !ext2fs_has_feature_metadata_csum(ctx->fs->super) && 788 (!csum_flag || !(ctx->mount_flags & EXT2_MF_MOUNTED))) { 789 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) { 790 uuid_generate(sb->s_uuid); 791 ext2fs_init_csum_seed(fs); 792 fs->flags |= EXT2_FLAG_DIRTY; 793 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; 794 } 795 } 796#endif 797 798 /* 799 * Check to see if we should disable the test_fs flag 800 */ 801 profile_get_boolean(ctx->profile, "options", 802 "clear_test_fs_flag", 0, 1, 803 &clear_test_fs_flag); 804 if (!(ctx->options & E2F_OPT_READONLY) && 805 clear_test_fs_flag && 806 (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) && 807 (fs_proc_check("ext4") || check_for_modules("ext4"))) { 808 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) { 809 fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS; 810 fs->flags |= EXT2_FLAG_DIRTY; 811 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; 812 } 813 } 814 815 /* 816 * For the Hurd, check to see if the filetype option is set, 817 * since it doesn't support it. 818 */ 819 if (!(ctx->options & E2F_OPT_READONLY) && 820 fs->super->s_creator_os == EXT2_OS_HURD && 821 ext2fs_has_feature_filetype(fs->super)) { 822 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) { 823 ext2fs_clear_feature_filetype(fs->super); 824 ext2fs_mark_super_dirty(fs); 825 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; 826 } 827 } 828 829 /* 830 * If we have any of the compatibility flags set, we need to have a 831 * revision 1 filesystem. Most kernels will not check the flags on 832 * a rev 0 filesystem and we may have corruption issues because of 833 * the incompatible changes to the filesystem. 834 */ 835 if (!(ctx->options & E2F_OPT_READONLY) && 836 fs->super->s_rev_level == EXT2_GOOD_OLD_REV && 837 (fs->super->s_feature_compat || 838 fs->super->s_feature_ro_compat || 839 fs->super->s_feature_incompat) && 840 fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) { 841 ext2fs_update_dynamic_rev(fs); 842 ext2fs_mark_super_dirty(fs); 843 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY; 844 } 845 846 /* 847 * Clean up any orphan inodes, if present. 848 */ 849 if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) { 850 fs->super->s_state &= ~EXT2_VALID_FS; 851 ext2fs_mark_super_dirty(fs); 852 } 853 854 /* 855 * Unfortunately, due to Windows' unfortunate design decision 856 * to configure the hardware clock to tick localtime, instead 857 * of the more proper and less error-prone UTC time, many 858 * users end up in the situation where the system clock is 859 * incorrectly set at the time when e2fsck is run. 860 * 861 * Historically this was usually due to some distributions 862 * having buggy init scripts and/or installers that didn't 863 * correctly detect this case and take appropriate 864 * countermeasures. However, it's still possible, despite the 865 * best efforts of init script and installer authors to not be 866 * able to detect this misconfiguration, usually due to a 867 * buggy or misconfigured virtualization manager or the 868 * installer not having access to a network time server during 869 * the installation process. So by default, we allow the 870 * superblock times to be fudged by up to 24 hours. This can 871 * be disabled by setting options.accept_time_fudge to the 872 * boolean value of false in e2fsck.conf. We also support 873 * options.buggy_init_scripts for backwards compatibility. 874 */ 875 profile_get_boolean(ctx->profile, "options", "accept_time_fudge", 876 0, 1, &accept_time_fudge); 877 profile_get_boolean(ctx->profile, "options", "buggy_init_scripts", 878 0, accept_time_fudge, &accept_time_fudge); 879 ctx->time_fudge = accept_time_fudge ? 86400 : 0; 880 881 profile_get_boolean(ctx->profile, "options", "broken_system_clock", 882 0, 0, &broken_system_clock); 883 884 /* 885 * Check to see if the superblock last mount time or last 886 * write time is in the future. 887 */ 888 if (!broken_system_clock && 889 !(ctx->flags & E2F_FLAG_TIME_INSANE) && 890 fs->super->s_mtime > (__u32) ctx->now) { 891 pctx.num = fs->super->s_mtime; 892 problem = PR_0_FUTURE_SB_LAST_MOUNT; 893 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge) 894 problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED; 895 if (fix_problem(ctx, problem, &pctx)) { 896 fs->super->s_mtime = ctx->now; 897 fs->flags |= EXT2_FLAG_DIRTY; 898 } 899 } 900 if (!broken_system_clock && 901 !(ctx->flags & E2F_FLAG_TIME_INSANE) && 902 fs->super->s_wtime > (__u32) ctx->now) { 903 pctx.num = fs->super->s_wtime; 904 problem = PR_0_FUTURE_SB_LAST_WRITE; 905 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge) 906 problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED; 907 if (fix_problem(ctx, problem, &pctx)) { 908 fs->super->s_wtime = ctx->now; 909 fs->flags |= EXT2_FLAG_DIRTY; 910 } 911 } 912 913 /* 914 * Move the ext3 journal file, if necessary. 915 */ 916 e2fsck_move_ext3_journal(ctx); 917 918 /* 919 * Fix journal hint, if necessary 920 */ 921 e2fsck_fix_ext3_journal_hint(ctx); 922 923 /* 924 * Add dirhash hint if necessary 925 */ 926 e2fsck_fix_dirhash_hint(ctx); 927 928 /* 929 * Hide quota inodes if necessary. 930 */ 931 e2fsck_hide_quota(ctx); 932 933 return; 934} 935 936/* 937 * Check to see if we should backup the master sb to the backup super 938 * blocks. Returns non-zero if the sb should be backed up. 939 */ 940 941/* 942 * A few flags are set on the fly by the kernel, but only in the 943 * primary superblock. This is actually a bad thing, and we should 944 * try to discourage it in the future. In particular, for the newer 945 * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and 946 * EXT3_FEATURE_INCOMPAT_EXTENTS. So some of these may go away in the 947 * future. EXT3_FEATURE_INCOMPAT_RECOVER may also get set when 948 * copying the primary superblock during online resize. 949 * 950 * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but 951 * unfortunately, we shouldn't ignore it since if it's not set in the 952 * backup, the extended attributes in the filesystem will be stripped 953 * away. 954 */ 955#define FEATURE_RO_COMPAT_IGNORE (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \ 956 EXT4_FEATURE_RO_COMPAT_DIR_NLINK) 957#define FEATURE_INCOMPAT_IGNORE (EXT3_FEATURE_INCOMPAT_EXTENTS| \ 958 EXT3_FEATURE_INCOMPAT_RECOVER) 959 960int check_backup_super_block(e2fsck_t ctx) 961{ 962 ext2_filsys fs = ctx->fs; 963 errcode_t retval; 964 dgrp_t g; 965 blk64_t sb; 966 int ret = 0; 967 char buf[SUPERBLOCK_SIZE]; 968 struct ext2_super_block *backup_sb; 969 970 /* 971 * If we are already writing out the backup blocks, then we 972 * don't need to test. Also, if the filesystem is invalid, or 973 * the check was aborted or cancelled, we also don't want to 974 * do the backup. If the filesystem was opened read-only then 975 * we can't do the backup. 976 */ 977 if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) || 978 !ext2fs_test_valid(fs) || 979 (fs->super->s_state & EXT2_ERROR_FS) || 980 (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) || 981 (ctx->options & E2F_OPT_READONLY)) 982 return 0; 983 984 for (g = 1; g < fs->group_desc_count; g++) { 985 if (!ext2fs_bg_has_super(fs, g)) 986 continue; 987 988 sb = ext2fs_group_first_block2(fs, g); 989 990 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE, 991 buf); 992 if (retval) 993 continue; 994 backup_sb = (struct ext2_super_block *) buf; 995#ifdef WORDS_BIGENDIAN 996 ext2fs_swap_super(backup_sb); 997#endif 998 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) || 999 (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) || 1000 ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) > 1001 EXT2_MAX_BLOCK_LOG_SIZE) || 1002 (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE)) 1003 continue; 1004 1005#define SUPER_INCOMPAT_DIFFERENT(x) \ 1006 ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) != \ 1007 (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE)) 1008#define SUPER_RO_COMPAT_DIFFERENT(x) \ 1009 ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) != \ 1010 (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE)) 1011#define SUPER_DIFFERENT(x) \ 1012 (fs->super->x != backup_sb->x) 1013 1014 if (SUPER_DIFFERENT(s_feature_compat) || 1015 SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) || 1016 SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) || 1017 SUPER_DIFFERENT(s_blocks_count) || 1018 SUPER_DIFFERENT(s_blocks_count_hi) || 1019 SUPER_DIFFERENT(s_inodes_count) || 1020 memcmp(fs->super->s_uuid, backup_sb->s_uuid, 1021 sizeof(fs->super->s_uuid))) 1022 ret = 1; 1023 break; 1024 } 1025 return ret; 1026} 1027