e2fsck/journal.c

   1 /*
   2  * journal.c --- code for handling the "ext3" journal
   3  *
   4  * Copyright (C) 2000 Andreas Dilger
   5  * Copyright (C) 2000 Theodore Ts'o
   6  *
   7  * Parts of the code are based on fs/jfs/journal.c by Stephen C. Tweedie
   8  * Copyright (C) 1999 Red Hat Software
   9  *
  10  * This file may be redistributed under the terms of the
  11  * GNU General Public License version 2 or at your discretion
  12  * any later version.
  13  */
  14
  15 #include "config.h"
  16 #ifdef HAVE_SYS_MOUNT_H
  17 #include <sys/param.h>
  18 #include <sys/mount.h>
  19 #define MNT_FL (MS_MGC_VAL | MS_RDONLY)
  20 #endif
  21 #ifdef HAVE_SYS_STAT_H
  22 #include <sys/stat.h>
  23 #endif
  24
  25 #define E2FSCK_INCLUDE_INLINE_FUNCS
  26 #include "jfs_user.h"
  27 #include "problem.h"
  28 #include "uuid/uuid.h"
  29
  30 #ifdef CONFIG_JBD_DEBUG         /* Enabled by configure --enable-jfs-debug */
  31 static int bh_count = 0;
  32 #endif
  33
  34 /*
  35  * Define USE_INODE_IO to use the inode_io.c / fileio.c codepaths.
  36  * This creates a larger static binary, and a smaller binary using
  37  * shared libraries.  It's also probably slightly less CPU-efficient,
  38  * which is why it's not on by default.  But, it's a good way of
  39  * testing the functions in inode_io.c and fileio.c.
  40  */
  41 #undef USE_INODE_IO
  42
  43 /* Kernel compatibility functions for handling the journal.  These allow us
  44  * to use the recovery.c file virtually unchanged from the kernel, so we
  45  * don't have to do much to keep kernel and user recovery in sync.
  46  */
  47 int journal_bmap(journal_t *journal, blk64_t block, unsigned long long *phys)
  48 {
  49 #ifdef USE_INODE_IO
  50         *phys = block;
  51         return 0;
  52 #else
  53         struct inode    *inode = journal->j_inode;
  54         errcode_t       retval;
  55         blk64_t         pblk;
  56
  57         if (!inode) {
  58                 *phys = block;
  59                 return 0;
  60         }
  61
  62         retval= ext2fs_bmap2(inode->i_ctx->fs, inode->i_ino,
  63                              &inode->i_ext2, NULL, 0, block, 0, &pblk);
  64         *phys = pblk;
  65         return (int) retval;
  66 #endif
  67 }
  68
  69 struct buffer_head *getblk(kdev_t kdev, blk64_t blocknr, int blocksize)
  70 {
  71         struct buffer_head *bh;
  72         int bufsize = sizeof(*bh) + kdev->k_ctx->fs->blocksize -
  73                 sizeof(bh->b_data);
  74
  75         bh = e2fsck_allocate_memory(kdev->k_ctx, bufsize, "block buffer");
  76         if (!bh)
  77                 return NULL;
  78
  79 #ifdef CONFIG_JBD_DEBUG
  80         if (journal_enable_debug >= 3)
  81                 bh_count++;
  82 #endif
  83         jfs_debug(4, "getblk for block %llu (%d bytes)(total %d)\n",
  84                   (unsigned long long) blocknr, blocksize, bh_count);
  85
  86         bh->b_ctx = kdev->k_ctx;
  87         if (kdev->k_dev == K_DEV_FS)
  88                 bh->b_io = kdev->k_ctx->fs->io;
  89         else
  90                 bh->b_io = kdev->k_ctx->journal_io;
  91         bh->b_size = blocksize;
  92         bh->b_blocknr = blocknr;
  93
  94         return bh;
  95 }
  96
  97 void sync_blockdev(kdev_t kdev)
  98 {
  99         io_channel      io;
 100
 101         if (kdev->k_dev == K_DEV_FS)
 102                 io = kdev->k_ctx->fs->io;
 103         else
 104                 io = kdev->k_ctx->journal_io;
 105
 106         io_channel_flush(io);
 107 }
 108
 109 void ll_rw_block(int rw, int nr, struct buffer_head *bhp[])
 110 {
 111         errcode_t retval;
 112         struct buffer_head *bh;
 113
 114         for (; nr > 0; --nr) {
 115                 bh = *bhp++;
 116                 if (rw == READ && !bh->b_uptodate) {
 117                         jfs_debug(3, "reading block %llu/%p\n",
 118                                   bh->b_blocknr, (void *) bh);
 119                         retval = io_channel_read_blk64(bh->b_io,
 120                                                      bh->b_blocknr,
 121                                                      1, bh->b_data);
 122                         if (retval) {
 123                                 com_err(bh->b_ctx->device_name, retval,
 124                                         "while reading block %llu\n",
 125                                         bh->b_blocknr);
 126                                 bh->b_err = (int) retval;
 127                                 continue;
 128                         }
 129                         bh->b_uptodate = 1;
 130                 } else if (rw == WRITE && bh->b_dirty) {
 131                         jfs_debug(3, "writing block %llu/%p\n",
 132                                   bh->b_blocknr,
 133                                   (void *) bh);
 134                         retval = io_channel_write_blk64(bh->b_io,
 135                                                       bh->b_blocknr,
 136                                                       1, bh->b_data);
 137                         if (retval) {
 138                                 com_err(bh->b_ctx->device_name, retval,
 139                                         "while writing block %llu\n",
 140                                         bh->b_blocknr);
 141                                 bh->b_err = (int) retval;
 142                                 continue;
 143                         }
 144                         bh->b_dirty = 0;
 145                         bh->b_uptodate = 1;
 146                 } else {
 147                         jfs_debug(3, "no-op %s for block %llu\n",
 148                                   rw == READ ? "read" : "write",
 149                                   bh->b_blocknr);
 150                 }
 151         }
 152 }
 153
 154 void mark_buffer_dirty(struct buffer_head *bh)
 155 {
 156         bh->b_dirty = 1;
 157 }
 158
 159 static void mark_buffer_clean(struct buffer_head * bh)
 160 {
 161         bh->b_dirty = 0;
 162 }
 163
 164 void brelse(struct buffer_head *bh)
 165 {
 166         if (bh->b_dirty)
 167                 ll_rw_block(WRITE, 1, &bh);
 168         jfs_debug(3, "freeing block %llu/%p (total %d)\n",
 169                   bh->b_blocknr, (void *) bh, --bh_count);
 170         ext2fs_free_mem(&bh);
 171 }
 172
 173 int buffer_uptodate(struct buffer_head *bh)
 174 {
 175         return bh->b_uptodate;
 176 }
 177
 178 void mark_buffer_uptodate(struct buffer_head *bh, int val)
 179 {
 180         bh->b_uptodate = val;
 181 }
 182
 183 void wait_on_buffer(struct buffer_head *bh)
 184 {
 185         if (!bh->b_uptodate)
 186                 ll_rw_block(READ, 1, &bh);
 187 }
 188
 189
 190 static void e2fsck_clear_recover(e2fsck_t ctx, int error)
 191 {
 192         ctx->fs->super->s_feature_incompat &= ~EXT3_FEATURE_INCOMPAT_RECOVER;
 193
 194         /* if we had an error doing journal recovery, we need a full fsck */
 195         if (error)
 196                 ctx->fs->super->s_state &= ~EXT2_VALID_FS;
 197         ext2fs_mark_super_dirty(ctx->fs);
 198 }
 199
 200 /*
 201  * This is a helper function to check the validity of the journal.
 202  */
 203 struct process_block_struct {
 204         e2_blkcnt_t     last_block;
 205 };
 206
 207 static int process_journal_block(ext2_filsys fs,
 208                                  blk64_t        *block_nr,
 209                                  e2_blkcnt_t blockcnt,
 210                                  blk64_t ref_block EXT2FS_ATTR((unused)),
 211                                  int ref_offset EXT2FS_ATTR((unused)),
 212                                  void *priv_data)
 213 {
 214         struct process_block_struct *p;
 215         blk64_t blk = *block_nr;
 216
 217         p = (struct process_block_struct *) priv_data;
 218
 219         if (!blk || blk < fs->super->s_first_data_block ||
 220             blk >= ext2fs_blocks_count(fs->super))
 221                 return BLOCK_ABORT;
 222
 223         if (blockcnt >= 0)
 224                 p->last_block = blockcnt;
 225         return 0;
 226 }
 227
 228 static errcode_t e2fsck_get_journal(e2fsck_t ctx, journal_t **ret_journal)
 229 {
 230         struct process_block_struct pb;
 231         struct ext2_super_block *sb = ctx->fs->super;
 232         struct ext2_super_block jsuper;
 233         struct problem_context  pctx;
 234         struct buffer_head      *bh;
 235         struct inode            *j_inode = NULL;
 236         struct kdev_s           *dev_fs = NULL, *dev_journal;
 237         const char              *journal_name = 0;
 238         journal_t               *journal = NULL;
 239         errcode_t               retval = 0;
 240         io_manager              io_ptr = 0;
 241         unsigned long long      start = 0;
 242         int                     ext_journal = 0;
 243         int                     tried_backup_jnl = 0;
 244
 245         clear_problem_context(&pctx);
 246
 247         journal = e2fsck_allocate_memory(ctx, sizeof(journal_t), "journal");
 248         if (!journal) {
 249                 return EXT2_ET_NO_MEMORY;
 250         }
 251
 252         dev_fs = e2fsck_allocate_memory(ctx, 2*sizeof(struct kdev_s), "kdev");
 253         if (!dev_fs) {
 254                 retval = EXT2_ET_NO_MEMORY;
 255                 goto errout;
 256         }
 257         dev_journal = dev_fs+1;
 258
 259         dev_fs->k_ctx = dev_journal->k_ctx = ctx;
 260         dev_fs->k_dev = K_DEV_FS;
 261         dev_journal->k_dev = K_DEV_JOURNAL;
 262
 263         journal->j_dev = dev_journal;
 264         journal->j_fs_dev = dev_fs;
 265         journal->j_inode = NULL;
 266         journal->j_blocksize = ctx->fs->blocksize;
 267
 268         if (uuid_is_null(sb->s_journal_uuid)) {
 269                 if (!sb->s_journal_inum) {
 270                         retval = EXT2_ET_BAD_INODE_NUM;
 271                         goto errout;
 272                 }
 273                 j_inode = e2fsck_allocate_memory(ctx, sizeof(*j_inode),
 274                                                  "journal inode");
 275                 if (!j_inode) {
 276                         retval = EXT2_ET_NO_MEMORY;
 277                         goto errout;
 278                 }
 279
 280                 j_inode->i_ctx = ctx;
 281                 j_inode->i_ino = sb->s_journal_inum;
 282
 283                 if ((retval = ext2fs_read_inode(ctx->fs,
 284                                                 sb->s_journal_inum,
 285                                                 &j_inode->i_ext2))) {
 286                 try_backup_journal:
 287                         if (sb->s_jnl_backup_type != EXT3_JNL_BACKUP_BLOCKS ||
 288                             tried_backup_jnl)
 289                                 goto errout;
 290                         memset(&j_inode->i_ext2, 0, sizeof(struct ext2_inode));
 291                         memcpy(&j_inode->i_ext2.i_block[0], sb->s_jnl_blocks,
 292                                EXT2_N_BLOCKS*4);
 293                         j_inode->i_ext2.i_size_high = sb->s_jnl_blocks[15];
 294                         j_inode->i_ext2.i_size = sb->s_jnl_blocks[16];
 295                         j_inode->i_ext2.i_links_count = 1;
 296                         j_inode->i_ext2.i_mode = LINUX_S_IFREG | 0600;
 297                         e2fsck_use_inode_shortcuts(ctx, 1);
 298                         ctx->stashed_ino = j_inode->i_ino;
 299                         ctx->stashed_inode = &j_inode->i_ext2;
 300                         tried_backup_jnl++;
 301                 }
 302                 if (!j_inode->i_ext2.i_links_count ||
 303                     !LINUX_S_ISREG(j_inode->i_ext2.i_mode)) {
 304                         retval = EXT2_ET_NO_JOURNAL;
 305                         goto try_backup_journal;
 306                 }
 307                 if (EXT2_I_SIZE(&j_inode->i_ext2) / journal->j_blocksize <
 308                     JFS_MIN_JOURNAL_BLOCKS) {
 309                         retval = EXT2_ET_JOURNAL_TOO_SMALL;
 310                         goto try_backup_journal;
 311                 }
 312                 pb.last_block = -1;
 313                 retval = ext2fs_block_iterate3(ctx->fs, j_inode->i_ino,
 314                                                BLOCK_FLAG_HOLE, 0,
 315                                                process_journal_block, &pb);
 316                 if ((pb.last_block + 1) * ctx->fs->blocksize <
 317                     (int) EXT2_I_SIZE(&j_inode->i_ext2)) {
 318                         retval = EXT2_ET_JOURNAL_TOO_SMALL;
 319                         goto try_backup_journal;
 320                 }
 321                 if (tried_backup_jnl && !(ctx->options & E2F_OPT_READONLY)) {
 322                         retval = ext2fs_write_inode(ctx->fs, sb->s_journal_inum,
 323                                                     &j_inode->i_ext2);
 324                         if (retval)
 325                                 goto errout;
 326                 }
 327
 328                 journal->j_maxlen = EXT2_I_SIZE(&j_inode->i_ext2) /
 329                         journal->j_blocksize;
 330
 331 #ifdef USE_INODE_IO
 332                 retval = ext2fs_inode_io_intern2(ctx->fs, sb->s_journal_inum,
 333                                                  &j_inode->i_ext2,
 334                                                  &journal_name);
 335                 if (retval)
 336                         goto errout;
 337
 338                 io_ptr = inode_io_manager;
 339 #else
 340                 journal->j_inode = j_inode;
 341                 ctx->journal_io = ctx->fs->io;
 342                 if ((retval = (errcode_t) journal_bmap(journal, 0, &start)) != 0)
 343                         goto errout;
 344 #endif
 345         } else {
 346                 ext_journal = 1;
 347                 if (!ctx->journal_name) {
 348                         char uuid[37];
 349
 350                         uuid_unparse(sb->s_journal_uuid, uuid);
 351                         ctx->journal_name = blkid_get_devname(ctx->blkid,
 352                                                               "UUID", uuid);
 353                         if (!ctx->journal_name)
 354                                 ctx->journal_name = blkid_devno_to_devname(sb->s_journal_dev);
 355                 }
 356                 journal_name = ctx->journal_name;
 357
 358                 if (!journal_name) {
 359                         fix_problem(ctx, PR_0_CANT_FIND_JOURNAL, &pctx);
 360                         retval = EXT2_ET_LOAD_EXT_JOURNAL;
 361                         goto errout;
 362                 }
 363
 364                 jfs_debug(1, "Using journal file %s\n", journal_name);
 365                 io_ptr = unix_io_manager;
 366         }
 367
 368 #if 0
 369         test_io_backing_manager = io_ptr;
 370         io_ptr = test_io_manager;
 371 #endif
 372 #ifndef USE_INODE_IO
 373         if (ext_journal)
 374 #endif
 375         {
 376                 int flags = IO_FLAG_RW;
 377                 if (!(ctx->mount_flags & EXT2_MF_ISROOT &&
 378                       ctx->mount_flags & EXT2_MF_READONLY))
 379                         flags |= IO_FLAG_EXCLUSIVE;
 380                 if ((ctx->mount_flags & EXT2_MF_READONLY) &&
 381                     (ctx->options & E2F_OPT_FORCE))
 382                         flags &= ~IO_FLAG_EXCLUSIVE;
 383
 384
 385                 retval = io_ptr->open(journal_name, flags,
 386                                       &ctx->journal_io);
 387         }
 388         if (retval)
 389                 goto errout;
 390
 391         io_channel_set_blksize(ctx->journal_io, ctx->fs->blocksize);
 392
 393         if (ext_journal) {
 394                 blk64_t maxlen;
 395
 396                 start = ext2fs_journal_sb_start(ctx->fs->blocksize) - 1;
 397                 bh = getblk(dev_journal, start, ctx->fs->blocksize);
 398                 if (!bh) {
 399                         retval = EXT2_ET_NO_MEMORY;
 400                         goto errout;
 401                 }
 402                 ll_rw_block(READ, 1, &bh);
 403                 if ((retval = bh->b_err) != 0) {
 404                         brelse(bh);
 405                         goto errout;
 406                 }
 407                 memcpy(&jsuper, start ? bh->b_data :  bh->b_data + SUPERBLOCK_OFFSET,
 408                        sizeof(jsuper));
 409                 brelse(bh);
 410 #ifdef WORDS_BIGENDIAN
 411                 if (jsuper.s_magic == ext2fs_swab16(EXT2_SUPER_MAGIC))
 412                         ext2fs_swap_super(&jsuper);
 413 #endif
 414                 if (jsuper.s_magic != EXT2_SUPER_MAGIC ||
 415                     !(jsuper.s_feature_incompat & EXT3_FEATURE_INCOMPAT_JOURNAL_DEV)) {
 416                         fix_problem(ctx, PR_0_EXT_JOURNAL_BAD_SUPER, &pctx);
 417                         retval = EXT2_ET_LOAD_EXT_JOURNAL;
 418                         goto errout;
 419                 }
 420                 /* Make sure the journal UUID is correct */
 421                 if (memcmp(jsuper.s_uuid, ctx->fs->super->s_journal_uuid,
 422                            sizeof(jsuper.s_uuid))) {
 423                         fix_problem(ctx, PR_0_JOURNAL_BAD_UUID, &pctx);
 424                         retval = EXT2_ET_LOAD_EXT_JOURNAL;
 425                         goto errout;
 426                 }
 427
 428                 maxlen = ext2fs_blocks_count(&jsuper);
 429                 journal->j_maxlen = (maxlen < 1ULL << 32) ? maxlen : (1ULL << 32) - 1;
 430                 start++;
 431         }
 432
 433         if (!(bh = getblk(dev_journal, start, journal->j_blocksize))) {
 434                 retval = EXT2_ET_NO_MEMORY;
 435                 goto errout;
 436         }
 437
 438         journal->j_sb_buffer = bh;
 439         journal->j_superblock = (journal_superblock_t *)bh->b_data;
 440
 441 #ifdef USE_INODE_IO
 442         if (j_inode)
 443                 ext2fs_free_mem(&j_inode);
 444 #endif
 445
 446         *ret_journal = journal;
 447         e2fsck_use_inode_shortcuts(ctx, 0);
 448         return 0;
 449
 450 errout:
 451         e2fsck_use_inode_shortcuts(ctx, 0);
 452         if (dev_fs)
 453                 ext2fs_free_mem(&dev_fs);
 454         if (j_inode)
 455                 ext2fs_free_mem(&j_inode);
 456         if (journal)
 457                 ext2fs_free_mem(&journal);
 458         return retval;
 459 }
 460
 461 static errcode_t e2fsck_journal_fix_bad_inode(e2fsck_t ctx,
 462                                               struct problem_context *pctx)
 463 {
 464         struct ext2_super_block *sb = ctx->fs->super;
 465         int recover = ctx->fs->super->s_feature_incompat &
 466                 EXT3_FEATURE_INCOMPAT_RECOVER;
 467         int has_journal = ctx->fs->super->s_feature_compat &
 468                 EXT3_FEATURE_COMPAT_HAS_JOURNAL;
 469
 470         if (has_journal || sb->s_journal_inum) {
 471                 /* The journal inode is bogus, remove and force full fsck */
 472                 pctx->ino = sb->s_journal_inum;
 473                 if (fix_problem(ctx, PR_0_JOURNAL_BAD_INODE, pctx)) {
 474                         if (has_journal && sb->s_journal_inum)
 475                                 printf("*** ext3 journal has been deleted - "
 476                                        "filesystem is now ext2 only ***\n\n");
 477                         sb->s_feature_compat &= ~EXT3_FEATURE_COMPAT_HAS_JOURNAL;
 478                         sb->s_journal_inum = 0;
 479                         ctx->flags |= E2F_FLAG_JOURNAL_INODE;
 480                         ctx->fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 481                         e2fsck_clear_recover(ctx, 1);
 482                         return 0;
 483                 }
 484                 return EXT2_ET_BAD_INODE_NUM;
 485         } else if (recover) {
 486                 if (fix_problem(ctx, PR_0_JOURNAL_RECOVER_SET, pctx)) {
 487                         e2fsck_clear_recover(ctx, 1);
 488                         return 0;
 489                 }
 490                 return EXT2_ET_UNSUPP_FEATURE;
 491         }
 492         return 0;
 493 }
 494
 495 #define V1_SB_SIZE      0x0024
 496 static void clear_v2_journal_fields(journal_t *journal)
 497 {
 498         e2fsck_t ctx = journal->j_dev->k_ctx;
 499         struct problem_context pctx;
 500
 501         clear_problem_context(&pctx);
 502
 503         if (!fix_problem(ctx, PR_0_CLEAR_V2_JOURNAL, &pctx))
 504                 return;
 505
 506         memset(((char *) journal->j_superblock) + V1_SB_SIZE, 0,
 507                ctx->fs->blocksize-V1_SB_SIZE);
 508         mark_buffer_dirty(journal->j_sb_buffer);
 509 }
 510
 511
 512 static errcode_t e2fsck_journal_load(journal_t *journal)
 513 {
 514         e2fsck_t ctx = journal->j_dev->k_ctx;
 515         journal_superblock_t *jsb;
 516         struct buffer_head *jbh = journal->j_sb_buffer;
 517         struct problem_context pctx;
 518
 519         clear_problem_context(&pctx);
 520
 521         ll_rw_block(READ, 1, &jbh);
 522         if (jbh->b_err) {
 523                 com_err(ctx->device_name, jbh->b_err, "%s",
 524                         _("reading journal superblock\n"));
 525                 return jbh->b_err;
 526         }
 527
 528         jsb = journal->j_superblock;
 529         /* If we don't even have JFS_MAGIC, we probably have a wrong inode */
 530         if (jsb->s_header.h_magic != htonl(JFS_MAGIC_NUMBER))
 531                 return e2fsck_journal_fix_bad_inode(ctx, &pctx);
 532
 533         switch (ntohl(jsb->s_header.h_blocktype)) {
 534         case JFS_SUPERBLOCK_V1:
 535                 journal->j_format_version = 1;
 536                 if (jsb->s_feature_compat ||
 537                     jsb->s_feature_incompat ||
 538                     jsb->s_feature_ro_compat ||
 539                     jsb->s_nr_users)
 540                         clear_v2_journal_fields(journal);
 541                 break;
 542
 543         case JFS_SUPERBLOCK_V2:
 544                 journal->j_format_version = 2;
 545                 if (ntohl(jsb->s_nr_users) > 1 &&
 546                     uuid_is_null(ctx->fs->super->s_journal_uuid))
 547                         clear_v2_journal_fields(journal);
 548                 if (ntohl(jsb->s_nr_users) > 1) {
 549                         fix_problem(ctx, PR_0_JOURNAL_UNSUPP_MULTIFS, &pctx);
 550                         return EXT2_ET_JOURNAL_UNSUPP_VERSION;
 551                 }
 552                 break;
 553
 554         /*
 555          * These should never appear in a journal super block, so if
 556          * they do, the journal is badly corrupted.
 557          */
 558         case JFS_DESCRIPTOR_BLOCK:
 559         case JFS_COMMIT_BLOCK:
 560         case JFS_REVOKE_BLOCK:
 561                 return EXT2_ET_CORRUPT_SUPERBLOCK;
 562
 563         /* If we don't understand the superblock major type, but there
 564          * is a magic number, then it is likely to be a new format we
 565          * just don't understand, so leave it alone. */
 566         default:
 567                 return EXT2_ET_JOURNAL_UNSUPP_VERSION;
 568         }
 569
 570         if (JFS_HAS_INCOMPAT_FEATURE(journal, ~JFS_KNOWN_INCOMPAT_FEATURES))
 571                 return EXT2_ET_UNSUPP_FEATURE;
 572
 573         if (JFS_HAS_RO_COMPAT_FEATURE(journal, ~JFS_KNOWN_ROCOMPAT_FEATURES))
 574                 return EXT2_ET_RO_UNSUPP_FEATURE;
 575
 576         /* We have now checked whether we know enough about the journal
 577          * format to be able to proceed safely, so any other checks that
 578          * fail we should attempt to recover from. */
 579         if (jsb->s_blocksize != htonl(journal->j_blocksize)) {
 580                 com_err(ctx->program_name, EXT2_ET_CORRUPT_SUPERBLOCK,
 581                         _("%s: no valid journal superblock found\n"),
 582                         ctx->device_name);
 583                 return EXT2_ET_CORRUPT_SUPERBLOCK;
 584         }
 585
 586         if (ntohl(jsb->s_maxlen) < journal->j_maxlen)
 587                 journal->j_maxlen = ntohl(jsb->s_maxlen);
 588         else if (ntohl(jsb->s_maxlen) > journal->j_maxlen) {
 589                 com_err(ctx->program_name, EXT2_ET_CORRUPT_SUPERBLOCK,
 590                         _("%s: journal too short\n"),
 591                         ctx->device_name);
 592                 return EXT2_ET_CORRUPT_SUPERBLOCK;
 593         }
 594
 595         journal->j_tail_sequence = ntohl(jsb->s_sequence);
 596         journal->j_transaction_sequence = journal->j_tail_sequence;
 597         journal->j_tail = ntohl(jsb->s_start);
 598         journal->j_first = ntohl(jsb->s_first);
 599         journal->j_last = ntohl(jsb->s_maxlen);
 600
 601         return 0;
 602 }
 603
 604 static void e2fsck_journal_reset_super(e2fsck_t ctx, journal_superblock_t *jsb,
 605                                        journal_t *journal)
 606 {
 607         char *p;
 608         union {
 609                 uuid_t uuid;
 610                 __u32 val[4];
 611         } u;
 612         __u32 new_seq = 0;
 613         int i;
 614
 615         /* Leave a valid existing V1 superblock signature alone.
 616          * Anything unrecognisable we overwrite with a new V2
 617          * signature. */
 618
 619         if (jsb->s_header.h_magic != htonl(JFS_MAGIC_NUMBER) ||
 620             jsb->s_header.h_blocktype != htonl(JFS_SUPERBLOCK_V1)) {
 621                 jsb->s_header.h_magic = htonl(JFS_MAGIC_NUMBER);
 622                 jsb->s_header.h_blocktype = htonl(JFS_SUPERBLOCK_V2);
 623         }
 624
 625         /* Zero out everything else beyond the superblock header */
 626
 627         p = ((char *) jsb) + sizeof(journal_header_t);
 628         memset (p, 0, ctx->fs->blocksize-sizeof(journal_header_t));
 629
 630         jsb->s_blocksize = htonl(ctx->fs->blocksize);
 631         jsb->s_maxlen = htonl(journal->j_maxlen);
 632         jsb->s_first = htonl(1);
 633
 634         /* Initialize the journal sequence number so that there is "no"
 635          * chance we will find old "valid" transactions in the journal.
 636          * This avoids the need to zero the whole journal (slow to do,
 637          * and risky when we are just recovering the filesystem).
 638          */
 639         uuid_generate(u.uuid);
 640         for (i = 0; i < 4; i ++)
 641                 new_seq ^= u.val[i];
 642         jsb->s_sequence = htonl(new_seq);
 643
 644         mark_buffer_dirty(journal->j_sb_buffer);
 645         ll_rw_block(WRITE, 1, &journal->j_sb_buffer);
 646 }
 647
 648 static errcode_t e2fsck_journal_fix_corrupt_super(e2fsck_t ctx,
 649                                                   journal_t *journal,
 650                                                   struct problem_context *pctx)
 651 {
 652         struct ext2_super_block *sb = ctx->fs->super;
 653         int recover = ctx->fs->super->s_feature_incompat &
 654                 EXT3_FEATURE_INCOMPAT_RECOVER;
 655
 656         if (sb->s_feature_compat & EXT3_FEATURE_COMPAT_HAS_JOURNAL) {
 657                 if (fix_problem(ctx, PR_0_JOURNAL_BAD_SUPER, pctx)) {
 658                         e2fsck_journal_reset_super(ctx, journal->j_superblock,
 659                                                    journal);
 660                         journal->j_transaction_sequence = 1;
 661                         e2fsck_clear_recover(ctx, recover);
 662                         return 0;
 663                 }
 664                 return EXT2_ET_CORRUPT_SUPERBLOCK;
 665         } else if (e2fsck_journal_fix_bad_inode(ctx, pctx))
 666                 return EXT2_ET_CORRUPT_SUPERBLOCK;
 667
 668         return 0;
 669 }
 670
 671 static void e2fsck_journal_release(e2fsck_t ctx, journal_t *journal,
 672                                    int reset, int drop)
 673 {
 674         journal_superblock_t *jsb;
 675
 676         if (drop)
 677                 mark_buffer_clean(journal->j_sb_buffer);
 678         else if (!(ctx->options & E2F_OPT_READONLY)) {
 679                 jsb = journal->j_superblock;
 680                 jsb->s_sequence = htonl(journal->j_transaction_sequence);
 681                 if (reset)
 682                         jsb->s_start = 0; /* this marks the journal as empty */
 683                 mark_buffer_dirty(journal->j_sb_buffer);
 684         }
 685         brelse(journal->j_sb_buffer);
 686
 687         if (ctx->journal_io) {
 688                 if (ctx->fs && ctx->fs->io != ctx->journal_io)
 689                         io_channel_close(ctx->journal_io);
 690                 ctx->journal_io = 0;
 691         }
 692
 693 #ifndef USE_INODE_IO
 694         if (journal->j_inode)
 695                 ext2fs_free_mem(&journal->j_inode);
 696 #endif
 697         if (journal->j_fs_dev)
 698                 ext2fs_free_mem(&journal->j_fs_dev);
 699         ext2fs_free_mem(&journal);
 700 }
 701
 702 /*
 703  * This function makes sure that the superblock fields regarding the
 704  * journal are consistent.
 705  */
 706 errcode_t e2fsck_check_ext3_journal(e2fsck_t ctx)
 707 {
 708         struct ext2_super_block *sb = ctx->fs->super;
 709         journal_t *journal;
 710         int recover = ctx->fs->super->s_feature_incompat &
 711                 EXT3_FEATURE_INCOMPAT_RECOVER;
 712         struct problem_context pctx;
 713         problem_t problem;
 714         int reset = 0, force_fsck = 0;
 715         errcode_t retval;
 716
 717         /* If we don't have any journal features, don't do anything more */
 718         if (!(sb->s_feature_compat & EXT3_FEATURE_COMPAT_HAS_JOURNAL) &&
 719             !recover && sb->s_journal_inum == 0 && sb->s_journal_dev == 0 &&
 720             uuid_is_null(sb->s_journal_uuid))
 721                 return 0;
 722
 723         clear_problem_context(&pctx);
 724         pctx.num = sb->s_journal_inum;
 725
 726         retval = e2fsck_get_journal(ctx, &journal);
 727         if (retval) {
 728                 if ((retval == EXT2_ET_BAD_INODE_NUM) ||
 729                     (retval == EXT2_ET_BAD_BLOCK_NUM) ||
 730                     (retval == EXT2_ET_JOURNAL_TOO_SMALL) ||
 731                     (retval == EXT2_ET_NO_JOURNAL))
 732                         return e2fsck_journal_fix_bad_inode(ctx, &pctx);
 733                 return retval;
 734         }
 735
 736         retval = e2fsck_journal_load(journal);
 737         if (retval) {
 738                 if ((retval == EXT2_ET_CORRUPT_SUPERBLOCK) ||
 739                     ((retval == EXT2_ET_UNSUPP_FEATURE) &&
 740                     (!fix_problem(ctx, PR_0_JOURNAL_UNSUPP_INCOMPAT,
 741                                   &pctx))) ||
 742                     ((retval == EXT2_ET_RO_UNSUPP_FEATURE) &&
 743                     (!fix_problem(ctx, PR_0_JOURNAL_UNSUPP_ROCOMPAT,
 744                                   &pctx))) ||
 745                     ((retval == EXT2_ET_JOURNAL_UNSUPP_VERSION) &&
 746                     (!fix_problem(ctx, PR_0_JOURNAL_UNSUPP_VERSION, &pctx))))
 747                         retval = e2fsck_journal_fix_corrupt_super(ctx, journal,
 748                                                                   &pctx);
 749                 e2fsck_journal_release(ctx, journal, 0, 1);
 750                 return retval;
 751         }
 752
 753         /*
 754          * We want to make the flags consistent here.  We will not leave with
 755          * needs_recovery set but has_journal clear.  We can't get in a loop
 756          * with -y, -n, or -p, only if a user isn't making up their mind.
 757          */
 758 no_has_journal:
 759         if (!(sb->s_feature_compat & EXT3_FEATURE_COMPAT_HAS_JOURNAL)) {
 760                 recover = sb->s_feature_incompat & EXT3_FEATURE_INCOMPAT_RECOVER;
 761                 if (fix_problem(ctx, PR_0_JOURNAL_HAS_JOURNAL, &pctx)) {
 762                         if (recover &&
 763                             !fix_problem(ctx, PR_0_JOURNAL_RECOVER_SET, &pctx))
 764                                 goto no_has_journal;
 765                         /*
 766                          * Need a full fsck if we are releasing a
 767                          * journal stored on a reserved inode.
 768                          */
 769                         force_fsck = recover ||
 770                                 (sb->s_journal_inum < EXT2_FIRST_INODE(sb));
 771                         /* Clear all of the journal fields */
 772                         sb->s_journal_inum = 0;
 773                         sb->s_journal_dev = 0;
 774                         memset(sb->s_journal_uuid, 0,
 775                                sizeof(sb->s_journal_uuid));
 776                         e2fsck_clear_recover(ctx, force_fsck);
 777                 } else if (!(ctx->options & E2F_OPT_READONLY)) {
 778                         sb->s_feature_compat |= EXT3_FEATURE_COMPAT_HAS_JOURNAL;
 779                         ctx->fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 780                         ext2fs_mark_super_dirty(ctx->fs);
 781                 }
 782         }
 783
 784         if (sb->s_feature_compat & EXT3_FEATURE_COMPAT_HAS_JOURNAL &&
 785             !(sb->s_feature_incompat & EXT3_FEATURE_INCOMPAT_RECOVER) &&
 786             journal->j_superblock->s_start != 0) {
 787                 /* Print status information */
 788                 fix_problem(ctx, PR_0_JOURNAL_RECOVERY_CLEAR, &pctx);
 789                 if (ctx->superblock)
 790                         problem = PR_0_JOURNAL_RUN_DEFAULT;
 791                 else
 792                         problem = PR_0_JOURNAL_RUN;
 793                 if (fix_problem(ctx, problem, &pctx)) {
 794                         ctx->options |= E2F_OPT_FORCE;
 795                         sb->s_feature_incompat |=
 796                                 EXT3_FEATURE_INCOMPAT_RECOVER;
 797                         ext2fs_mark_super_dirty(ctx->fs);
 798                 } else if (fix_problem(ctx,
 799                                        PR_0_JOURNAL_RESET_JOURNAL, &pctx)) {
 800                         reset = 1;
 801                         sb->s_state &= ~EXT2_VALID_FS;
 802                         ext2fs_mark_super_dirty(ctx->fs);
 803                 }
 804                 /*
 805                  * If the user answers no to the above question, we
 806                  * ignore the fact that journal apparently has data;
 807                  * accidentally replaying over valid data would be far
 808                  * worse than skipping a questionable recovery.
 809                  *
 810                  * XXX should we abort with a fatal error here?  What
 811                  * will the ext3 kernel code do if a filesystem with
 812                  * !NEEDS_RECOVERY but with a non-zero
 813                  * journal->j_superblock->s_start is mounted?
 814                  */
 815         }
 816
 817         /*
 818          * If we don't need to do replay the journal, check to see if
 819          * the journal's errno is set; if so, we need to mark the file
 820          * system as being corrupt and clear the journal's s_errno.
 821          */
 822         if (!(sb->s_feature_incompat & EXT3_FEATURE_INCOMPAT_RECOVER) &&
 823             journal->j_superblock->s_errno) {
 824                 ctx->fs->super->s_state |= EXT2_ERROR_FS;
 825                 ext2fs_mark_super_dirty(ctx->fs);
 826                 journal->j_superblock->s_errno = 0;
 827                 mark_buffer_dirty(journal->j_sb_buffer);
 828         }
 829
 830         e2fsck_journal_release(ctx, journal, reset, 0);
 831         return retval;
 832 }
 833
 834 static errcode_t recover_ext3_journal(e2fsck_t ctx)
 835 {
 836         struct problem_context  pctx;
 837         journal_t *journal;
 838         errcode_t retval;
 839
 840         clear_problem_context(&pctx);
 841
 842         journal_init_revoke_caches();
 843         retval = e2fsck_get_journal(ctx, &journal);
 844         if (retval)
 845                 return retval;
 846
 847         retval = e2fsck_journal_load(journal);
 848         if (retval)
 849                 goto errout;
 850
 851         retval = journal_init_revoke(journal, 1024);
 852         if (retval)
 853                 goto errout;
 854
 855         retval = -journal_recover(journal);
 856         if (retval)
 857                 goto errout;
 858
 859         if (journal->j_failed_commit) {
 860                 pctx.ino = journal->j_failed_commit;
 861                 fix_problem(ctx, PR_0_JNL_TXN_CORRUPT, &pctx);
 862                 journal->j_superblock->s_errno = -EINVAL;
 863                 mark_buffer_dirty(journal->j_sb_buffer);
 864         }
 865
 866 errout:
 867         journal_destroy_revoke(journal);
 868         journal_destroy_revoke_caches();
 869         e2fsck_journal_release(ctx, journal, 1, 0);
 870         return retval;
 871 }
 872
 873 errcode_t e2fsck_run_ext3_journal(e2fsck_t ctx)
 874 {
 875         io_manager io_ptr = ctx->fs->io->manager;
 876         int blocksize = ctx->fs->blocksize;
 877         errcode_t       retval, recover_retval;
 878         io_stats        stats = 0;
 879         unsigned long long kbytes_written = 0;
 880
 881         printf(_("%s: recovering journal\n"), ctx->device_name);
 882         if (ctx->options & E2F_OPT_READONLY) {
 883                 printf(_("%s: won't do journal recovery while read-only\n"),
 884                        ctx->device_name);
 885                 return EXT2_ET_FILE_RO;
 886         }
 887
 888         if (ctx->fs->flags & EXT2_FLAG_DIRTY)
 889                 ext2fs_flush(ctx->fs);  /* Force out any modifications */
 890
 891         recover_retval = recover_ext3_journal(ctx);
 892
 893         /*
 894          * Reload the filesystem context to get up-to-date data from disk
 895          * because journal recovery will change the filesystem under us.
 896          */
 897         if (ctx->fs->super->s_kbytes_written &&
 898             ctx->fs->io->manager->get_stats)
 899                 ctx->fs->io->manager->get_stats(ctx->fs->io, &stats);
 900         if (stats && stats->bytes_written)
 901                 kbytes_written = stats->bytes_written >> 10;
 902
 903         ext2fs_mmp_stop(ctx->fs);
 904         ext2fs_free(ctx->fs);
 905         retval = ext2fs_open(ctx->filesystem_name, ctx->openfs_flags,
 906                              ctx->superblock, blocksize, io_ptr,
 907                              &ctx->fs);
 908         if (retval) {
 909                 com_err(ctx->program_name, retval,
 910                         _("while trying to re-open %s"),
 911                         ctx->device_name);
 912                 fatal_error(ctx, 0);
 913         }
 914         ctx->fs->priv_data = ctx;
 915         ctx->fs->now = ctx->now;
 916         ctx->fs->flags |= EXT2_FLAG_MASTER_SB_ONLY;
 917         ctx->fs->super->s_kbytes_written += kbytes_written;
 918
 919         /* Set the superblock flags */
 920         e2fsck_clear_recover(ctx, recover_retval != 0);
 921
 922         /*
 923          * Do one last sanity check, and propagate journal->s_errno to
 924          * the EXT2_ERROR_FS flag in the fs superblock if needed.
 925          */
 926         retval = e2fsck_check_ext3_journal(ctx);
 927         return retval ? retval : recover_retval;
 928 }
 929
 930 /*
 931  * This function will move the journal inode from a visible file in
 932  * the filesystem directory hierarchy to the reserved inode if necessary.
 933  */
 934 static const char * const journal_names[] = {
 935         ".journal", "journal", ".journal.dat", "journal.dat", 0 };
 936
 937 void e2fsck_move_ext3_journal(e2fsck_t ctx)
 938 {
 939         struct ext2_super_block *sb = ctx->fs->super;
 940         struct problem_context  pctx;
 941         struct ext2_inode       inode;
 942         ext2_filsys             fs = ctx->fs;
 943         ext2_ino_t              ino;
 944         errcode_t               retval;
 945         const char * const *    cpp;
 946         dgrp_t                  group;
 947         int                     mount_flags;
 948
 949         clear_problem_context(&pctx);
 950
 951         /*
 952          * If the filesystem is opened read-only, or there is no
 953          * journal, then do nothing.
 954          */
 955         if ((ctx->options & E2F_OPT_READONLY) ||
 956             (sb->s_journal_inum == 0) ||
 957             !(sb->s_feature_compat & EXT3_FEATURE_COMPAT_HAS_JOURNAL))
 958                 return;
 959
 960         /*
 961          * Read in the journal inode
 962          */
 963         if (ext2fs_read_inode(fs, sb->s_journal_inum, &inode) != 0)
 964                 return;
 965
 966         /*
 967          * If it's necessary to backup the journal inode, do so.
 968          */
 969         if ((sb->s_jnl_backup_type == 0) ||
 970             ((sb->s_jnl_backup_type == EXT3_JNL_BACKUP_BLOCKS) &&
 971              memcmp(inode.i_block, sb->s_jnl_blocks, EXT2_N_BLOCKS*4))) {
 972                 if (fix_problem(ctx, PR_0_BACKUP_JNL, &pctx)) {
 973                         memcpy(sb->s_jnl_blocks, inode.i_block,
 974                                EXT2_N_BLOCKS*4);
 975                         sb->s_jnl_blocks[15] = inode.i_size_high;
 976                         sb->s_jnl_blocks[16] = inode.i_size;
 977                         sb->s_jnl_backup_type = EXT3_JNL_BACKUP_BLOCKS;
 978                         ext2fs_mark_super_dirty(fs);
 979                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 980                 }
 981         }
 982
 983         /*
 984          * If the journal is already the hidden inode, then do nothing
 985          */
 986         if (sb->s_journal_inum == EXT2_JOURNAL_INO)
 987                 return;
 988
 989         /*
 990          * The journal inode had better have only one link and not be readable.
 991          */
 992         if (inode.i_links_count != 1)
 993                 return;
 994
 995         /*
 996          * If the filesystem is mounted, or we can't tell whether
 997          * or not it's mounted, do nothing.
 998          */
 999         retval = ext2fs_check_if_mounted(ctx->filesystem_name, &mount_flags);
1000         if (retval || (mount_flags & EXT2_MF_MOUNTED))
1001                 return;
1002
1003         /*
1004          * If we can't find the name of the journal inode, then do
1005          * nothing.
1006          */
1007         for (cpp = journal_names; *cpp; cpp++) {
1008                 retval = ext2fs_lookup(fs, EXT2_ROOT_INO, *cpp,
1009                                        strlen(*cpp), 0, &ino);
1010                 if ((retval == 0) && (ino == sb->s_journal_inum))
1011                         break;
1012         }
1013         if (*cpp == 0)
1014                 return;
1015
1016         /* We need the inode bitmap to be loaded */
1017         retval = ext2fs_read_bitmaps(fs);
1018         if (retval)
1019                 return;
1020
1021         pctx.str = *cpp;
1022         if (!fix_problem(ctx, PR_0_MOVE_JOURNAL, &pctx))
1023                 return;
1024
1025         /*
1026          * OK, we've done all the checks, let's actually move the
1027          * journal inode.  Errors at this point mean we need to force
1028          * an ext2 filesystem check.
1029          */
1030         if ((retval = ext2fs_unlink(fs, EXT2_ROOT_INO, *cpp, ino, 0)) != 0)
1031                 goto err_out;
1032         if ((retval = ext2fs_write_inode(fs, EXT2_JOURNAL_INO, &inode)) != 0)
1033                 goto err_out;
1034         sb->s_journal_inum = EXT2_JOURNAL_INO;
1035         ext2fs_mark_super_dirty(fs);
1036         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
1037         inode.i_links_count = 0;
1038         inode.i_dtime = ctx->now;
1039         if ((retval = ext2fs_write_inode(fs, ino, &inode)) != 0)
1040                 goto err_out;
1041
1042         group = ext2fs_group_of_ino(fs, ino);
1043         ext2fs_unmark_inode_bitmap2(fs->inode_map, ino);
1044         ext2fs_mark_ib_dirty(fs);
1045         ext2fs_bg_free_inodes_count_set(fs, group, ext2fs_bg_free_inodes_count(fs, group) + 1);
1046         ext2fs_group_desc_csum_set(fs, group);
1047         fs->super->s_free_inodes_count++;
1048         return;
1049
1050 err_out:
1051         pctx.errcode = retval;
1052         fix_problem(ctx, PR_0_ERR_MOVE_JOURNAL, &pctx);
1053         fs->super->s_state &= ~EXT2_VALID_FS;
1054         ext2fs_mark_super_dirty(fs);
1055         return;
1056 }
1057
1058 /*
1059  * This function makes sure the superblock hint for the external
1060  * journal is correct.
1061  */
1062 int e2fsck_fix_ext3_journal_hint(e2fsck_t ctx)
1063 {
1064         struct ext2_super_block *sb = ctx->fs->super;
1065         struct problem_context pctx;
1066         char uuid[37], *journal_name;
1067         struct stat st;
1068
1069         if (!(sb->s_feature_compat & EXT3_FEATURE_COMPAT_HAS_JOURNAL) ||
1070             uuid_is_null(sb->s_journal_uuid))
1071                 return 0;
1072
1073         uuid_unparse(sb->s_journal_uuid, uuid);
1074         journal_name = blkid_get_devname(ctx->blkid, "UUID", uuid);
1075         if (!journal_name)
1076                 return 0;
1077
1078         if (stat(journal_name, &st) < 0) {
1079                 free(journal_name);
1080                 return 0;
1081         }
1082
1083         if (st.st_rdev != sb->s_journal_dev) {
1084                 clear_problem_context(&pctx);
1085                 pctx.num = st.st_rdev;
1086                 if (fix_problem(ctx, PR_0_EXTERNAL_JOURNAL_HINT, &pctx)) {
1087                         sb->s_journal_dev = st.st_rdev;
1088                         ext2fs_mark_super_dirty(ctx->fs);
1089                 }
1090         }
1091
1092         free(journal_name);
1093         return 0;
1094 }