e2fsck/super.c

   1 /*
   2  * e2fsck.c - superblock checks
   3  *
   4  * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
   5  *
   6  * %Begin-Header%
   7  * This file may be redistributed under the terms of the GNU Public
   8  * License.
   9  * %End-Header%
  10  */
  11
  12 #ifdef HAVE_ERRNO_H
  13 #include <errno.h>
  14 #endif
  15
  16 #ifndef EXT2_SKIP_UUID
  17 #include "uuid/uuid.h"
  18 #endif
  19 #include "e2fsck.h"
  20 #include "problem.h"
  21
  22 #define MIN_CHECK 1
  23 #define MAX_CHECK 2
  24
  25 static void check_super_value(e2fsck_t ctx, const char *descr,
  26                               unsigned long value, int flags,
  27                               unsigned long min_val, unsigned long max_val)
  28 {
  29         struct          problem_context pctx;
  30
  31         if (((flags & MIN_CHECK) && (value < min_val)) ||
  32             ((flags & MAX_CHECK) && (value > max_val))) {
  33                 clear_problem_context(&pctx);
  34                 pctx.num = value;
  35                 pctx.str = descr;
  36                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
  37                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
  38         }
  39 }
  40
  41 /*
  42  * helper function to release an inode
  43  */
  44 struct process_block_struct {
  45         e2fsck_t        ctx;
  46         char            *buf;
  47         struct problem_context *pctx;
  48         int             truncating;
  49         int             truncate_offset;
  50         e2_blkcnt_t     truncate_block;
  51         int             truncated_blocks;
  52         int             abort;
  53         errcode_t       errcode;
  54 };
  55
  56 static int release_inode_block(ext2_filsys fs,
  57                                blk_t    *block_nr,
  58                                e2_blkcnt_t blockcnt,
  59                                blk_t    ref_blk EXT2FS_ATTR((unused)),
  60                                int      ref_offset EXT2FS_ATTR((unused)),
  61                                void *priv_data)
  62 {
  63         struct process_block_struct *pb;
  64         e2fsck_t                ctx;
  65         struct problem_context  *pctx;
  66         blk_t                   blk = *block_nr;
  67         int                     retval = 0;
  68
  69         pb = (struct process_block_struct *) priv_data;
  70         ctx = pb->ctx;
  71         pctx = pb->pctx;
  72
  73         pctx->blk = blk;
  74         pctx->blkcount = blockcnt;
  75
  76         if (HOLE_BLKADDR(blk))
  77                 return 0;
  78
  79         if ((blk < fs->super->s_first_data_block) ||
  80             (blk >= fs->super->s_blocks_count)) {
  81                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
  82         return_abort:
  83                 pb->abort = 1;
  84                 return BLOCK_ABORT;
  85         }
  86
  87         if (!ext2fs_test_block_bitmap(fs->block_map, blk)) {
  88                 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
  89                 goto return_abort;
  90         }
  91
  92         /*
  93          * If we are deleting an orphan, then we leave the fields alone.
  94          * If we are truncating an orphan, then update the inode fields
  95          * and clean up any partial block data.
  96          */
  97         if (pb->truncating) {
  98                 /*
  99                  * We only remove indirect blocks if they are
 100                  * completely empty.
 101                  */
 102                 if (blockcnt < 0) {
 103                         int     i, limit;
 104                         blk_t   *bp;
 105
 106                         pb->errcode = io_channel_read_blk(fs->io, blk, 1,
 107                                                         pb->buf);
 108                         if (pb->errcode)
 109                                 goto return_abort;
 110
 111                         limit = fs->blocksize >> 2;
 112                         for (i = 0, bp = (blk_t *) pb->buf;
 113                              i < limit;  i++, bp++)
 114                                 if (*bp)
 115                                         return 0;
 116                 }
 117                 /*
 118                  * We don't remove direct blocks until we've reached
 119                  * the truncation block.
 120                  */
 121                 if (blockcnt >= 0 && blockcnt < pb->truncate_block)
 122                         return 0;
 123                 /*
 124                  * If part of the last block needs truncating, we do
 125                  * it here.
 126                  */
 127                 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
 128                         pb->errcode = io_channel_read_blk(fs->io, blk, 1,
 129                                                         pb->buf);
 130                         if (pb->errcode)
 131                                 goto return_abort;
 132                         memset(pb->buf + pb->truncate_offset, 0,
 133                                fs->blocksize - pb->truncate_offset);
 134                         pb->errcode = io_channel_write_blk(fs->io, blk, 1,
 135                                                          pb->buf);
 136                         if (pb->errcode)
 137                                 goto return_abort;
 138                 }
 139                 pb->truncated_blocks++;
 140                 *block_nr = 0;
 141                 retval |= BLOCK_CHANGED;
 142         }
 143
 144         ext2fs_block_alloc_stats(fs, blk, -1);
 145         return retval;
 146 }
 147
 148 /*
 149  * This function releases an inode.  Returns 1 if an inconsistency was
 150  * found.  If the inode has a link count, then it is being truncated and
 151  * not deleted.
 152  */
 153 static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
 154                                 struct ext2_inode *inode, char *block_buf,
 155                                 struct problem_context *pctx)
 156 {
 157         struct process_block_struct     pb;
 158         ext2_filsys                     fs = ctx->fs;
 159         errcode_t                       retval;
 160         __u32                           count;
 161
 162         if (!ext2fs_inode_has_valid_blocks(inode))
 163                 return 0;
 164
 165         pb.buf = block_buf + 3 * ctx->fs->blocksize;
 166         pb.ctx = ctx;
 167         pb.abort = 0;
 168         pb.errcode = 0;
 169         pb.pctx = pctx;
 170         if (inode->i_links_count) {
 171                 pb.truncating = 1;
 172                 pb.truncate_block = (e2_blkcnt_t)
 173                         ((((long long)inode->i_size_high << 32) +
 174                           inode->i_size + fs->blocksize - 1) /
 175                          fs->blocksize);
 176                 pb.truncate_offset = inode->i_size % fs->blocksize;
 177         } else {
 178                 pb.truncating = 0;
 179                 pb.truncate_block = 0;
 180                 pb.truncate_offset = 0;
 181         }
 182         pb.truncated_blocks = 0;
 183         retval = ext2fs_block_iterate2(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
 184                                       block_buf, release_inode_block, &pb);
 185         if (retval) {
 186                 com_err("release_inode_blocks", retval,
 187                         _("while calling ext2fs_block_iterate for inode %d"),
 188                         ino);
 189                 return 1;
 190         }
 191         if (pb.abort)
 192                 return 1;
 193
 194         /* Refresh the inode since ext2fs_block_iterate may have changed it */
 195         e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
 196
 197         if (pb.truncated_blocks)
 198                 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
 199
 200         if (inode->i_file_acl) {
 201                 retval = ext2fs_adjust_ea_refcount(fs, inode->i_file_acl,
 202                                                    block_buf, -1, &count);
 203                 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
 204                         retval = 0;
 205                         count = 1;
 206                 }
 207                 if (retval) {
 208                         com_err("release_inode_blocks", retval,
 209                 _("while calling ext2fs_adjust_ea_refcount for inode %d"),
 210                                 ino);
 211                         return 1;
 212                 }
 213                 if (count == 0)
 214                         ext2fs_block_alloc_stats(fs, inode->i_file_acl, -1);
 215                 inode->i_file_acl = 0;
 216         }
 217         return 0;
 218 }
 219
 220 /*
 221  * This function releases all of the orphan inodes.  It returns 1 if
 222  * it hit some error, and 0 on success.
 223  */
 224 static int release_orphan_inodes(e2fsck_t ctx)
 225 {
 226         ext2_filsys fs = ctx->fs;
 227         ext2_ino_t      ino, next_ino;
 228         struct ext2_inode inode;
 229         struct problem_context pctx;
 230         char *block_buf;
 231
 232         if ((ino = fs->super->s_last_orphan) == 0)
 233                 return 0;
 234
 235         /*
 236          * Win or lose, we won't be using the head of the orphan inode
 237          * list again.
 238          */
 239         fs->super->s_last_orphan = 0;
 240         ext2fs_mark_super_dirty(fs);
 241
 242         /*
 243          * If the filesystem contains errors, don't run the orphan
 244          * list, since the orphan list can't be trusted; and we're
 245          * going to be running a full e2fsck run anyway...
 246          */
 247         if (fs->super->s_state & EXT2_ERROR_FS)
 248                 return 0;
 249
 250         if ((ino < EXT2_FIRST_INODE(fs->super)) ||
 251             (ino > fs->super->s_inodes_count)) {
 252                 clear_problem_context(&pctx);
 253                 pctx.ino = ino;
 254                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
 255                 return 1;
 256         }
 257
 258         block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
 259                                                     "block iterate buffer");
 260         e2fsck_read_bitmaps(ctx);
 261
 262         while (ino) {
 263                 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
 264                 clear_problem_context(&pctx);
 265                 pctx.ino = ino;
 266                 pctx.inode = &inode;
 267                 pctx.str = inode.i_links_count ? _("Truncating") :
 268                         _("Clearing");
 269
 270                 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
 271
 272                 next_ino = inode.i_dtime;
 273                 if (next_ino &&
 274                     ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
 275                      (next_ino > fs->super->s_inodes_count))) {
 276                         pctx.ino = next_ino;
 277                         fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
 278                         goto return_abort;
 279                 }
 280
 281                 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
 282                         goto return_abort;
 283
 284                 if (!inode.i_links_count) {
 285                         ext2fs_inode_alloc_stats2(fs, ino, -1,
 286                                                   LINUX_S_ISDIR(inode.i_mode));
 287                         inode.i_dtime = ctx->now;
 288                 } else {
 289                         inode.i_dtime = 0;
 290                 }
 291                 e2fsck_write_inode(ctx, ino, &inode, "delete_file");
 292                 ino = next_ino;
 293         }
 294         ext2fs_free_mem(&block_buf);
 295         return 0;
 296 return_abort:
 297         ext2fs_free_mem(&block_buf);
 298         return 1;
 299 }
 300
 301 /*
 302  * Check the resize inode to make sure it is sane.  We check both for
 303  * the case where on-line resizing is not enabled (in which case the
 304  * resize inode should be cleared) as well as the case where on-line
 305  * resizing is enabled.
 306  */
 307 void check_resize_inode(e2fsck_t ctx)
 308 {
 309         ext2_filsys fs = ctx->fs;
 310         struct ext2_inode inode;
 311         struct problem_context  pctx;
 312         int             i, gdt_off, ind_off;
 313         dgrp_t          j;
 314         blk_t           blk, pblk, expect;
 315         __u32           *dind_buf = 0, *ind_buf;
 316         errcode_t       retval;
 317
 318         clear_problem_context(&pctx);
 319
 320         /*
 321          * If the resize inode feature isn't set, then
 322          * s_reserved_gdt_blocks must be zero.
 323          */
 324         if (!(fs->super->s_feature_compat &
 325               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
 326                 if (fs->super->s_reserved_gdt_blocks) {
 327                         pctx.num = fs->super->s_reserved_gdt_blocks;
 328                         if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
 329                                         &pctx)) {
 330                                 fs->super->s_reserved_gdt_blocks = 0;
 331                                 ext2fs_mark_super_dirty(fs);
 332                         }
 333                 }
 334         }
 335
 336         /* Read the resize inode */
 337         pctx.ino = EXT2_RESIZE_INO;
 338         retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
 339         if (retval) {
 340                 if (fs->super->s_feature_compat &
 341                     EXT2_FEATURE_COMPAT_RESIZE_INODE)
 342                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
 343                 return;
 344         }
 345
 346         /*
 347          * If the resize inode feature isn't set, check to make sure
 348          * the resize inode is cleared; then we're done.
 349          */
 350         if (!(fs->super->s_feature_compat &
 351               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
 352                 for (i=0; i < EXT2_N_BLOCKS; i++) {
 353                         if (inode.i_block[i])
 354                                 break;
 355                 }
 356                 if ((i < EXT2_N_BLOCKS) &&
 357                     fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
 358                         memset(&inode, 0, sizeof(inode));
 359                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
 360                                            "clear_resize");
 361                 }
 362                 return;
 363         }
 364
 365         /*
 366          * The resize inode feature is enabled; check to make sure the
 367          * only block in use is the double indirect block
 368          */
 369         blk = inode.i_block[EXT2_DIND_BLOCK];
 370         for (i=0; i < EXT2_N_BLOCKS; i++) {
 371                 if (i != EXT2_DIND_BLOCK && inode.i_block[i])
 372                         break;
 373         }
 374         if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
 375             !(inode.i_mode & LINUX_S_IFREG) ||
 376             (blk < fs->super->s_first_data_block ||
 377              blk >= fs->super->s_blocks_count)) {
 378         resize_inode_invalid:
 379                 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
 380                         memset(&inode, 0, sizeof(inode));
 381                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
 382                                            "clear_resize");
 383                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
 384                 }
 385                 if (!(ctx->options & E2F_OPT_READONLY)) {
 386                         fs->super->s_state &= ~EXT2_VALID_FS;
 387                         ext2fs_mark_super_dirty(fs);
 388                 }
 389                 goto cleanup;
 390         }
 391         dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
 392                                                     "resize dind buffer");
 393         ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
 394
 395         retval = ext2fs_read_ind_block(fs, blk, dind_buf);
 396         if (retval)
 397                 goto resize_inode_invalid;
 398
 399         gdt_off = fs->desc_blocks;
 400         pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
 401         for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
 402              i++, gdt_off++, pblk++) {
 403                 gdt_off %= fs->blocksize/4;
 404                 if (dind_buf[gdt_off] != pblk)
 405                         goto resize_inode_invalid;
 406                 retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
 407                 if (retval)
 408                         goto resize_inode_invalid;
 409                 ind_off = 0;
 410                 for (j = 1; j < fs->group_desc_count; j++) {
 411                         if (!ext2fs_bg_has_super(fs, j))
 412                                 continue;
 413                         expect = pblk + (j * fs->super->s_blocks_per_group);
 414                         if (ind_buf[ind_off] != expect)
 415                                 goto resize_inode_invalid;
 416                         ind_off++;
 417                 }
 418         }
 419
 420 cleanup:
 421         if (dind_buf)
 422                 ext2fs_free_mem(&dind_buf);
 423
 424  }
 425
 426 /*
 427  * This function checks the dirhash signed/unsigned hint if necessary.
 428  */
 429 static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
 430 {
 431         struct ext2_super_block *sb = ctx->fs->super;
 432         struct problem_context pctx;
 433         char    c;
 434
 435         if ((ctx->options & E2F_OPT_READONLY) ||
 436             !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
 437             (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
 438                 return;
 439
 440         c = (char) 255;
 441
 442         clear_problem_context(&pctx);
 443         if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
 444                 if (((int) c) == -1) {
 445                         sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
 446                 } else {
 447                         sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
 448                 }
 449                 ext2fs_mark_super_dirty(ctx->fs);
 450         }
 451 }
 452
 453
 454 void check_super_block(e2fsck_t ctx)
 455 {
 456         ext2_filsys fs = ctx->fs;
 457         blk_t   first_block, last_block;
 458         struct ext2_super_block *sb = fs->super;
 459         struct ext2_group_desc *gd;
 460         problem_t       problem;
 461         blk_t   blocks_per_group = fs->super->s_blocks_per_group;
 462         blk_t   bpg_max;
 463         int     inodes_per_block;
 464         int     ipg_max;
 465         int     inode_size;
 466         int     accept_time_fudge;
 467         int     broken_system_clock;
 468         dgrp_t  i;
 469         blk_t   should_be;
 470         struct problem_context  pctx;
 471         blk_t   free_blocks = 0;
 472         ino_t   free_inodes = 0;
 473         int     csum_flag, clear_test_fs_flag;
 474
 475         inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
 476         ipg_max = inodes_per_block * (blocks_per_group - 4);
 477         if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
 478                 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
 479         bpg_max = 8 * EXT2_BLOCK_SIZE(sb);
 480         if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
 481                 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
 482
 483         ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
 484                  sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
 485         ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
 486                  sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
 487         ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
 488                 sizeof(int) * fs->group_desc_count, "invalid_inode_table");
 489
 490         clear_problem_context(&pctx);
 491
 492         /*
 493          * Verify the super block constants...
 494          */
 495         check_super_value(ctx, "inodes_count", sb->s_inodes_count,
 496                           MIN_CHECK, 1, 0);
 497         check_super_value(ctx, "blocks_count", sb->s_blocks_count,
 498                           MIN_CHECK, 1, 0);
 499         check_super_value(ctx, "first_data_block", sb->s_first_data_block,
 500                           MAX_CHECK, 0, sb->s_blocks_count);
 501         check_super_value(ctx, "log_block_size", sb->s_log_block_size,
 502                           MIN_CHECK | MAX_CHECK, 0,
 503                           EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
 504         check_super_value(ctx, "log_frag_size", sb->s_log_frag_size,
 505                           MIN_CHECK | MAX_CHECK, 0, sb->s_log_block_size);
 506         check_super_value(ctx, "frags_per_group", sb->s_frags_per_group,
 507                           MIN_CHECK | MAX_CHECK, sb->s_blocks_per_group,
 508                           bpg_max);
 509         check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
 510                           MIN_CHECK | MAX_CHECK, 8, bpg_max);
 511         check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
 512                           MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
 513         check_super_value(ctx, "r_blocks_count", sb->s_r_blocks_count,
 514                           MAX_CHECK, 0, sb->s_blocks_count / 2);
 515         check_super_value(ctx, "reserved_gdt_blocks",
 516                           sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
 517                           fs->blocksize/4);
 518         if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
 519                 check_super_value(ctx, "first_ino", sb->s_first_ino,
 520                                   MIN_CHECK | MAX_CHECK,
 521                                   EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
 522         inode_size = EXT2_INODE_SIZE(sb);
 523         check_super_value(ctx, "inode_size",
 524                           inode_size, MIN_CHECK | MAX_CHECK,
 525                           EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
 526         if (inode_size & (inode_size - 1)) {
 527                 pctx.num = inode_size;
 528                 pctx.str = "inode_size";
 529                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
 530                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
 531                 return;
 532         }
 533
 534         if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
 535             (ctx->num_blocks < sb->s_blocks_count)) {
 536                 pctx.blk = sb->s_blocks_count;
 537                 pctx.blk2 = ctx->num_blocks;
 538                 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
 539                         ctx->flags |= E2F_FLAG_ABORT;
 540                         return;
 541                 }
 542         }
 543
 544         if (sb->s_log_block_size != (__u32) sb->s_log_frag_size) {
 545                 pctx.blk = EXT2_BLOCK_SIZE(sb);
 546                 pctx.blk2 = EXT2_FRAG_SIZE(sb);
 547                 fix_problem(ctx, PR_0_NO_FRAGMENTS, &pctx);
 548                 ctx->flags |= E2F_FLAG_ABORT;
 549                 return;
 550         }
 551
 552         should_be = sb->s_frags_per_group >>
 553                 (sb->s_log_block_size - sb->s_log_frag_size);
 554         if (sb->s_blocks_per_group != should_be) {
 555                 pctx.blk = sb->s_blocks_per_group;
 556                 pctx.blk2 = should_be;
 557                 fix_problem(ctx, PR_0_BLOCKS_PER_GROUP, &pctx);
 558                 ctx->flags |= E2F_FLAG_ABORT;
 559                 return;
 560         }
 561
 562         should_be = (sb->s_log_block_size == 0) ? 1 : 0;
 563         if (sb->s_first_data_block != should_be) {
 564                 pctx.blk = sb->s_first_data_block;
 565                 pctx.blk2 = should_be;
 566                 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
 567                 ctx->flags |= E2F_FLAG_ABORT;
 568                 return;
 569         }
 570
 571         should_be = sb->s_inodes_per_group * fs->group_desc_count;
 572         if (sb->s_inodes_count != should_be) {
 573                 pctx.ino = sb->s_inodes_count;
 574                 pctx.ino2 = should_be;
 575                 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
 576                         sb->s_inodes_count = should_be;
 577                         ext2fs_mark_super_dirty(fs);
 578                 }
 579         }
 580
 581         /*
 582          * Verify the group descriptors....
 583          */
 584         first_block = sb->s_first_data_block;
 585         last_block = sb->s_blocks_count-1;
 586
 587         csum_flag = EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
 588                                                EXT4_FEATURE_RO_COMPAT_GDT_CSUM);
 589         for (i = 0, gd=fs->group_desc; i < fs->group_desc_count; i++, gd++) {
 590                 pctx.group = i;
 591
 592                 if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
 593                                                EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
 594                         first_block = ext2fs_group_first_block(fs, i);
 595                         last_block = ext2fs_group_last_block(fs, i);
 596                 }
 597
 598                 if ((gd->bg_block_bitmap < first_block) ||
 599                     (gd->bg_block_bitmap > last_block)) {
 600                         pctx.blk = gd->bg_block_bitmap;
 601                         if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
 602                                 gd->bg_block_bitmap = 0;
 603                 }
 604                 if (gd->bg_block_bitmap == 0) {
 605                         ctx->invalid_block_bitmap_flag[i]++;
 606                         ctx->invalid_bitmaps++;
 607                 }
 608                 if ((gd->bg_inode_bitmap < first_block) ||
 609                     (gd->bg_inode_bitmap > last_block)) {
 610                         pctx.blk = gd->bg_inode_bitmap;
 611                         if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
 612                                 gd->bg_inode_bitmap = 0;
 613                 }
 614                 if (gd->bg_inode_bitmap == 0) {
 615                         ctx->invalid_inode_bitmap_flag[i]++;
 616                         ctx->invalid_bitmaps++;
 617                 }
 618                 if ((gd->bg_inode_table < first_block) ||
 619                     ((gd->bg_inode_table +
 620                       fs->inode_blocks_per_group - 1) > last_block)) {
 621                         pctx.blk = gd->bg_inode_table;
 622                         if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
 623                                 gd->bg_inode_table = 0;
 624                 }
 625                 if (gd->bg_inode_table == 0) {
 626                         ctx->invalid_inode_table_flag[i]++;
 627                         ctx->invalid_bitmaps++;
 628                 }
 629                 free_blocks += gd->bg_free_blocks_count;
 630                 free_inodes += gd->bg_free_inodes_count;
 631
 632                 if ((gd->bg_free_blocks_count > sb->s_blocks_per_group) ||
 633                     (gd->bg_free_inodes_count > sb->s_inodes_per_group) ||
 634                     (gd->bg_used_dirs_count > sb->s_inodes_per_group))
 635                         ext2fs_unmark_valid(fs);
 636
 637                 should_be = 0;
 638                 if (!ext2fs_group_desc_csum_verify(fs, i)) {
 639                         if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
 640                                 gd->bg_flags &= ~(EXT2_BG_BLOCK_UNINIT |
 641                                                   EXT2_BG_INODE_UNINIT);
 642                                 gd->bg_itable_unused = 0;
 643                                 should_be = 1;
 644                         }
 645                         ext2fs_unmark_valid(fs);
 646                 }
 647
 648                 if (!csum_flag &&
 649                     (gd->bg_flags &(EXT2_BG_BLOCK_UNINIT|EXT2_BG_INODE_UNINIT)||
 650                      gd->bg_itable_unused != 0)){
 651                         if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
 652                                 gd->bg_flags &= ~(EXT2_BG_BLOCK_UNINIT |
 653                                                   EXT2_BG_INODE_UNINIT);
 654                                 gd->bg_itable_unused = 0;
 655                                 should_be = 1;
 656                         }
 657                         ext2fs_unmark_valid(fs);
 658                 }
 659
 660                 if (i == fs->group_desc_count - 1 &&
 661                     gd->bg_flags & EXT2_BG_BLOCK_UNINIT) {
 662                         if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
 663                                 gd->bg_flags &= ~EXT2_BG_BLOCK_UNINIT;
 664                                 should_be = 1;
 665                         }
 666                         ext2fs_unmark_valid(fs);
 667                 }
 668
 669                 if (gd->bg_flags & EXT2_BG_BLOCK_UNINIT &&
 670                     !(gd->bg_flags & EXT2_BG_INODE_UNINIT)) {
 671                         if (fix_problem(ctx, PR_0_BB_UNINIT_IB_INIT, &pctx)) {
 672                                 gd->bg_flags &= ~EXT2_BG_BLOCK_UNINIT;
 673                                 should_be = 1;
 674                         }
 675                         ext2fs_unmark_valid(fs);
 676                 }
 677
 678                 if (csum_flag &&
 679                     (gd->bg_itable_unused > gd->bg_free_inodes_count ||
 680                      gd->bg_itable_unused > sb->s_inodes_per_group)) {
 681                         pctx.blk = gd->bg_itable_unused;
 682                         if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
 683                                 gd->bg_itable_unused = 0;
 684                                 should_be = 1;
 685                         }
 686                         ext2fs_unmark_valid(fs);
 687                 }
 688
 689                 if (should_be)
 690                         ext2fs_group_desc_csum_set(fs, i);
 691         }
 692
 693         /*
 694          * Update the global counts from the block group counts.  This
 695          * is needed for an experimental patch which eliminates
 696          * locking the entire filesystem when allocating blocks or
 697          * inodes; if the filesystem is not unmounted cleanly, the
 698          * global counts may not be accurate.
 699          */
 700         if ((free_blocks != sb->s_free_blocks_count) ||
 701             (free_inodes != sb->s_free_inodes_count)) {
 702                 if (ctx->options & E2F_OPT_READONLY)
 703                         ext2fs_unmark_valid(fs);
 704                 else {
 705                         sb->s_free_blocks_count = free_blocks;
 706                         sb->s_free_inodes_count = free_inodes;
 707                         ext2fs_mark_super_dirty(fs);
 708                 }
 709         }
 710
 711         if ((sb->s_free_blocks_count > sb->s_blocks_count) ||
 712             (sb->s_free_inodes_count > sb->s_inodes_count))
 713                 ext2fs_unmark_valid(fs);
 714
 715
 716         /*
 717          * If we have invalid bitmaps, set the error state of the
 718          * filesystem.
 719          */
 720         if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
 721                 sb->s_state &= ~EXT2_VALID_FS;
 722                 ext2fs_mark_super_dirty(fs);
 723         }
 724
 725         clear_problem_context(&pctx);
 726
 727 #ifndef EXT2_SKIP_UUID
 728         /*
 729          * If the UUID field isn't assigned, assign it.
 730          */
 731         if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
 732                 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
 733                         uuid_generate(sb->s_uuid);
 734                         ext2fs_mark_super_dirty(fs);
 735                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 736                 }
 737         }
 738 #endif
 739
 740         /*
 741          * Check to see if we should disable the test_fs flag
 742          */
 743         profile_get_boolean(ctx->profile, "options",
 744                             "clear_test_fs_flag", 0, 1,
 745                             &clear_test_fs_flag);
 746         if (!(ctx->options & E2F_OPT_READONLY) &&
 747             clear_test_fs_flag &&
 748             (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
 749             (fs_proc_check("ext4") || check_for_modules("ext4"))) {
 750                 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
 751                         fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
 752                         ext2fs_mark_super_dirty(fs);
 753                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 754                 }
 755         }
 756
 757         /*
 758          * For the Hurd, check to see if the filetype option is set,
 759          * since it doesn't support it.
 760          */
 761         if (!(ctx->options & E2F_OPT_READONLY) &&
 762             fs->super->s_creator_os == EXT2_OS_HURD &&
 763             (fs->super->s_feature_incompat &
 764              EXT2_FEATURE_INCOMPAT_FILETYPE)) {
 765                 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
 766                         fs->super->s_feature_incompat &=
 767                                 ~EXT2_FEATURE_INCOMPAT_FILETYPE;
 768                         ext2fs_mark_super_dirty(fs);
 769                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 770                 }
 771         }
 772
 773         /*
 774          * If we have any of the compatibility flags set, we need to have a
 775          * revision 1 filesystem.  Most kernels will not check the flags on
 776          * a rev 0 filesystem and we may have corruption issues because of
 777          * the incompatible changes to the filesystem.
 778          */
 779         if (!(ctx->options & E2F_OPT_READONLY) &&
 780             fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
 781             (fs->super->s_feature_compat ||
 782              fs->super->s_feature_ro_compat ||
 783              fs->super->s_feature_incompat) &&
 784             fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
 785                 ext2fs_update_dynamic_rev(fs);
 786                 ext2fs_mark_super_dirty(fs);
 787                 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 788         }
 789
 790         /*
 791          * Clean up any orphan inodes, if present.
 792          */
 793         if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
 794                 fs->super->s_state &= ~EXT2_VALID_FS;
 795                 ext2fs_mark_super_dirty(fs);
 796         }
 797
 798         /*
 799          * Unfortunately, due to Windows' unfortunate design decision
 800          * to configure the hardware clock to tick localtime, instead
 801          * of the more proper and less error-prone UTC time, many
 802          * users end up in the situation where the system clock is
 803          * incorrectly set at the time when e2fsck is run.
 804          *
 805          * Historically this was usually due to some distributions
 806          * having buggy init scripts and/or installers that didn't
 807          * correctly detect this case and take appropriate
 808          * countermeasures.  However, it's still possible, despite the
 809          * best efforts of init script and installer authors to not be
 810          * able to detect this misconfiguration, usually due to a
 811          * buggy or misconfigured virtualization manager or the
 812          * installer not having access to a network time server during
 813          * the installation process.  So by default, we allow the
 814          * superblock times to be fudged by up to 24 hours.  This can
 815          * be disabled by setting options.accept_time_fudge to the
 816          * boolean value of false in e2fsck.conf.  We also support
 817          * options.buggy_init_scripts for backwards compatibility.
 818          */
 819         profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
 820                             0, 1, &accept_time_fudge);
 821         profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
 822                             0, accept_time_fudge, &accept_time_fudge);
 823         ctx->time_fudge = accept_time_fudge ? 86400 : 0;
 824
 825         profile_get_boolean(ctx->profile, "options", "broken_system_clock",
 826                             0, 0, &broken_system_clock);
 827
 828         /*
 829          * Check to see if the superblock last mount time or last
 830          * write time is in the future.
 831          */
 832         if (!broken_system_clock &&
 833             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
 834             fs->super->s_mtime > (__u32) ctx->now) {
 835                 pctx.num = fs->super->s_mtime;
 836                 problem = PR_0_FUTURE_SB_LAST_MOUNT;
 837                 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
 838                         problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
 839                 if (fix_problem(ctx, problem, &pctx)) {
 840                         fs->super->s_mtime = ctx->now;
 841                         ext2fs_mark_super_dirty(fs);
 842                 }
 843         }
 844         if (!broken_system_clock &&
 845             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
 846             fs->super->s_wtime > (__u32) ctx->now) {
 847                 pctx.num = fs->super->s_wtime;
 848                 problem = PR_0_FUTURE_SB_LAST_WRITE;
 849                 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
 850                         problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
 851                 if (fix_problem(ctx, problem, &pctx)) {
 852                         fs->super->s_wtime = ctx->now;
 853                         ext2fs_mark_super_dirty(fs);
 854                 }
 855         }
 856
 857         /*
 858          * Move the ext3 journal file, if necessary.
 859          */
 860         e2fsck_move_ext3_journal(ctx);
 861
 862         /*
 863          * Fix journal hint, if necessary
 864          */
 865         e2fsck_fix_ext3_journal_hint(ctx);
 866
 867         /*
 868          * Add dirhash hint if necessary
 869          */
 870         e2fsck_fix_dirhash_hint(ctx);
 871
 872         return;
 873 }
 874
 875 /*
 876  * Check to see if we should backup the master sb to the backup super
 877  * blocks.  Returns non-zero if the sb should be backed up.
 878  */
 879
 880 /*
 881  * A few flags are set on the fly by the kernel, but only in the
 882  * primary superblock.  This is actually a bad thing, and we should
 883  * try to discourage it in the future.  In particular, for the newer
 884  * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
 885  * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
 886  * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
 887  * copying the primary superblock during online resize.
 888  *
 889  * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
 890  * unfortunately, we shouldn't ignore it since if it's not set in the
 891  * backup, the extended attributes in the filesystem will be stripped
 892  * away.
 893  */
 894 #define FEATURE_RO_COMPAT_IGNORE        (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
 895                                          EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
 896 #define FEATURE_INCOMPAT_IGNORE         (EXT3_FEATURE_INCOMPAT_EXTENTS| \
 897                                          EXT3_FEATURE_INCOMPAT_RECOVER)
 898
 899 int check_backup_super_block(e2fsck_t ctx)
 900 {
 901         ext2_filsys     fs = ctx->fs;
 902         errcode_t       retval;
 903         dgrp_t          g;
 904         blk_t           sb;
 905         int             ret = 0;
 906         char            buf[SUPERBLOCK_SIZE];
 907         struct ext2_super_block *backup_sb;
 908
 909         /*
 910          * If we are already writing out the backup blocks, then we
 911          * don't need to test.  Also, if the filesystem is invalid, or
 912          * the check was aborted or cancelled, we also don't want to
 913          * do the backup.  If the filesystem was opened read-only then
 914          * we can't do the backup.
 915          */
 916         if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
 917             !ext2fs_test_valid(fs) ||
 918             (fs->super->s_state & EXT2_ERROR_FS) ||
 919             (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
 920             (ctx->options & E2F_OPT_READONLY))
 921                 return 0;
 922
 923         for (g = 1; g < fs->group_desc_count; g++) {
 924                 if (!ext2fs_bg_has_super(fs, g))
 925                         continue;
 926
 927                 sb = fs->super->s_first_data_block +
 928                         (g * fs->super->s_blocks_per_group);
 929
 930                 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
 931                                              buf);
 932                 if (retval)
 933                         continue;
 934                 backup_sb = (struct ext2_super_block *) buf;
 935 #ifdef WORDS_BIGENDIAN
 936                 ext2fs_swap_super(backup_sb);
 937 #endif
 938                 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
 939                     (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
 940                     ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
 941                      EXT2_MAX_BLOCK_LOG_SIZE) ||
 942                     (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
 943                         continue;
 944
 945 #define SUPER_INCOMPAT_DIFFERENT(x)     \
 946         ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=   \
 947          (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
 948 #define SUPER_RO_COMPAT_DIFFERENT(x)    \
 949         ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=  \
 950          (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
 951 #define SUPER_DIFFERENT(x)              \
 952         (fs->super->x != backup_sb->x)
 953
 954                 if (SUPER_DIFFERENT(s_feature_compat) ||
 955                     SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
 956                     SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
 957                     SUPER_DIFFERENT(s_blocks_count) ||
 958                     SUPER_DIFFERENT(s_inodes_count) ||
 959                     memcmp(fs->super->s_uuid, backup_sb->s_uuid,
 960                            sizeof(fs->super->s_uuid)))
 961                         ret = 1;
 962                 break;
 963         }
 964         return ret;
 965 }