Whamcloud - gitweb
Merge branch 'maint' into next
[tools/e2fsprogs.git] / e2fsck / super.c
1 /*
2  * e2fsck.c - superblock checks
3  *
4  * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
5  *
6  * %Begin-Header%
7  * This file may be redistributed under the terms of the GNU Public
8  * License.
9  * %End-Header%
10  */
11
12 #include "config.h"
13 #ifdef HAVE_ERRNO_H
14 #include <errno.h>
15 #endif
16
17 #ifndef EXT2_SKIP_UUID
18 #include "uuid/uuid.h"
19 #endif
20 #include "e2fsck.h"
21 #include "problem.h"
22
23 #define MIN_CHECK 1
24 #define MAX_CHECK 2
25
26 static void check_super_value(e2fsck_t ctx, const char *descr,
27                               unsigned long value, int flags,
28                               unsigned long min_val, unsigned long max_val)
29 {
30         struct          problem_context pctx;
31
32         if (((flags & MIN_CHECK) && (value < min_val)) ||
33             ((flags & MAX_CHECK) && (value > max_val))) {
34                 clear_problem_context(&pctx);
35                 pctx.num = value;
36                 pctx.str = descr;
37                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
38                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
39         }
40 }
41
42 /*
43  * helper function to release an inode
44  */
45 struct process_block_struct {
46         e2fsck_t        ctx;
47         char            *buf;
48         struct problem_context *pctx;
49         int             truncating;
50         int             truncate_offset;
51         e2_blkcnt_t     truncate_block;
52         int             truncated_blocks;
53         int             abort;
54         errcode_t       errcode;
55 };
56
57 static int release_inode_block(ext2_filsys fs,
58                                blk64_t  *block_nr,
59                                e2_blkcnt_t blockcnt,
60                                blk64_t  ref_blk EXT2FS_ATTR((unused)),
61                                int      ref_offset EXT2FS_ATTR((unused)),
62                                void *priv_data)
63 {
64         struct process_block_struct *pb;
65         e2fsck_t                ctx;
66         struct problem_context  *pctx;
67         blk64_t                 blk = *block_nr;
68         int                     retval = 0;
69
70         pb = (struct process_block_struct *) priv_data;
71         ctx = pb->ctx;
72         pctx = pb->pctx;
73
74         pctx->blk = blk;
75         pctx->blkcount = blockcnt;
76
77         if (HOLE_BLKADDR(blk))
78                 return 0;
79
80         if ((blk < fs->super->s_first_data_block) ||
81             (blk >= ext2fs_blocks_count(fs->super))) {
82                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
83         return_abort:
84                 pb->abort = 1;
85                 return BLOCK_ABORT;
86         }
87
88         if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
89                 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
90                 goto return_abort;
91         }
92
93         /*
94          * If we are deleting an orphan, then we leave the fields alone.
95          * If we are truncating an orphan, then update the inode fields
96          * and clean up any partial block data.
97          */
98         if (pb->truncating) {
99                 /*
100                  * We only remove indirect blocks if they are
101                  * completely empty.
102                  */
103                 if (blockcnt < 0) {
104                         int     i, limit;
105                         blk_t   *bp;
106
107                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
108                                                         pb->buf);
109                         if (pb->errcode)
110                                 goto return_abort;
111
112                         limit = fs->blocksize >> 2;
113                         for (i = 0, bp = (blk_t *) pb->buf;
114                              i < limit;  i++, bp++)
115                                 if (*bp)
116                                         return 0;
117                 }
118                 /*
119                  * We don't remove direct blocks until we've reached
120                  * the truncation block.
121                  */
122                 if (blockcnt >= 0 && blockcnt < pb->truncate_block)
123                         return 0;
124                 /*
125                  * If part of the last block needs truncating, we do
126                  * it here.
127                  */
128                 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
129                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
130                                                         pb->buf);
131                         if (pb->errcode)
132                                 goto return_abort;
133                         memset(pb->buf + pb->truncate_offset, 0,
134                                fs->blocksize - pb->truncate_offset);
135                         pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
136                                                          pb->buf);
137                         if (pb->errcode)
138                                 goto return_abort;
139                 }
140                 pb->truncated_blocks++;
141                 *block_nr = 0;
142                 retval |= BLOCK_CHANGED;
143         }
144
145         ext2fs_block_alloc_stats2(fs, blk, -1);
146         ctx->free_blocks++;
147         return retval;
148 }
149
150 /*
151  * This function releases an inode.  Returns 1 if an inconsistency was
152  * found.  If the inode has a link count, then it is being truncated and
153  * not deleted.
154  */
155 static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
156                                 struct ext2_inode *inode, char *block_buf,
157                                 struct problem_context *pctx)
158 {
159         struct process_block_struct     pb;
160         ext2_filsys                     fs = ctx->fs;
161         errcode_t                       retval;
162         __u32                           count;
163
164         if (!ext2fs_inode_has_valid_blocks2(fs, inode))
165                 return 0;
166
167         pb.buf = block_buf + 3 * ctx->fs->blocksize;
168         pb.ctx = ctx;
169         pb.abort = 0;
170         pb.errcode = 0;
171         pb.pctx = pctx;
172         if (inode->i_links_count) {
173                 pb.truncating = 1;
174                 pb.truncate_block = (e2_blkcnt_t)
175                         ((EXT2_I_SIZE(inode) + fs->blocksize - 1) /
176                          fs->blocksize);
177                 pb.truncate_offset = inode->i_size % fs->blocksize;
178         } else {
179                 pb.truncating = 0;
180                 pb.truncate_block = 0;
181                 pb.truncate_offset = 0;
182         }
183         pb.truncated_blocks = 0;
184         retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
185                                       block_buf, release_inode_block, &pb);
186         if (retval) {
187                 com_err("release_inode_blocks", retval,
188                         _("while calling ext2fs_block_iterate for inode %d"),
189                         ino);
190                 return 1;
191         }
192         if (pb.abort)
193                 return 1;
194
195         /* Refresh the inode since ext2fs_block_iterate may have changed it */
196         e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
197
198         if (pb.truncated_blocks)
199                 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
200
201         if (ext2fs_file_acl_block(fs, inode)) {
202                 retval = ext2fs_adjust_ea_refcount3(fs,
203                                 ext2fs_file_acl_block(fs, inode),
204                                 block_buf, -1, &count, ino);
205                 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
206                         retval = 0;
207                         count = 1;
208                 }
209                 if (retval) {
210                         com_err("release_inode_blocks", retval,
211                 _("while calling ext2fs_adjust_ea_refcount2 for inode %d"),
212                                 ino);
213                         return 1;
214                 }
215                 if (count == 0) {
216                         ext2fs_block_alloc_stats2(fs,
217                                         ext2fs_file_acl_block(fs, inode), -1);
218                         ctx->free_blocks++;
219                 }
220                 ext2fs_file_acl_block_set(fs, inode, 0);
221         }
222         return 0;
223 }
224
225 /*
226  * This function releases all of the orphan inodes.  It returns 1 if
227  * it hit some error, and 0 on success.
228  */
229 static int release_orphan_inodes(e2fsck_t ctx)
230 {
231         ext2_filsys fs = ctx->fs;
232         ext2_ino_t      ino, next_ino;
233         struct ext2_inode inode;
234         struct problem_context pctx;
235         char *block_buf;
236
237         if ((ino = fs->super->s_last_orphan) == 0)
238                 return 0;
239
240         /*
241          * Win or lose, we won't be using the head of the orphan inode
242          * list again.
243          */
244         fs->super->s_last_orphan = 0;
245         ext2fs_mark_super_dirty(fs);
246
247         /*
248          * If the filesystem contains errors, don't run the orphan
249          * list, since the orphan list can't be trusted; and we're
250          * going to be running a full e2fsck run anyway...
251          */
252         if (fs->super->s_state & EXT2_ERROR_FS)
253                 return 0;
254
255         if ((ino < EXT2_FIRST_INODE(fs->super)) ||
256             (ino > fs->super->s_inodes_count)) {
257                 clear_problem_context(&pctx);
258                 pctx.ino = ino;
259                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
260                 return 1;
261         }
262
263         block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
264                                                     "block iterate buffer");
265         e2fsck_read_bitmaps(ctx);
266
267         while (ino) {
268                 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
269                 clear_problem_context(&pctx);
270                 pctx.ino = ino;
271                 pctx.inode = &inode;
272                 pctx.str = inode.i_links_count ? _("Truncating") :
273                         _("Clearing");
274
275                 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
276
277                 next_ino = inode.i_dtime;
278                 if (next_ino &&
279                     ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
280                      (next_ino > fs->super->s_inodes_count))) {
281                         pctx.ino = next_ino;
282                         fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
283                         goto return_abort;
284                 }
285
286                 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
287                         goto return_abort;
288
289                 if (!inode.i_links_count) {
290                         ext2fs_inode_alloc_stats2(fs, ino, -1,
291                                                   LINUX_S_ISDIR(inode.i_mode));
292                         ctx->free_inodes++;
293                         inode.i_dtime = ctx->now;
294                 } else {
295                         inode.i_dtime = 0;
296                 }
297                 e2fsck_write_inode(ctx, ino, &inode, "delete_file");
298                 ino = next_ino;
299         }
300         ext2fs_free_mem(&block_buf);
301         return 0;
302 return_abort:
303         ext2fs_free_mem(&block_buf);
304         return 1;
305 }
306
307 /*
308  * Check the resize inode to make sure it is sane.  We check both for
309  * the case where on-line resizing is not enabled (in which case the
310  * resize inode should be cleared) as well as the case where on-line
311  * resizing is enabled.
312  */
313 void check_resize_inode(e2fsck_t ctx)
314 {
315         ext2_filsys fs = ctx->fs;
316         struct ext2_inode inode;
317         struct problem_context  pctx;
318         int             i, gdt_off, ind_off;
319         dgrp_t          j;
320         blk_t           blk, pblk;
321         blk_t           expect; /* for resize inode, which is 32-bit only */
322         __u32           *dind_buf = 0, *ind_buf;
323         errcode_t       retval;
324
325         clear_problem_context(&pctx);
326
327         /*
328          * If the resize inode feature isn't set, then
329          * s_reserved_gdt_blocks must be zero.
330          */
331         if (!(fs->super->s_feature_compat &
332               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
333                 if (fs->super->s_reserved_gdt_blocks) {
334                         pctx.num = fs->super->s_reserved_gdt_blocks;
335                         if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
336                                         &pctx)) {
337                                 fs->super->s_reserved_gdt_blocks = 0;
338                                 ext2fs_mark_super_dirty(fs);
339                         }
340                 }
341         }
342
343         /* Read the resize inode */
344         pctx.ino = EXT2_RESIZE_INO;
345         retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
346         if (retval) {
347                 if (fs->super->s_feature_compat &
348                     EXT2_FEATURE_COMPAT_RESIZE_INODE)
349                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
350                 return;
351         }
352
353         /*
354          * If the resize inode feature isn't set, check to make sure
355          * the resize inode is cleared; then we're done.
356          */
357         if (!(fs->super->s_feature_compat &
358               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
359                 for (i=0; i < EXT2_N_BLOCKS; i++) {
360                         if (inode.i_block[i])
361                                 break;
362                 }
363                 if ((i < EXT2_N_BLOCKS) &&
364                     fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
365                         memset(&inode, 0, sizeof(inode));
366                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
367                                            "clear_resize");
368                 }
369                 return;
370         }
371
372         /*
373          * The resize inode feature is enabled; check to make sure the
374          * only block in use is the double indirect block
375          */
376         blk = inode.i_block[EXT2_DIND_BLOCK];
377         for (i=0; i < EXT2_N_BLOCKS; i++) {
378                 if (i != EXT2_DIND_BLOCK && inode.i_block[i])
379                         break;
380         }
381         if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
382             !(inode.i_mode & LINUX_S_IFREG) ||
383             (blk < fs->super->s_first_data_block ||
384              blk >= ext2fs_blocks_count(fs->super))) {
385         resize_inode_invalid:
386                 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
387                         memset(&inode, 0, sizeof(inode));
388                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
389                                            "clear_resize");
390                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
391                 }
392                 if (!(ctx->options & E2F_OPT_READONLY)) {
393                         fs->super->s_state &= ~EXT2_VALID_FS;
394                         ext2fs_mark_super_dirty(fs);
395                 }
396                 goto cleanup;
397         }
398         dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
399                                                     "resize dind buffer");
400         ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
401
402         retval = ext2fs_read_ind_block(fs, blk, dind_buf);
403         if (retval)
404                 goto resize_inode_invalid;
405
406         gdt_off = fs->desc_blocks;
407         pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
408         if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0)
409                 pblk++; /* Deal with 1024 blocksize bigalloc fs */
410         for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
411              i++, gdt_off++, pblk++) {
412                 gdt_off %= fs->blocksize/4;
413                 if (dind_buf[gdt_off] != pblk)
414                         goto resize_inode_invalid;
415                 retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
416                 if (retval)
417                         goto resize_inode_invalid;
418                 ind_off = 0;
419                 for (j = 1; j < fs->group_desc_count; j++) {
420                         if (!ext2fs_bg_has_super(fs, j))
421                                 continue;
422                         expect = pblk + (j * fs->super->s_blocks_per_group);
423                         if (ind_buf[ind_off] != expect)
424                                 goto resize_inode_invalid;
425                         ind_off++;
426                 }
427         }
428
429 cleanup:
430         if (dind_buf)
431                 ext2fs_free_mem(&dind_buf);
432
433  }
434
435 /*
436  * This function checks the dirhash signed/unsigned hint if necessary.
437  */
438 static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
439 {
440         struct ext2_super_block *sb = ctx->fs->super;
441         struct problem_context pctx;
442         char    c;
443
444         if ((ctx->options & E2F_OPT_READONLY) ||
445             !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
446             (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
447                 return;
448
449         c = (char) 255;
450
451         clear_problem_context(&pctx);
452         if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
453                 if (((int) c) == -1) {
454                         sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
455                 } else {
456                         sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
457                 }
458                 ext2fs_mark_super_dirty(ctx->fs);
459         }
460 }
461
462
463 void check_super_block(e2fsck_t ctx)
464 {
465         ext2_filsys fs = ctx->fs;
466         blk64_t first_block, last_block;
467         struct ext2_super_block *sb = fs->super;
468         unsigned int    ipg_max;
469         problem_t       problem;
470         blk64_t blocks_per_group = fs->super->s_blocks_per_group;
471         __u32   bpg_max, cpg_max;
472         int     inodes_per_block;
473         int     inode_size;
474         int     accept_time_fudge;
475         int     broken_system_clock;
476         dgrp_t  i;
477         blk64_t should_be;
478         struct problem_context  pctx;
479         blk64_t free_blocks = 0;
480         ino_t   free_inodes = 0;
481         int     csum_flag, clear_test_fs_flag;
482
483         inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
484         ipg_max = inodes_per_block * (blocks_per_group - 4);
485         if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
486                 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
487         cpg_max = 8 * EXT2_BLOCK_SIZE(sb);
488         if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb))
489                 cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb);
490         bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs);
491         if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
492                 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
493
494         ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
495                  sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
496         ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
497                  sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
498         ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
499                 sizeof(int) * fs->group_desc_count, "invalid_inode_table");
500
501         clear_problem_context(&pctx);
502
503         /*
504          * Verify the super block constants...
505          */
506         check_super_value(ctx, "inodes_count", sb->s_inodes_count,
507                           MIN_CHECK, 1, 0);
508         check_super_value(ctx, "blocks_count", ext2fs_blocks_count(sb),
509                           MIN_CHECK, 1, 0);
510         check_super_value(ctx, "first_data_block", sb->s_first_data_block,
511                           MAX_CHECK, 0, ext2fs_blocks_count(sb));
512         check_super_value(ctx, "log_block_size", sb->s_log_block_size,
513                           MIN_CHECK | MAX_CHECK, 0,
514                           EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
515         check_super_value(ctx, "log_cluster_size",
516                           sb->s_log_cluster_size,
517                           MIN_CHECK | MAX_CHECK, sb->s_log_block_size,
518                           (EXT2_MAX_CLUSTER_LOG_SIZE -
519                            EXT2_MIN_CLUSTER_LOG_SIZE));
520         check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group,
521                           MIN_CHECK | MAX_CHECK, 8, cpg_max);
522         check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
523                           MIN_CHECK | MAX_CHECK, 8, bpg_max);
524         check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
525                           MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
526         check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb),
527                           MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2);
528         check_super_value(ctx, "reserved_gdt_blocks",
529                           sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
530                           fs->blocksize/4);
531         if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
532                 check_super_value(ctx, "first_ino", sb->s_first_ino,
533                                   MIN_CHECK | MAX_CHECK,
534                                   EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
535         inode_size = EXT2_INODE_SIZE(sb);
536         check_super_value(ctx, "inode_size",
537                           inode_size, MIN_CHECK | MAX_CHECK,
538                           EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
539         if (sb->s_blocks_per_group != (sb->s_clusters_per_group *
540                                        EXT2FS_CLUSTER_RATIO(fs))) {
541                 pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs);
542                 pctx.str = "block_size";
543                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
544                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
545                 return;
546         }
547         if (inode_size & (inode_size - 1)) {
548                 pctx.num = inode_size;
549                 pctx.str = "inode_size";
550                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
551                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
552                 return;
553         }
554
555         if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
556             (ctx->num_blocks < ext2fs_blocks_count(sb))) {
557                 pctx.blk = ext2fs_blocks_count(sb);
558                 pctx.blk2 = ctx->num_blocks;
559                 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
560                         ctx->flags |= E2F_FLAG_ABORT;
561                         return;
562                 }
563         }
564
565         should_be = (sb->s_log_block_size == 0 &&
566                      EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0;
567         if (sb->s_first_data_block != should_be) {
568                 pctx.blk = sb->s_first_data_block;
569                 pctx.blk2 = should_be;
570                 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
571                 ctx->flags |= E2F_FLAG_ABORT;
572                 return;
573         }
574
575         should_be = sb->s_inodes_per_group * fs->group_desc_count;
576         if (sb->s_inodes_count != should_be) {
577                 pctx.ino = sb->s_inodes_count;
578                 pctx.ino2 = should_be;
579                 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
580                         sb->s_inodes_count = should_be;
581                         ext2fs_mark_super_dirty(fs);
582                 }
583         }
584
585         /* Are metadata_csum and uninit_bg both set? */
586         if (EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
587                                        EXT4_FEATURE_RO_COMPAT_METADATA_CSUM) &&
588             EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
589                                        EXT4_FEATURE_RO_COMPAT_GDT_CSUM) &&
590             fix_problem(ctx, PR_0_META_AND_GDT_CSUM_SET, &pctx)) {
591                 fs->super->s_feature_ro_compat &=
592                         ~EXT4_FEATURE_RO_COMPAT_GDT_CSUM;
593                 ext2fs_mark_super_dirty(fs);
594                 for (i = 0; i < fs->group_desc_count; i++)
595                         ext2fs_group_desc_csum_set(fs, i);
596         }
597
598         /* Is 64bit set and extents unset? */
599         if (EXT2_HAS_INCOMPAT_FEATURE(fs->super,
600                                       EXT4_FEATURE_INCOMPAT_64BIT) &&
601             !EXT2_HAS_INCOMPAT_FEATURE(fs->super,
602                                        EXT3_FEATURE_INCOMPAT_EXTENTS) &&
603             fix_problem(ctx, PR_0_64BIT_WITHOUT_EXTENTS, &pctx)) {
604                 fs->super->s_feature_incompat |=
605                         EXT3_FEATURE_INCOMPAT_EXTENTS;
606                 ext2fs_mark_super_dirty(fs);
607         }
608
609         /*
610          * Verify the group descriptors....
611          */
612         first_block = sb->s_first_data_block;
613         last_block = ext2fs_blocks_count(sb)-1;
614
615         csum_flag = ext2fs_has_group_desc_csum(fs);
616         for (i = 0; i < fs->group_desc_count; i++) {
617                 pctx.group = i;
618
619                 if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
620                                                EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
621                         first_block = ext2fs_group_first_block2(fs, i);
622                         last_block = ext2fs_group_last_block2(fs, i);
623                 }
624
625                 if ((ext2fs_block_bitmap_loc(fs, i) < first_block) ||
626                     (ext2fs_block_bitmap_loc(fs, i) > last_block)) {
627                         pctx.blk = ext2fs_block_bitmap_loc(fs, i);
628                         if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
629                                 ext2fs_block_bitmap_loc_set(fs, i, 0);
630                 }
631                 if (ext2fs_block_bitmap_loc(fs, i) == 0) {
632                         ctx->invalid_block_bitmap_flag[i]++;
633                         ctx->invalid_bitmaps++;
634                 }
635                 if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) ||
636                     (ext2fs_inode_bitmap_loc(fs, i) > last_block)) {
637                         pctx.blk = ext2fs_inode_bitmap_loc(fs, i);
638                         if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
639                                 ext2fs_inode_bitmap_loc_set(fs, i, 0);
640                 }
641                 if (ext2fs_inode_bitmap_loc(fs, i) == 0) {
642                         ctx->invalid_inode_bitmap_flag[i]++;
643                         ctx->invalid_bitmaps++;
644                 }
645                 if ((ext2fs_inode_table_loc(fs, i) < first_block) ||
646                     ((ext2fs_inode_table_loc(fs, i) +
647                       fs->inode_blocks_per_group - 1) > last_block)) {
648                         pctx.blk = ext2fs_inode_table_loc(fs, i);
649                         if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
650                                 ext2fs_inode_table_loc_set(fs, i, 0);
651                 }
652                 if (ext2fs_inode_table_loc(fs, i) == 0) {
653                         ctx->invalid_inode_table_flag[i]++;
654                         ctx->invalid_bitmaps++;
655                 }
656                 free_blocks += ext2fs_bg_free_blocks_count(fs, i);
657                 free_inodes += ext2fs_bg_free_inodes_count(fs, i);
658
659                 if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) ||
660                     (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) ||
661                     (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group))
662                         ext2fs_unmark_valid(fs);
663
664                 should_be = 0;
665                 if (!ext2fs_group_desc_csum_verify(fs, i)) {
666                         pctx.csum1 = ext2fs_bg_checksum(fs, i);
667                         pctx.csum2 = ext2fs_group_desc_csum(fs, i);
668                         if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
669                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
670                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
671                                 ext2fs_bg_itable_unused_set(fs, i, 0);
672                                 should_be = 1;
673                         }
674                         ext2fs_unmark_valid(fs);
675                 }
676
677                 if (!csum_flag &&
678                     (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
679                      ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) ||
680                      ext2fs_bg_itable_unused(fs, i) != 0)) {
681                         if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
682                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
683                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
684                                 ext2fs_bg_itable_unused_set(fs, i, 0);
685                                 should_be = 1;
686                         }
687                         ext2fs_unmark_valid(fs);
688                 }
689
690                 if (i == fs->group_desc_count - 1 &&
691                     ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
692                         if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
693                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
694                                 should_be = 1;
695                         }
696                         ext2fs_unmark_valid(fs);
697                 }
698
699                 if (csum_flag &&
700                     (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) ||
701                      ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) {
702                         pctx.blk = ext2fs_bg_itable_unused(fs, i);
703                         if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
704                                 ext2fs_bg_itable_unused_set(fs, i, 0);
705                                 should_be = 1;
706                         }
707                         ext2fs_unmark_valid(fs);
708                 }
709
710                 if (should_be)
711                         ext2fs_group_desc_csum_set(fs, i);
712                 /* If the user aborts e2fsck by typing ^C, stop right away */
713                 if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
714                         return;
715         }
716
717         ctx->free_blocks = EXT2FS_C2B(fs, free_blocks);
718         ctx->free_inodes = free_inodes;
719
720         if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) ||
721             (sb->s_free_inodes_count > sb->s_inodes_count))
722                 ext2fs_unmark_valid(fs);
723
724
725         /*
726          * If we have invalid bitmaps, set the error state of the
727          * filesystem.
728          */
729         if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
730                 sb->s_state &= ~EXT2_VALID_FS;
731                 ext2fs_mark_super_dirty(fs);
732         }
733
734         clear_problem_context(&pctx);
735
736 #ifndef EXT2_SKIP_UUID
737         /*
738          * If the UUID field isn't assigned, assign it.
739          */
740         if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
741                 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
742                         uuid_generate(sb->s_uuid);
743                         ext2fs_init_csum_seed(fs);
744                         fs->flags |= EXT2_FLAG_DIRTY;
745                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
746                 }
747         }
748 #endif
749
750         /*
751          * Check to see if we should disable the test_fs flag
752          */
753         profile_get_boolean(ctx->profile, "options",
754                             "clear_test_fs_flag", 0, 1,
755                             &clear_test_fs_flag);
756         if (!(ctx->options & E2F_OPT_READONLY) &&
757             clear_test_fs_flag &&
758             (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
759             (fs_proc_check("ext4") || check_for_modules("ext4"))) {
760                 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
761                         fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
762                         fs->flags |= EXT2_FLAG_DIRTY;
763                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
764                 }
765         }
766                         
767         /*
768          * For the Hurd, check to see if the filetype option is set,
769          * since it doesn't support it.
770          */
771         if (!(ctx->options & E2F_OPT_READONLY) &&
772             fs->super->s_creator_os == EXT2_OS_HURD &&
773             (fs->super->s_feature_incompat &
774              EXT2_FEATURE_INCOMPAT_FILETYPE)) {
775                 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
776                         fs->super->s_feature_incompat &=
777                                 ~EXT2_FEATURE_INCOMPAT_FILETYPE;
778                         ext2fs_mark_super_dirty(fs);
779                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
780                 }
781         }
782
783         /*
784          * If we have any of the compatibility flags set, we need to have a
785          * revision 1 filesystem.  Most kernels will not check the flags on
786          * a rev 0 filesystem and we may have corruption issues because of
787          * the incompatible changes to the filesystem.
788          */
789         if (!(ctx->options & E2F_OPT_READONLY) &&
790             fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
791             (fs->super->s_feature_compat ||
792              fs->super->s_feature_ro_compat ||
793              fs->super->s_feature_incompat) &&
794             fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
795                 ext2fs_update_dynamic_rev(fs);
796                 ext2fs_mark_super_dirty(fs);
797                 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
798         }
799
800         /*
801          * Clean up any orphan inodes, if present.
802          */
803         if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
804                 fs->super->s_state &= ~EXT2_VALID_FS;
805                 ext2fs_mark_super_dirty(fs);
806         }
807
808         /*
809          * Unfortunately, due to Windows' unfortunate design decision
810          * to configure the hardware clock to tick localtime, instead
811          * of the more proper and less error-prone UTC time, many
812          * users end up in the situation where the system clock is
813          * incorrectly set at the time when e2fsck is run.
814          *
815          * Historically this was usually due to some distributions
816          * having buggy init scripts and/or installers that didn't
817          * correctly detect this case and take appropriate
818          * countermeasures.  However, it's still possible, despite the
819          * best efforts of init script and installer authors to not be
820          * able to detect this misconfiguration, usually due to a
821          * buggy or misconfigured virtualization manager or the
822          * installer not having access to a network time server during
823          * the installation process.  So by default, we allow the
824          * superblock times to be fudged by up to 24 hours.  This can
825          * be disabled by setting options.accept_time_fudge to the
826          * boolean value of false in e2fsck.conf.  We also support
827          * options.buggy_init_scripts for backwards compatibility.
828          */
829         profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
830                             0, 1, &accept_time_fudge);
831         profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
832                             0, accept_time_fudge, &accept_time_fudge);
833         ctx->time_fudge = accept_time_fudge ? 86400 : 0;
834
835         profile_get_boolean(ctx->profile, "options", "broken_system_clock",
836                             0, 0, &broken_system_clock);
837
838         /*
839          * Check to see if the superblock last mount time or last
840          * write time is in the future.
841          */
842         if (!broken_system_clock &&
843             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
844             fs->super->s_mtime > (__u32) ctx->now) {
845                 pctx.num = fs->super->s_mtime;
846                 problem = PR_0_FUTURE_SB_LAST_MOUNT;
847                 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
848                         problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
849                 if (fix_problem(ctx, problem, &pctx)) {
850                         fs->super->s_mtime = ctx->now;
851                         fs->flags |= EXT2_FLAG_DIRTY;
852                 }
853         }
854         if (!broken_system_clock &&
855             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
856             fs->super->s_wtime > (__u32) ctx->now) {
857                 pctx.num = fs->super->s_wtime;
858                 problem = PR_0_FUTURE_SB_LAST_WRITE;
859                 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
860                         problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
861                 if (fix_problem(ctx, problem, &pctx)) {
862                         fs->super->s_wtime = ctx->now;
863                         fs->flags |= EXT2_FLAG_DIRTY;
864                 }
865         }
866
867         /*
868          * Move the ext3 journal file, if necessary.
869          */
870         e2fsck_move_ext3_journal(ctx);
871
872         /*
873          * Fix journal hint, if necessary
874          */
875         e2fsck_fix_ext3_journal_hint(ctx);
876
877         /*
878          * Add dirhash hint if necessary
879          */
880         e2fsck_fix_dirhash_hint(ctx);
881
882         /*
883          * Hide quota inodes if necessary.
884          */
885         e2fsck_hide_quota(ctx);
886
887         return;
888 }
889
890 /*
891  * Check to see if we should backup the master sb to the backup super
892  * blocks.  Returns non-zero if the sb should be backed up.
893  */
894
895 /*
896  * A few flags are set on the fly by the kernel, but only in the
897  * primary superblock.  This is actually a bad thing, and we should
898  * try to discourage it in the future.  In particular, for the newer
899  * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
900  * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
901  * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
902  * copying the primary superblock during online resize.
903  *
904  * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
905  * unfortunately, we shouldn't ignore it since if it's not set in the
906  * backup, the extended attributes in the filesystem will be stripped
907  * away.
908  */
909 #define FEATURE_RO_COMPAT_IGNORE        (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
910                                          EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
911 #define FEATURE_INCOMPAT_IGNORE         (EXT3_FEATURE_INCOMPAT_EXTENTS| \
912                                          EXT3_FEATURE_INCOMPAT_RECOVER)
913
914 int check_backup_super_block(e2fsck_t ctx)
915 {
916         ext2_filsys     fs = ctx->fs;
917         errcode_t       retval;
918         dgrp_t          g;
919         blk64_t         sb;
920         int             ret = 0;
921         char            buf[SUPERBLOCK_SIZE];
922         struct ext2_super_block *backup_sb;
923
924         /*
925          * If we are already writing out the backup blocks, then we
926          * don't need to test.  Also, if the filesystem is invalid, or
927          * the check was aborted or cancelled, we also don't want to
928          * do the backup.  If the filesystem was opened read-only then
929          * we can't do the backup.
930          */
931         if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
932             !ext2fs_test_valid(fs) ||
933             (fs->super->s_state & EXT2_ERROR_FS) ||
934             (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
935             (ctx->options & E2F_OPT_READONLY))
936                 return 0;
937
938         for (g = 1; g < fs->group_desc_count; g++) {
939                 if (!ext2fs_bg_has_super(fs, g))
940                         continue;
941
942                 sb = ext2fs_group_first_block2(fs, g);
943
944                 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
945                                              buf);
946                 if (retval)
947                         continue;
948                 backup_sb = (struct ext2_super_block *) buf;
949 #ifdef WORDS_BIGENDIAN
950                 ext2fs_swap_super(backup_sb);
951 #endif
952                 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
953                     (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
954                     ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
955                      EXT2_MAX_BLOCK_LOG_SIZE) ||
956                     (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
957                         continue;
958
959 #define SUPER_INCOMPAT_DIFFERENT(x)     \
960         ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=   \
961          (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
962 #define SUPER_RO_COMPAT_DIFFERENT(x)    \
963         ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=  \
964          (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
965 #define SUPER_DIFFERENT(x)              \
966         (fs->super->x != backup_sb->x)
967
968                 if (SUPER_DIFFERENT(s_feature_compat) ||
969                     SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
970                     SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
971                     SUPER_DIFFERENT(s_blocks_count) ||
972                     SUPER_DIFFERENT(s_inodes_count) ||
973                     memcmp(fs->super->s_uuid, backup_sb->s_uuid,
974                            sizeof(fs->super->s_uuid)))
975                         ret = 1;
976                 break;
977         }
978         return ret;
979 }