e2fsck/super.c

   1 /*
   2  * e2fsck.c - superblock checks
   3  *
   4  * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
   5  *
   6  * %Begin-Header%
   7  * This file may be redistributed under the terms of the GNU Public
   8  * License.
   9  * %End-Header%
  10  */
  11
  12 #include "config.h"
  13 #ifdef HAVE_ERRNO_H
  14 #include <errno.h>
  15 #endif
  16
  17 #ifndef EXT2_SKIP_UUID
  18 #include "uuid/uuid.h"
  19 #endif
  20 #include "e2fsck.h"
  21 #include "problem.h"
  22
  23 #define MIN_CHECK 1
  24 #define MAX_CHECK 2
  25
  26 static void check_super_value(e2fsck_t ctx, const char *descr,
  27                               unsigned long value, int flags,
  28                               unsigned long min_val, unsigned long max_val)
  29 {
  30         struct          problem_context pctx;
  31
  32         if (((flags & MIN_CHECK) && (value < min_val)) ||
  33             ((flags & MAX_CHECK) && (value > max_val))) {
  34                 clear_problem_context(&pctx);
  35                 pctx.num = value;
  36                 pctx.str = descr;
  37                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
  38                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
  39         }
  40 }
  41
  42 /*
  43  * helper function to release an inode
  44  */
  45 struct process_block_struct {
  46         e2fsck_t        ctx;
  47         char            *buf;
  48         struct problem_context *pctx;
  49         int             truncating;
  50         int             truncate_offset;
  51         e2_blkcnt_t     truncate_block;
  52         int             truncated_blocks;
  53         int             abort;
  54         errcode_t       errcode;
  55 };
  56
  57 static int release_inode_block(ext2_filsys fs,
  58                                blk64_t  *block_nr,
  59                                e2_blkcnt_t blockcnt,
  60                                blk64_t  ref_blk EXT2FS_ATTR((unused)),
  61                                int      ref_offset EXT2FS_ATTR((unused)),
  62                                void *priv_data)
  63 {
  64         struct process_block_struct *pb;
  65         e2fsck_t                ctx;
  66         struct problem_context  *pctx;
  67         blk64_t                 blk = *block_nr;
  68         int                     retval = 0;
  69
  70         pb = (struct process_block_struct *) priv_data;
  71         ctx = pb->ctx;
  72         pctx = pb->pctx;
  73
  74         pctx->blk = blk;
  75         pctx->blkcount = blockcnt;
  76
  77         if (HOLE_BLKADDR(blk))
  78                 return 0;
  79
  80         if ((blk < fs->super->s_first_data_block) ||
  81             (blk >= ext2fs_blocks_count(fs->super))) {
  82                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
  83         return_abort:
  84                 pb->abort = 1;
  85                 return BLOCK_ABORT;
  86         }
  87
  88         if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
  89                 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
  90                 goto return_abort;
  91         }
  92
  93         /*
  94          * If we are deleting an orphan, then we leave the fields alone.
  95          * If we are truncating an orphan, then update the inode fields
  96          * and clean up any partial block data.
  97          */
  98         if (pb->truncating) {
  99                 /*
 100                  * We only remove indirect blocks if they are
 101                  * completely empty.
 102                  */
 103                 if (blockcnt < 0) {
 104                         int     i, limit;
 105                         blk_t   *bp;
 106
 107                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
 108                                                         pb->buf);
 109                         if (pb->errcode)
 110                                 goto return_abort;
 111
 112                         limit = fs->blocksize >> 2;
 113                         for (i = 0, bp = (blk_t *) pb->buf;
 114                              i < limit;  i++, bp++)
 115                                 if (*bp)
 116                                         return 0;
 117                 }
 118                 /*
 119                  * We don't remove direct blocks until we've reached
 120                  * the truncation block.
 121                  */
 122                 if (blockcnt >= 0 && blockcnt < pb->truncate_block)
 123                         return 0;
 124                 /*
 125                  * If part of the last block needs truncating, we do
 126                  * it here.
 127                  */
 128                 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
 129                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
 130                                                         pb->buf);
 131                         if (pb->errcode)
 132                                 goto return_abort;
 133                         memset(pb->buf + pb->truncate_offset, 0,
 134                                fs->blocksize - pb->truncate_offset);
 135                         pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
 136                                                          pb->buf);
 137                         if (pb->errcode)
 138                                 goto return_abort;
 139                 }
 140                 pb->truncated_blocks++;
 141                 *block_nr = 0;
 142                 retval |= BLOCK_CHANGED;
 143         }
 144
 145         ext2fs_block_alloc_stats2(fs, blk, -1);
 146         ctx->free_blocks++;
 147         return retval;
 148 }
 149
 150 /*
 151  * This function releases an inode.  Returns 1 if an inconsistency was
 152  * found.  If the inode has a link count, then it is being truncated and
 153  * not deleted.
 154  */
 155 static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
 156                                 struct ext2_inode *inode, char *block_buf,
 157                                 struct problem_context *pctx)
 158 {
 159         struct process_block_struct     pb;
 160         ext2_filsys                     fs = ctx->fs;
 161         errcode_t                       retval;
 162         __u32                           count;
 163
 164         if (!ext2fs_inode_has_valid_blocks2(fs, inode))
 165                 return 0;
 166
 167         pb.buf = block_buf + 3 * ctx->fs->blocksize;
 168         pb.ctx = ctx;
 169         pb.abort = 0;
 170         pb.errcode = 0;
 171         pb.pctx = pctx;
 172         if (inode->i_links_count) {
 173                 pb.truncating = 1;
 174                 pb.truncate_block = (e2_blkcnt_t)
 175                         ((EXT2_I_SIZE(inode) + fs->blocksize - 1) /
 176                          fs->blocksize);
 177                 pb.truncate_offset = inode->i_size % fs->blocksize;
 178         } else {
 179                 pb.truncating = 0;
 180                 pb.truncate_block = 0;
 181                 pb.truncate_offset = 0;
 182         }
 183         pb.truncated_blocks = 0;
 184         retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
 185                                       block_buf, release_inode_block, &pb);
 186         if (retval) {
 187                 com_err("release_inode_blocks", retval,
 188                         _("while calling ext2fs_block_iterate for inode %d"),
 189                         ino);
 190                 return 1;
 191         }
 192         if (pb.abort)
 193                 return 1;
 194
 195         /* Refresh the inode since ext2fs_block_iterate may have changed it */
 196         e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
 197
 198         if (pb.truncated_blocks)
 199                 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
 200
 201         if (ext2fs_file_acl_block(fs, inode)) {
 202                 retval = ext2fs_adjust_ea_refcount3(fs,
 203                                 ext2fs_file_acl_block(fs, inode),
 204                                 block_buf, -1, &count, ino);
 205                 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
 206                         retval = 0;
 207                         count = 1;
 208                 }
 209                 if (retval) {
 210                         com_err("release_inode_blocks", retval,
 211                 _("while calling ext2fs_adjust_ea_refcount2 for inode %d"),
 212                                 ino);
 213                         return 1;
 214                 }
 215                 if (count == 0) {
 216                         ext2fs_block_alloc_stats2(fs,
 217                                         ext2fs_file_acl_block(fs, inode), -1);
 218                         ctx->free_blocks++;
 219                 }
 220                 ext2fs_file_acl_block_set(fs, inode, 0);
 221         }
 222         return 0;
 223 }
 224
 225 /*
 226  * This function releases all of the orphan inodes.  It returns 1 if
 227  * it hit some error, and 0 on success.
 228  */
 229 static int release_orphan_inodes(e2fsck_t ctx)
 230 {
 231         ext2_filsys fs = ctx->fs;
 232         ext2_ino_t      ino, next_ino;
 233         struct ext2_inode inode;
 234         struct problem_context pctx;
 235         char *block_buf;
 236
 237         if ((ino = fs->super->s_last_orphan) == 0)
 238                 return 0;
 239
 240         /*
 241          * Win or lose, we won't be using the head of the orphan inode
 242          * list again.
 243          */
 244         fs->super->s_last_orphan = 0;
 245         ext2fs_mark_super_dirty(fs);
 246
 247         /*
 248          * If the filesystem contains errors, don't run the orphan
 249          * list, since the orphan list can't be trusted; and we're
 250          * going to be running a full e2fsck run anyway...
 251          */
 252         if (fs->super->s_state & EXT2_ERROR_FS)
 253                 return 0;
 254
 255         if ((ino < EXT2_FIRST_INODE(fs->super)) ||
 256             (ino > fs->super->s_inodes_count)) {
 257                 clear_problem_context(&pctx);
 258                 pctx.ino = ino;
 259                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
 260                 return 1;
 261         }
 262
 263         block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
 264                                                     "block iterate buffer");
 265         e2fsck_read_bitmaps(ctx);
 266
 267         while (ino) {
 268                 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
 269                 clear_problem_context(&pctx);
 270                 pctx.ino = ino;
 271                 pctx.inode = &inode;
 272                 pctx.str = inode.i_links_count ? _("Truncating") :
 273                         _("Clearing");
 274
 275                 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
 276
 277                 next_ino = inode.i_dtime;
 278                 if (next_ino &&
 279                     ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
 280                      (next_ino > fs->super->s_inodes_count))) {
 281                         pctx.ino = next_ino;
 282                         fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
 283                         goto return_abort;
 284                 }
 285
 286                 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
 287                         goto return_abort;
 288
 289                 if (!inode.i_links_count) {
 290                         ext2fs_inode_alloc_stats2(fs, ino, -1,
 291                                                   LINUX_S_ISDIR(inode.i_mode));
 292                         ctx->free_inodes++;
 293                         inode.i_dtime = ctx->now;
 294                 } else {
 295                         inode.i_dtime = 0;
 296                 }
 297                 e2fsck_write_inode(ctx, ino, &inode, "delete_file");
 298                 ino = next_ino;
 299         }
 300         ext2fs_free_mem(&block_buf);
 301         return 0;
 302 return_abort:
 303         ext2fs_free_mem(&block_buf);
 304         return 1;
 305 }
 306
 307 /*
 308  * Check the resize inode to make sure it is sane.  We check both for
 309  * the case where on-line resizing is not enabled (in which case the
 310  * resize inode should be cleared) as well as the case where on-line
 311  * resizing is enabled.
 312  */
 313 void check_resize_inode(e2fsck_t ctx)
 314 {
 315         ext2_filsys fs = ctx->fs;
 316         struct ext2_inode inode;
 317         struct problem_context  pctx;
 318         int             i, gdt_off, ind_off;
 319         dgrp_t          j;
 320         blk64_t         blk, pblk;
 321         blk_t           expect; /* for resize inode, which is 32-bit only */
 322         __u32           *dind_buf = 0, *ind_buf;
 323         errcode_t       retval;
 324
 325         clear_problem_context(&pctx);
 326
 327         /*
 328          * If the resize inode feature isn't set, then
 329          * s_reserved_gdt_blocks must be zero.
 330          */
 331         if (!(fs->super->s_feature_compat &
 332               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
 333                 if (fs->super->s_reserved_gdt_blocks) {
 334                         pctx.num = fs->super->s_reserved_gdt_blocks;
 335                         if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
 336                                         &pctx)) {
 337                                 fs->super->s_reserved_gdt_blocks = 0;
 338                                 ext2fs_mark_super_dirty(fs);
 339                         }
 340                 }
 341         }
 342
 343         /* Read the resize inode */
 344         pctx.ino = EXT2_RESIZE_INO;
 345         retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
 346         if (retval) {
 347                 if (fs->super->s_feature_compat &
 348                     EXT2_FEATURE_COMPAT_RESIZE_INODE)
 349                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
 350                 return;
 351         }
 352
 353         /*
 354          * If the resize inode feature isn't set, check to make sure
 355          * the resize inode is cleared; then we're done.
 356          */
 357         if (!(fs->super->s_feature_compat &
 358               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
 359                 for (i=0; i < EXT2_N_BLOCKS; i++) {
 360                         if (inode.i_block[i])
 361                                 break;
 362                 }
 363                 if ((i < EXT2_N_BLOCKS) &&
 364                     fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
 365                         memset(&inode, 0, sizeof(inode));
 366                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
 367                                            "clear_resize");
 368                 }
 369                 return;
 370         }
 371
 372         /*
 373          * The resize inode feature is enabled; check to make sure the
 374          * only block in use is the double indirect block
 375          */
 376         blk = inode.i_block[EXT2_DIND_BLOCK];
 377         for (i=0; i < EXT2_N_BLOCKS; i++) {
 378                 if (i != EXT2_DIND_BLOCK && inode.i_block[i])
 379                         break;
 380         }
 381         if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
 382             !(inode.i_mode & LINUX_S_IFREG) ||
 383             (blk < fs->super->s_first_data_block ||
 384              blk >= ext2fs_blocks_count(fs->super))) {
 385         resize_inode_invalid:
 386                 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
 387                         memset(&inode, 0, sizeof(inode));
 388                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
 389                                            "clear_resize");
 390                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
 391                 }
 392                 if (!(ctx->options & E2F_OPT_READONLY)) {
 393                         fs->super->s_state &= ~EXT2_VALID_FS;
 394                         ext2fs_mark_super_dirty(fs);
 395                 }
 396                 goto cleanup;
 397         }
 398         dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
 399                                                     "resize dind buffer");
 400         ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
 401
 402         retval = ext2fs_read_ind_block(fs, blk, dind_buf);
 403         if (retval)
 404                 goto resize_inode_invalid;
 405
 406         gdt_off = fs->desc_blocks;
 407         pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
 408         if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0)
 409                 pblk++; /* Deal with 1024 blocksize bigalloc fs */
 410         for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
 411              i++, gdt_off++, pblk++) {
 412                 gdt_off %= fs->blocksize/4;
 413                 if (dind_buf[gdt_off] != pblk)
 414                         goto resize_inode_invalid;
 415                 retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
 416                 if (retval)
 417                         goto resize_inode_invalid;
 418                 ind_off = 0;
 419                 for (j = 1; j < fs->group_desc_count; j++) {
 420                         if (!ext2fs_bg_has_super(fs, j))
 421                                 continue;
 422                         expect = pblk + (j * fs->super->s_blocks_per_group);
 423                         if (ind_buf[ind_off] != expect)
 424                                 goto resize_inode_invalid;
 425                         ind_off++;
 426                 }
 427         }
 428
 429 cleanup:
 430         if (dind_buf)
 431                 ext2fs_free_mem(&dind_buf);
 432
 433  }
 434
 435 /*
 436  * This function checks the dirhash signed/unsigned hint if necessary.
 437  */
 438 static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
 439 {
 440         struct ext2_super_block *sb = ctx->fs->super;
 441         struct problem_context pctx;
 442         char    c;
 443
 444         if ((ctx->options & E2F_OPT_READONLY) ||
 445             !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
 446             (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
 447                 return;
 448
 449         c = (char) 255;
 450
 451         clear_problem_context(&pctx);
 452         if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
 453                 if (((int) c) == -1) {
 454                         sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
 455                 } else {
 456                         sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
 457                 }
 458                 ext2fs_mark_super_dirty(ctx->fs);
 459         }
 460 }
 461
 462
 463 void check_super_block(e2fsck_t ctx)
 464 {
 465         ext2_filsys fs = ctx->fs;
 466         blk64_t first_block, last_block;
 467         struct ext2_super_block *sb = fs->super;
 468         problem_t       problem;
 469         blk64_t blocks_per_group = fs->super->s_blocks_per_group;
 470         __u32   bpg_max, cpg_max;
 471         int     inodes_per_block;
 472         int     ipg_max;
 473         int     inode_size;
 474         int     accept_time_fudge;
 475         int     broken_system_clock;
 476         dgrp_t  i;
 477         blk64_t should_be;
 478         struct problem_context  pctx;
 479         blk64_t free_blocks = 0;
 480         ino_t   free_inodes = 0;
 481         int     csum_flag, clear_test_fs_flag;
 482
 483         inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
 484         ipg_max = inodes_per_block * (blocks_per_group - 4);
 485         if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
 486                 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
 487         cpg_max = 8 * EXT2_BLOCK_SIZE(sb);
 488         if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb))
 489                 cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb);
 490         bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs);
 491         if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
 492                 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
 493
 494         ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
 495                  sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
 496         ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
 497                  sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
 498         ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
 499                 sizeof(int) * fs->group_desc_count, "invalid_inode_table");
 500
 501         clear_problem_context(&pctx);
 502
 503         /*
 504          * Verify the super block constants...
 505          */
 506         check_super_value(ctx, "inodes_count", sb->s_inodes_count,
 507                           MIN_CHECK, 1, 0);
 508         check_super_value(ctx, "blocks_count", ext2fs_blocks_count(sb),
 509                           MIN_CHECK, 1, 0);
 510         check_super_value(ctx, "first_data_block", sb->s_first_data_block,
 511                           MAX_CHECK, 0, ext2fs_blocks_count(sb));
 512         check_super_value(ctx, "log_block_size", sb->s_log_block_size,
 513                           MIN_CHECK | MAX_CHECK, 0,
 514                           EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
 515         check_super_value(ctx, "log_cluster_size",
 516                           sb->s_log_cluster_size,
 517                           MIN_CHECK | MAX_CHECK, sb->s_log_block_size,
 518                           (EXT2_MAX_CLUSTER_LOG_SIZE -
 519                            EXT2_MIN_CLUSTER_LOG_SIZE));
 520         check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group,
 521                           MIN_CHECK | MAX_CHECK, 8, cpg_max);
 522         check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
 523                           MIN_CHECK | MAX_CHECK, 8, bpg_max);
 524         check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
 525                           MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
 526         check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb),
 527                           MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2);
 528         check_super_value(ctx, "reserved_gdt_blocks",
 529                           sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
 530                           fs->blocksize/4);
 531         if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
 532                 check_super_value(ctx, "first_ino", sb->s_first_ino,
 533                                   MIN_CHECK | MAX_CHECK,
 534                                   EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
 535         inode_size = EXT2_INODE_SIZE(sb);
 536         check_super_value(ctx, "inode_size",
 537                           inode_size, MIN_CHECK | MAX_CHECK,
 538                           EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
 539         if (sb->s_blocks_per_group != (sb->s_clusters_per_group *
 540                                        EXT2FS_CLUSTER_RATIO(fs))) {
 541                 pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs);
 542                 pctx.str = "block_size";
 543                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
 544                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
 545                 return;
 546         }
 547         if (inode_size & (inode_size - 1)) {
 548                 pctx.num = inode_size;
 549                 pctx.str = "inode_size";
 550                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
 551                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
 552                 return;
 553         }
 554
 555         if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
 556             (ctx->num_blocks < ext2fs_blocks_count(sb))) {
 557                 pctx.blk = ext2fs_blocks_count(sb);
 558                 pctx.blk2 = ctx->num_blocks;
 559                 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
 560                         ctx->flags |= E2F_FLAG_ABORT;
 561                         return;
 562                 }
 563         }
 564
 565         should_be = (sb->s_log_block_size == 0 &&
 566                      EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0;
 567         if (sb->s_first_data_block != should_be) {
 568                 pctx.blk = sb->s_first_data_block;
 569                 pctx.blk2 = should_be;
 570                 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
 571                 ctx->flags |= E2F_FLAG_ABORT;
 572                 return;
 573         }
 574
 575         should_be = sb->s_inodes_per_group * fs->group_desc_count;
 576         if (sb->s_inodes_count != should_be) {
 577                 pctx.ino = sb->s_inodes_count;
 578                 pctx.ino2 = should_be;
 579                 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
 580                         sb->s_inodes_count = should_be;
 581                         ext2fs_mark_super_dirty(fs);
 582                 }
 583         }
 584
 585         /* Are metadata_csum and uninit_bg both set? */
 586         if (EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
 587                                        EXT4_FEATURE_RO_COMPAT_METADATA_CSUM) &&
 588             EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
 589                                        EXT4_FEATURE_RO_COMPAT_GDT_CSUM) &&
 590             fix_problem(ctx, PR_0_META_AND_GDT_CSUM_SET, &pctx)) {
 591                 fs->super->s_feature_ro_compat &=
 592                         ~EXT4_FEATURE_RO_COMPAT_GDT_CSUM;
 593                 ext2fs_mark_super_dirty(fs);
 594                 for (i = 0; i < fs->group_desc_count; i++)
 595                         ext2fs_group_desc_csum_set(fs, i);
 596         }
 597
 598         /*
 599          * Verify the group descriptors....
 600          */
 601         first_block = sb->s_first_data_block;
 602         last_block = ext2fs_blocks_count(sb)-1;
 603
 604         csum_flag = ext2fs_has_group_desc_csum(fs);
 605         for (i = 0; i < fs->group_desc_count; i++) {
 606                 pctx.group = i;
 607
 608                 if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
 609                                                EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
 610                         first_block = ext2fs_group_first_block2(fs, i);
 611                         last_block = ext2fs_group_last_block2(fs, i);
 612                 }
 613
 614                 if ((ext2fs_block_bitmap_loc(fs, i) < first_block) ||
 615                     (ext2fs_block_bitmap_loc(fs, i) > last_block)) {
 616                         pctx.blk = ext2fs_block_bitmap_loc(fs, i);
 617                         if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
 618                                 ext2fs_block_bitmap_loc_set(fs, i, 0);
 619                 }
 620                 if (ext2fs_block_bitmap_loc(fs, i) == 0) {
 621                         ctx->invalid_block_bitmap_flag[i]++;
 622                         ctx->invalid_bitmaps++;
 623                 }
 624                 if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) ||
 625                     (ext2fs_inode_bitmap_loc(fs, i) > last_block)) {
 626                         pctx.blk = ext2fs_inode_bitmap_loc(fs, i);
 627                         if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
 628                                 ext2fs_inode_bitmap_loc_set(fs, i, 0);
 629                 }
 630                 if (ext2fs_inode_bitmap_loc(fs, i) == 0) {
 631                         ctx->invalid_inode_bitmap_flag[i]++;
 632                         ctx->invalid_bitmaps++;
 633                 }
 634                 if ((ext2fs_inode_table_loc(fs, i) < first_block) ||
 635                     ((ext2fs_inode_table_loc(fs, i) +
 636                       fs->inode_blocks_per_group - 1) > last_block)) {
 637                         pctx.blk = ext2fs_inode_table_loc(fs, i);
 638                         if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
 639                                 ext2fs_inode_table_loc_set(fs, i, 0);
 640                 }
 641                 if (ext2fs_inode_table_loc(fs, i) == 0) {
 642                         ctx->invalid_inode_table_flag[i]++;
 643                         ctx->invalid_bitmaps++;
 644                 }
 645                 free_blocks += ext2fs_bg_free_blocks_count(fs, i);
 646                 free_inodes += ext2fs_bg_free_inodes_count(fs, i);
 647
 648                 if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) ||
 649                     (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) ||
 650                     (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group))
 651                         ext2fs_unmark_valid(fs);
 652
 653                 should_be = 0;
 654                 if (!ext2fs_group_desc_csum_verify(fs, i)) {
 655                         pctx.csum1 = ext2fs_bg_checksum(fs, i);
 656                         pctx.csum2 = ext2fs_group_desc_csum(fs, i);
 657                         if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
 658                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
 659                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
 660                                 ext2fs_bg_itable_unused_set(fs, i, 0);
 661                                 should_be = 1;
 662                         }
 663                         ext2fs_unmark_valid(fs);
 664                 }
 665
 666                 if (!csum_flag &&
 667                     (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
 668                      ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) ||
 669                      ext2fs_bg_itable_unused(fs, i) != 0)) {
 670                         if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
 671                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
 672                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
 673                                 ext2fs_bg_itable_unused_set(fs, i, 0);
 674                                 should_be = 1;
 675                         }
 676                         ext2fs_unmark_valid(fs);
 677                 }
 678
 679                 if (i == fs->group_desc_count - 1 &&
 680                     ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
 681                         if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
 682                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
 683                                 should_be = 1;
 684                         }
 685                         ext2fs_unmark_valid(fs);
 686                 }
 687
 688                 if (csum_flag &&
 689                     (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) ||
 690                      ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) {
 691                         pctx.blk = ext2fs_bg_itable_unused(fs, i);
 692                         if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
 693                                 ext2fs_bg_itable_unused_set(fs, i, 0);
 694                                 should_be = 1;
 695                         }
 696                         ext2fs_unmark_valid(fs);
 697                 }
 698
 699                 if (should_be)
 700                         ext2fs_group_desc_csum_set(fs, i);
 701                 /* If the user aborts e2fsck by typing ^C, stop right away */
 702                 if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
 703                         return;
 704         }
 705
 706         ctx->free_blocks = EXT2FS_C2B(fs, free_blocks);
 707         ctx->free_inodes = free_inodes;
 708
 709         if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) ||
 710             (sb->s_free_inodes_count > sb->s_inodes_count))
 711                 ext2fs_unmark_valid(fs);
 712
 713
 714         /*
 715          * If we have invalid bitmaps, set the error state of the
 716          * filesystem.
 717          */
 718         if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
 719                 sb->s_state &= ~EXT2_VALID_FS;
 720                 ext2fs_mark_super_dirty(fs);
 721         }
 722
 723         clear_problem_context(&pctx);
 724
 725 #ifndef EXT2_SKIP_UUID
 726         /*
 727          * If the UUID field isn't assigned, assign it.
 728          */
 729         if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
 730                 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
 731                         uuid_generate(sb->s_uuid);
 732                         ext2fs_init_csum_seed(fs);
 733                         fs->flags |= EXT2_FLAG_DIRTY;
 734                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 735                 }
 736         }
 737 #endif
 738
 739         /*
 740          * Check to see if we should disable the test_fs flag
 741          */
 742         profile_get_boolean(ctx->profile, "options",
 743                             "clear_test_fs_flag", 0, 1,
 744                             &clear_test_fs_flag);
 745         if (!(ctx->options & E2F_OPT_READONLY) &&
 746             clear_test_fs_flag &&
 747             (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
 748             (fs_proc_check("ext4") || check_for_modules("ext4"))) {
 749                 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
 750                         fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
 751                         fs->flags |= EXT2_FLAG_DIRTY;
 752                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 753                 }
 754         }
 755
 756         /*
 757          * For the Hurd, check to see if the filetype option is set,
 758          * since it doesn't support it.
 759          */
 760         if (!(ctx->options & E2F_OPT_READONLY) &&
 761             fs->super->s_creator_os == EXT2_OS_HURD &&
 762             (fs->super->s_feature_incompat &
 763              EXT2_FEATURE_INCOMPAT_FILETYPE)) {
 764                 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
 765                         fs->super->s_feature_incompat &=
 766                                 ~EXT2_FEATURE_INCOMPAT_FILETYPE;
 767                         ext2fs_mark_super_dirty(fs);
 768                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 769                 }
 770         }
 771
 772         /*
 773          * If we have any of the compatibility flags set, we need to have a
 774          * revision 1 filesystem.  Most kernels will not check the flags on
 775          * a rev 0 filesystem and we may have corruption issues because of
 776          * the incompatible changes to the filesystem.
 777          */
 778         if (!(ctx->options & E2F_OPT_READONLY) &&
 779             fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
 780             (fs->super->s_feature_compat ||
 781              fs->super->s_feature_ro_compat ||
 782              fs->super->s_feature_incompat) &&
 783             fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
 784                 ext2fs_update_dynamic_rev(fs);
 785                 ext2fs_mark_super_dirty(fs);
 786                 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 787         }
 788
 789         /*
 790          * Clean up any orphan inodes, if present.
 791          */
 792         if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
 793                 fs->super->s_state &= ~EXT2_VALID_FS;
 794                 ext2fs_mark_super_dirty(fs);
 795         }
 796
 797         /*
 798          * Unfortunately, due to Windows' unfortunate design decision
 799          * to configure the hardware clock to tick localtime, instead
 800          * of the more proper and less error-prone UTC time, many
 801          * users end up in the situation where the system clock is
 802          * incorrectly set at the time when e2fsck is run.
 803          *
 804          * Historically this was usually due to some distributions
 805          * having buggy init scripts and/or installers that didn't
 806          * correctly detect this case and take appropriate
 807          * countermeasures.  However, it's still possible, despite the
 808          * best efforts of init script and installer authors to not be
 809          * able to detect this misconfiguration, usually due to a
 810          * buggy or misconfigured virtualization manager or the
 811          * installer not having access to a network time server during
 812          * the installation process.  So by default, we allow the
 813          * superblock times to be fudged by up to 24 hours.  This can
 814          * be disabled by setting options.accept_time_fudge to the
 815          * boolean value of false in e2fsck.conf.  We also support
 816          * options.buggy_init_scripts for backwards compatibility.
 817          */
 818         profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
 819                             0, 1, &accept_time_fudge);
 820         profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
 821                             0, accept_time_fudge, &accept_time_fudge);
 822         ctx->time_fudge = accept_time_fudge ? 86400 : 0;
 823
 824         profile_get_boolean(ctx->profile, "options", "broken_system_clock",
 825                             0, 0, &broken_system_clock);
 826
 827         /*
 828          * Check to see if the superblock last mount time or last
 829          * write time is in the future.
 830          */
 831         if (!broken_system_clock &&
 832             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
 833             fs->super->s_mtime > (__u32) ctx->now) {
 834                 pctx.num = fs->super->s_mtime;
 835                 problem = PR_0_FUTURE_SB_LAST_MOUNT;
 836                 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
 837                         problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
 838                 if (fix_problem(ctx, problem, &pctx)) {
 839                         fs->super->s_mtime = ctx->now;
 840                         fs->flags |= EXT2_FLAG_DIRTY;
 841                 }
 842         }
 843         if (!broken_system_clock &&
 844             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
 845             fs->super->s_wtime > (__u32) ctx->now) {
 846                 pctx.num = fs->super->s_wtime;
 847                 problem = PR_0_FUTURE_SB_LAST_WRITE;
 848                 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
 849                         problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
 850                 if (fix_problem(ctx, problem, &pctx)) {
 851                         fs->super->s_wtime = ctx->now;
 852                         fs->flags |= EXT2_FLAG_DIRTY;
 853                 }
 854         }
 855
 856         /*
 857          * Move the ext3 journal file, if necessary.
 858          */
 859         e2fsck_move_ext3_journal(ctx);
 860
 861         /*
 862          * Fix journal hint, if necessary
 863          */
 864         e2fsck_fix_ext3_journal_hint(ctx);
 865
 866         /*
 867          * Add dirhash hint if necessary
 868          */
 869         e2fsck_fix_dirhash_hint(ctx);
 870
 871         /*
 872          * Hide quota inodes if necessary.
 873          */
 874         e2fsck_hide_quota(ctx);
 875
 876         return;
 877 }
 878
 879 /*
 880  * Check to see if we should backup the master sb to the backup super
 881  * blocks.  Returns non-zero if the sb should be backed up.
 882  */
 883
 884 /*
 885  * A few flags are set on the fly by the kernel, but only in the
 886  * primary superblock.  This is actually a bad thing, and we should
 887  * try to discourage it in the future.  In particular, for the newer
 888  * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
 889  * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
 890  * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
 891  * copying the primary superblock during online resize.
 892  *
 893  * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
 894  * unfortunately, we shouldn't ignore it since if it's not set in the
 895  * backup, the extended attributes in the filesystem will be stripped
 896  * away.
 897  */
 898 #define FEATURE_RO_COMPAT_IGNORE        (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
 899                                          EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
 900 #define FEATURE_INCOMPAT_IGNORE         (EXT3_FEATURE_INCOMPAT_EXTENTS| \
 901                                          EXT3_FEATURE_INCOMPAT_RECOVER)
 902
 903 int check_backup_super_block(e2fsck_t ctx)
 904 {
 905         ext2_filsys     fs = ctx->fs;
 906         errcode_t       retval;
 907         dgrp_t          g;
 908         blk64_t         sb;
 909         int             ret = 0;
 910         char            buf[SUPERBLOCK_SIZE];
 911         struct ext2_super_block *backup_sb;
 912
 913         /*
 914          * If we are already writing out the backup blocks, then we
 915          * don't need to test.  Also, if the filesystem is invalid, or
 916          * the check was aborted or cancelled, we also don't want to
 917          * do the backup.  If the filesystem was opened read-only then
 918          * we can't do the backup.
 919          */
 920         if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
 921             !ext2fs_test_valid(fs) ||
 922             (fs->super->s_state & EXT2_ERROR_FS) ||
 923             (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
 924             (ctx->options & E2F_OPT_READONLY))
 925                 return 0;
 926
 927         for (g = 1; g < fs->group_desc_count; g++) {
 928                 if (!ext2fs_bg_has_super(fs, g))
 929                         continue;
 930
 931                 sb = ext2fs_group_first_block2(fs, g);
 932
 933                 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
 934                                              buf);
 935                 if (retval)
 936                         continue;
 937                 backup_sb = (struct ext2_super_block *) buf;
 938 #ifdef WORDS_BIGENDIAN
 939                 ext2fs_swap_super(backup_sb);
 940 #endif
 941                 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
 942                     (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
 943                     ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
 944                      EXT2_MAX_BLOCK_LOG_SIZE) ||
 945                     (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
 946                         continue;
 947
 948 #define SUPER_INCOMPAT_DIFFERENT(x)     \
 949         ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=   \
 950          (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
 951 #define SUPER_RO_COMPAT_DIFFERENT(x)    \
 952         ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=  \
 953          (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
 954 #define SUPER_DIFFERENT(x)              \
 955         (fs->super->x != backup_sb->x)
 956
 957                 if (SUPER_DIFFERENT(s_feature_compat) ||
 958                     SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
 959                     SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
 960                     SUPER_DIFFERENT(s_blocks_count) ||
 961                     SUPER_DIFFERENT(s_inodes_count) ||
 962                     memcmp(fs->super->s_uuid, backup_sb->s_uuid,
 963                            sizeof(fs->super->s_uuid)))
 964                         ret = 1;
 965                 break;
 966         }
 967         return ret;
 968 }