Whamcloud - gitweb
Use ext2fs_file_acl_block() instead of using .i_file_acl directly
[tools/e2fsprogs.git] / e2fsck / super.c
1 /*
2  * e2fsck.c - superblock checks
3  *
4  * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
5  *
6  * %Begin-Header%
7  * This file may be redistributed under the terms of the GNU Public
8  * License.
9  * %End-Header%
10  */
11
12 #ifdef HAVE_ERRNO_H
13 #include <errno.h>
14 #endif
15
16 #ifndef EXT2_SKIP_UUID
17 #include "uuid/uuid.h"
18 #endif
19 #include "e2fsck.h"
20 #include "problem.h"
21
22 #define MIN_CHECK 1
23 #define MAX_CHECK 2
24
25 static void check_super_value(e2fsck_t ctx, const char *descr,
26                               unsigned long value, int flags,
27                               unsigned long min_val, unsigned long max_val)
28 {
29         struct          problem_context pctx;
30
31         if (((flags & MIN_CHECK) && (value < min_val)) ||
32             ((flags & MAX_CHECK) && (value > max_val))) {
33                 clear_problem_context(&pctx);
34                 pctx.num = value;
35                 pctx.str = descr;
36                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
37                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
38         }
39 }
40
41 /*
42  * helper function to release an inode
43  */
44 struct process_block_struct {
45         e2fsck_t        ctx;
46         char            *buf;
47         struct problem_context *pctx;
48         int             truncating;
49         int             truncate_offset;
50         e2_blkcnt_t     truncate_block;
51         int             truncated_blocks;
52         int             abort;
53         errcode_t       errcode;
54 };
55
56 static int release_inode_block(ext2_filsys fs,
57                                blk_t    *block_nr,
58                                e2_blkcnt_t blockcnt,
59                                blk_t    ref_blk EXT2FS_ATTR((unused)),
60                                int      ref_offset EXT2FS_ATTR((unused)),
61                                void *priv_data)
62 {
63         struct process_block_struct *pb;
64         e2fsck_t                ctx;
65         struct problem_context  *pctx;
66         blk_t                   blk = *block_nr;
67         int                     retval = 0;
68
69         pb = (struct process_block_struct *) priv_data;
70         ctx = pb->ctx;
71         pctx = pb->pctx;
72
73         pctx->blk = blk;
74         pctx->blkcount = blockcnt;
75
76         if (HOLE_BLKADDR(blk))
77                 return 0;
78
79         if ((blk < fs->super->s_first_data_block) ||
80             (blk >= fs->super->s_blocks_count)) {
81                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
82         return_abort:
83                 pb->abort = 1;
84                 return BLOCK_ABORT;
85         }
86
87         if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
88                 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
89                 goto return_abort;
90         }
91
92         /*
93          * If we are deleting an orphan, then we leave the fields alone.
94          * If we are truncating an orphan, then update the inode fields
95          * and clean up any partial block data.
96          */
97         if (pb->truncating) {
98                 /*
99                  * We only remove indirect blocks if they are
100                  * completely empty.
101                  */
102                 if (blockcnt < 0) {
103                         int     i, limit;
104                         blk_t   *bp;
105
106                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
107                                                         pb->buf);
108                         if (pb->errcode)
109                                 goto return_abort;
110
111                         limit = fs->blocksize >> 2;
112                         for (i = 0, bp = (blk_t *) pb->buf;
113                              i < limit;  i++, bp++)
114                                 if (*bp)
115                                         return 0;
116                 }
117                 /*
118                  * We don't remove direct blocks until we've reached
119                  * the truncation block.
120                  */
121                 if (blockcnt >= 0 && blockcnt < pb->truncate_block)
122                         return 0;
123                 /*
124                  * If part of the last block needs truncating, we do
125                  * it here.
126                  */
127                 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
128                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
129                                                         pb->buf);
130                         if (pb->errcode)
131                                 goto return_abort;
132                         memset(pb->buf + pb->truncate_offset, 0,
133                                fs->blocksize - pb->truncate_offset);
134                         pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
135                                                          pb->buf);
136                         if (pb->errcode)
137                                 goto return_abort;
138                 }
139                 pb->truncated_blocks++;
140                 *block_nr = 0;
141                 retval |= BLOCK_CHANGED;
142         }
143
144         ext2fs_block_alloc_stats(fs, blk, -1);
145         return retval;
146 }
147
148 /*
149  * This function releases an inode.  Returns 1 if an inconsistency was
150  * found.  If the inode has a link count, then it is being truncated and
151  * not deleted.
152  */
153 static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
154                                 struct ext2_inode *inode, char *block_buf,
155                                 struct problem_context *pctx)
156 {
157         struct process_block_struct     pb;
158         ext2_filsys                     fs = ctx->fs;
159         errcode_t                       retval;
160         __u32                           count;
161
162         if (!ext2fs_inode_has_valid_blocks(inode))
163                 return 0;
164
165         pb.buf = block_buf + 3 * ctx->fs->blocksize;
166         pb.ctx = ctx;
167         pb.abort = 0;
168         pb.errcode = 0;
169         pb.pctx = pctx;
170         if (inode->i_links_count) {
171                 pb.truncating = 1;
172                 pb.truncate_block = (e2_blkcnt_t)
173                         ((((long long)inode->i_size_high << 32) +
174                           inode->i_size + fs->blocksize - 1) /
175                          fs->blocksize);
176                 pb.truncate_offset = inode->i_size % fs->blocksize;
177         } else {
178                 pb.truncating = 0;
179                 pb.truncate_block = 0;
180                 pb.truncate_offset = 0;
181         }
182         pb.truncated_blocks = 0;
183         retval = ext2fs_block_iterate2(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
184                                       block_buf, release_inode_block, &pb);
185         if (retval) {
186                 com_err("release_inode_blocks", retval,
187                         _("while calling ext2fs_block_iterate for inode %d"),
188                         ino);
189                 return 1;
190         }
191         if (pb.abort)
192                 return 1;
193
194         /* Refresh the inode since ext2fs_block_iterate may have changed it */
195         e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
196
197         if (pb.truncated_blocks)
198                 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
199
200         if (ext2fs_file_acl_block(inode)) {
201                 retval = ext2fs_adjust_ea_refcount(fs, ext2fs_file_acl_block(inode),
202                                                    block_buf, -1, &count);
203                 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
204                         retval = 0;
205                         count = 1;
206                 }
207                 if (retval) {
208                         com_err("release_inode_blocks", retval,
209                 _("while calling ext2fs_adjust_ea_refcount for inode %d"),
210                                 ino);
211                         return 1;
212                 }
213                 if (count == 0)
214                         ext2fs_block_alloc_stats(fs,
215                                                  ext2fs_file_acl_block(inode),
216                                                  -1);
217                 ext2fs_file_acl_block_set(inode, 0);
218         }
219         return 0;
220 }
221
222 /*
223  * This function releases all of the orphan inodes.  It returns 1 if
224  * it hit some error, and 0 on success.
225  */
226 static int release_orphan_inodes(e2fsck_t ctx)
227 {
228         ext2_filsys fs = ctx->fs;
229         ext2_ino_t      ino, next_ino;
230         struct ext2_inode inode;
231         struct problem_context pctx;
232         char *block_buf;
233
234         if ((ino = fs->super->s_last_orphan) == 0)
235                 return 0;
236
237         /*
238          * Win or lose, we won't be using the head of the orphan inode
239          * list again.
240          */
241         fs->super->s_last_orphan = 0;
242         ext2fs_mark_super_dirty(fs);
243
244         /*
245          * If the filesystem contains errors, don't run the orphan
246          * list, since the orphan list can't be trusted; and we're
247          * going to be running a full e2fsck run anyway...
248          */
249         if (fs->super->s_state & EXT2_ERROR_FS)
250                 return 0;
251
252         if ((ino < EXT2_FIRST_INODE(fs->super)) ||
253             (ino > fs->super->s_inodes_count)) {
254                 clear_problem_context(&pctx);
255                 pctx.ino = ino;
256                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
257                 return 1;
258         }
259
260         block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
261                                                     "block iterate buffer");
262         e2fsck_read_bitmaps(ctx);
263
264         while (ino) {
265                 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
266                 clear_problem_context(&pctx);
267                 pctx.ino = ino;
268                 pctx.inode = &inode;
269                 pctx.str = inode.i_links_count ? _("Truncating") :
270                         _("Clearing");
271
272                 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
273
274                 next_ino = inode.i_dtime;
275                 if (next_ino &&
276                     ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
277                      (next_ino > fs->super->s_inodes_count))) {
278                         pctx.ino = next_ino;
279                         fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
280                         goto return_abort;
281                 }
282
283                 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
284                         goto return_abort;
285
286                 if (!inode.i_links_count) {
287                         ext2fs_inode_alloc_stats2(fs, ino, -1,
288                                                   LINUX_S_ISDIR(inode.i_mode));
289                         inode.i_dtime = ctx->now;
290                 } else {
291                         inode.i_dtime = 0;
292                 }
293                 e2fsck_write_inode(ctx, ino, &inode, "delete_file");
294                 ino = next_ino;
295         }
296         ext2fs_free_mem(&block_buf);
297         return 0;
298 return_abort:
299         ext2fs_free_mem(&block_buf);
300         return 1;
301 }
302
303 /*
304  * Check the resize inode to make sure it is sane.  We check both for
305  * the case where on-line resizing is not enabled (in which case the
306  * resize inode should be cleared) as well as the case where on-line
307  * resizing is enabled.
308  */
309 void check_resize_inode(e2fsck_t ctx)
310 {
311         ext2_filsys fs = ctx->fs;
312         struct ext2_inode inode;
313         struct problem_context  pctx;
314         int             i, gdt_off, ind_off;
315         dgrp_t          j;
316         blk_t           blk, pblk, expect;
317         __u32           *dind_buf = 0, *ind_buf;
318         errcode_t       retval;
319
320         clear_problem_context(&pctx);
321
322         /*
323          * If the resize inode feature isn't set, then
324          * s_reserved_gdt_blocks must be zero.
325          */
326         if (!(fs->super->s_feature_compat &
327               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
328                 if (fs->super->s_reserved_gdt_blocks) {
329                         pctx.num = fs->super->s_reserved_gdt_blocks;
330                         if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
331                                         &pctx)) {
332                                 fs->super->s_reserved_gdt_blocks = 0;
333                                 ext2fs_mark_super_dirty(fs);
334                         }
335                 }
336         }
337
338         /* Read the resize inode */
339         pctx.ino = EXT2_RESIZE_INO;
340         retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
341         if (retval) {
342                 if (fs->super->s_feature_compat &
343                     EXT2_FEATURE_COMPAT_RESIZE_INODE)
344                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
345                 return;
346         }
347
348         /*
349          * If the resize inode feature isn't set, check to make sure
350          * the resize inode is cleared; then we're done.
351          */
352         if (!(fs->super->s_feature_compat &
353               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
354                 for (i=0; i < EXT2_N_BLOCKS; i++) {
355                         if (inode.i_block[i])
356                                 break;
357                 }
358                 if ((i < EXT2_N_BLOCKS) &&
359                     fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
360                         memset(&inode, 0, sizeof(inode));
361                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
362                                            "clear_resize");
363                 }
364                 return;
365         }
366
367         /*
368          * The resize inode feature is enabled; check to make sure the
369          * only block in use is the double indirect block
370          */
371         blk = inode.i_block[EXT2_DIND_BLOCK];
372         for (i=0; i < EXT2_N_BLOCKS; i++) {
373                 if (i != EXT2_DIND_BLOCK && inode.i_block[i])
374                         break;
375         }
376         if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
377             !(inode.i_mode & LINUX_S_IFREG) ||
378             (blk < fs->super->s_first_data_block ||
379              blk >= fs->super->s_blocks_count)) {
380         resize_inode_invalid:
381                 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
382                         memset(&inode, 0, sizeof(inode));
383                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
384                                            "clear_resize");
385                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
386                 }
387                 if (!(ctx->options & E2F_OPT_READONLY)) {
388                         fs->super->s_state &= ~EXT2_VALID_FS;
389                         ext2fs_mark_super_dirty(fs);
390                 }
391                 goto cleanup;
392         }
393         dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
394                                                     "resize dind buffer");
395         ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
396
397         retval = ext2fs_read_ind_block(fs, blk, dind_buf);
398         if (retval)
399                 goto resize_inode_invalid;
400
401         gdt_off = fs->desc_blocks;
402         pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
403         for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
404              i++, gdt_off++, pblk++) {
405                 gdt_off %= fs->blocksize/4;
406                 if (dind_buf[gdt_off] != pblk)
407                         goto resize_inode_invalid;
408                 retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
409                 if (retval)
410                         goto resize_inode_invalid;
411                 ind_off = 0;
412                 for (j = 1; j < fs->group_desc_count; j++) {
413                         if (!ext2fs_bg_has_super(fs, j))
414                                 continue;
415                         expect = pblk + (j * fs->super->s_blocks_per_group);
416                         if (ind_buf[ind_off] != expect)
417                                 goto resize_inode_invalid;
418                         ind_off++;
419                 }
420         }
421
422 cleanup:
423         if (dind_buf)
424                 ext2fs_free_mem(&dind_buf);
425
426  }
427
428 /*
429  * This function checks the dirhash signed/unsigned hint if necessary.
430  */
431 static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
432 {
433         struct ext2_super_block *sb = ctx->fs->super;
434         struct problem_context pctx;
435         char    c;
436
437         if ((ctx->options & E2F_OPT_READONLY) ||
438             !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
439             (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
440                 return;
441
442         c = (char) 255;
443
444         clear_problem_context(&pctx);
445         if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
446                 if (((int) c) == -1) {
447                         sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
448                 } else {
449                         sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
450                 }
451                 ext2fs_mark_super_dirty(ctx->fs);
452         }
453 }
454
455
456 void check_super_block(e2fsck_t ctx)
457 {
458         ext2_filsys fs = ctx->fs;
459         blk_t   first_block, last_block;
460         struct ext2_super_block *sb = fs->super;
461         struct ext2_group_desc *gd;
462         problem_t       problem;
463         blk_t   blocks_per_group = fs->super->s_blocks_per_group;
464         blk_t   bpg_max;
465         int     inodes_per_block;
466         int     ipg_max;
467         int     inode_size;
468         int     buggy_init_scripts;
469         dgrp_t  i;
470         blk_t   should_be;
471         struct problem_context  pctx;
472         blk_t   free_blocks = 0;
473         ino_t   free_inodes = 0;
474         int     csum_flag, clear_test_fs_flag;
475
476         inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
477         ipg_max = inodes_per_block * (blocks_per_group - 4);
478         if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
479                 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
480         bpg_max = 8 * EXT2_BLOCK_SIZE(sb);
481         if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
482                 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
483
484         ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
485                  sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
486         ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
487                  sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
488         ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
489                 sizeof(int) * fs->group_desc_count, "invalid_inode_table");
490
491         clear_problem_context(&pctx);
492
493         /*
494          * Verify the super block constants...
495          */
496         check_super_value(ctx, "inodes_count", sb->s_inodes_count,
497                           MIN_CHECK, 1, 0);
498         check_super_value(ctx, "blocks_count", sb->s_blocks_count,
499                           MIN_CHECK, 1, 0);
500         check_super_value(ctx, "first_data_block", sb->s_first_data_block,
501                           MAX_CHECK, 0, sb->s_blocks_count);
502         check_super_value(ctx, "log_block_size", sb->s_log_block_size,
503                           MIN_CHECK | MAX_CHECK, 0,
504                           EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
505         check_super_value(ctx, "log_frag_size", sb->s_log_frag_size,
506                           MIN_CHECK | MAX_CHECK, 0, sb->s_log_block_size);
507         check_super_value(ctx, "frags_per_group", sb->s_frags_per_group,
508                           MIN_CHECK | MAX_CHECK, sb->s_blocks_per_group,
509                           bpg_max);
510         check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
511                           MIN_CHECK | MAX_CHECK, 8, bpg_max);
512         check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
513                           MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
514         check_super_value(ctx, "r_blocks_count", sb->s_r_blocks_count,
515                           MAX_CHECK, 0, sb->s_blocks_count / 2);
516         check_super_value(ctx, "reserved_gdt_blocks",
517                           sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
518                           fs->blocksize/4);
519         if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
520                 check_super_value(ctx, "first_ino", sb->s_first_ino,
521                                   MIN_CHECK | MAX_CHECK,
522                                   EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
523         inode_size = EXT2_INODE_SIZE(sb);
524         check_super_value(ctx, "inode_size",
525                           inode_size, MIN_CHECK | MAX_CHECK,
526                           EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
527         if (inode_size & (inode_size - 1)) {
528                 pctx.num = inode_size;
529                 pctx.str = "inode_size";
530                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
531                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
532                 return;
533         }
534
535         if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
536             (ctx->num_blocks < sb->s_blocks_count)) {
537                 pctx.blk = sb->s_blocks_count;
538                 pctx.blk2 = ctx->num_blocks;
539                 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
540                         ctx->flags |= E2F_FLAG_ABORT;
541                         return;
542                 }
543         }
544
545         if (sb->s_log_block_size != (__u32) sb->s_log_frag_size) {
546                 pctx.blk = EXT2_BLOCK_SIZE(sb);
547                 pctx.blk2 = EXT2_FRAG_SIZE(sb);
548                 fix_problem(ctx, PR_0_NO_FRAGMENTS, &pctx);
549                 ctx->flags |= E2F_FLAG_ABORT;
550                 return;
551         }
552
553         should_be = sb->s_frags_per_group >>
554                 (sb->s_log_block_size - sb->s_log_frag_size);
555         if (sb->s_blocks_per_group != should_be) {
556                 pctx.blk = sb->s_blocks_per_group;
557                 pctx.blk2 = should_be;
558                 fix_problem(ctx, PR_0_BLOCKS_PER_GROUP, &pctx);
559                 ctx->flags |= E2F_FLAG_ABORT;
560                 return;
561         }
562
563         should_be = (sb->s_log_block_size == 0) ? 1 : 0;
564         if (sb->s_first_data_block != should_be) {
565                 pctx.blk = sb->s_first_data_block;
566                 pctx.blk2 = should_be;
567                 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
568                 ctx->flags |= E2F_FLAG_ABORT;
569                 return;
570         }
571
572         should_be = sb->s_inodes_per_group * fs->group_desc_count;
573         if (sb->s_inodes_count != should_be) {
574                 pctx.ino = sb->s_inodes_count;
575                 pctx.ino2 = should_be;
576                 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
577                         sb->s_inodes_count = should_be;
578                         ext2fs_mark_super_dirty(fs);
579                 }
580         }
581
582         /*
583          * Verify the group descriptors....
584          */
585         first_block = sb->s_first_data_block;
586         last_block = sb->s_blocks_count-1;
587
588         csum_flag = EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
589                                                EXT4_FEATURE_RO_COMPAT_GDT_CSUM);
590         for (i = 0, gd=fs->group_desc; i < fs->group_desc_count; i++, gd++) {
591                 pctx.group = i;
592
593                 if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
594                                                EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
595                         first_block = ext2fs_group_first_block(fs, i);
596                         last_block = ext2fs_group_last_block(fs, i);
597                 }
598
599                 if ((gd->bg_block_bitmap < first_block) ||
600                     (gd->bg_block_bitmap > last_block)) {
601                         pctx.blk = gd->bg_block_bitmap;
602                         if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
603                                 gd->bg_block_bitmap = 0;
604                 }
605                 if (gd->bg_block_bitmap == 0) {
606                         ctx->invalid_block_bitmap_flag[i]++;
607                         ctx->invalid_bitmaps++;
608                 }
609                 if ((gd->bg_inode_bitmap < first_block) ||
610                     (gd->bg_inode_bitmap > last_block)) {
611                         pctx.blk = gd->bg_inode_bitmap;
612                         if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
613                                 gd->bg_inode_bitmap = 0;
614                 }
615                 if (gd->bg_inode_bitmap == 0) {
616                         ctx->invalid_inode_bitmap_flag[i]++;
617                         ctx->invalid_bitmaps++;
618                 }
619                 if ((gd->bg_inode_table < first_block) ||
620                     ((gd->bg_inode_table +
621                       fs->inode_blocks_per_group - 1) > last_block)) {
622                         pctx.blk = gd->bg_inode_table;
623                         if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
624                                 gd->bg_inode_table = 0;
625                 }
626                 if (gd->bg_inode_table == 0) {
627                         ctx->invalid_inode_table_flag[i]++;
628                         ctx->invalid_bitmaps++;
629                 }
630                 free_blocks += gd->bg_free_blocks_count;
631                 free_inodes += gd->bg_free_inodes_count;
632
633                 if ((gd->bg_free_blocks_count > sb->s_blocks_per_group) ||
634                     (gd->bg_free_inodes_count > sb->s_inodes_per_group) ||
635                     (gd->bg_used_dirs_count > sb->s_inodes_per_group))
636                         ext2fs_unmark_valid(fs);
637
638                 should_be = 0;
639                 if (!ext2fs_group_desc_csum_verify(fs, i)) {
640                         if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
641                                 ext2fs_bg_flag_clear (fs, i, EXT2_BG_BLOCK_UNINIT);
642                                 ext2fs_bg_flag_clear (fs, i, EXT2_BG_INODE_UNINIT);
643                                 gd->bg_itable_unused = 0;
644                                 should_be = 1;
645                         }
646                         ext2fs_unmark_valid(fs);
647                 }
648
649                 if (!csum_flag &&
650                     (ext2fs_bg_flag_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
651                      ext2fs_bg_flag_test(fs, i, EXT2_BG_INODE_UNINIT) ||
652                      gd->bg_itable_unused != 0)){
653                         if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
654                                 ext2fs_bg_flag_clear (fs, i, EXT2_BG_BLOCK_UNINIT);
655                                 ext2fs_bg_flag_clear (fs, i, EXT2_BG_INODE_UNINIT);
656                                 gd->bg_itable_unused = 0;
657                                 should_be = 1;
658                         }
659                         ext2fs_unmark_valid(fs);
660                 }
661
662                 if (i == fs->group_desc_count - 1 &&
663                     ext2fs_bg_flag_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
664                         if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
665                                 ext2fs_bg_flag_clear (fs, i, EXT2_BG_BLOCK_UNINIT);
666                                 should_be = 1;
667                         }
668                         ext2fs_unmark_valid(fs);
669                 }
670
671                 if (ext2fs_bg_flag_test(fs, i, EXT2_BG_BLOCK_UNINIT) &&
672                     !ext2fs_bg_flag_test(fs, i, EXT2_BG_INODE_UNINIT)) {
673                         if (fix_problem(ctx, PR_0_BB_UNINIT_IB_INIT, &pctx)) {
674                                 ext2fs_bg_flag_clear (fs, i, EXT2_BG_BLOCK_UNINIT);
675                                 should_be = 1;
676                         }
677                         ext2fs_unmark_valid(fs);
678                 }
679
680                 if (csum_flag &&
681                     (gd->bg_itable_unused > gd->bg_free_inodes_count ||
682                      gd->bg_itable_unused > sb->s_inodes_per_group)) {
683                         pctx.blk = gd->bg_itable_unused;
684                         if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
685                                 gd->bg_itable_unused = 0;
686                                 should_be = 1;
687                         }
688                         ext2fs_unmark_valid(fs);
689                 }
690
691                 if (should_be)
692                         ext2fs_group_desc_csum_set(fs, i);
693                 /* If the user aborts e2fsck by typing ^C, stop right away */
694                 if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
695                         return;
696         }
697
698         /*
699          * Update the global counts from the block group counts.  This
700          * is needed for an experimental patch which eliminates
701          * locking the entire filesystem when allocating blocks or
702          * inodes; if the filesystem is not unmounted cleanly, the
703          * global counts may not be accurate.
704          */
705         if ((free_blocks != sb->s_free_blocks_count) ||
706             (free_inodes != sb->s_free_inodes_count)) {
707                 if (ctx->options & E2F_OPT_READONLY)
708                         ext2fs_unmark_valid(fs);
709                 else {
710                         sb->s_free_blocks_count = free_blocks;
711                         sb->s_free_inodes_count = free_inodes;
712                         ext2fs_mark_super_dirty(fs);
713                 }
714         }
715
716         if ((sb->s_free_blocks_count > sb->s_blocks_count) ||
717             (sb->s_free_inodes_count > sb->s_inodes_count))
718                 ext2fs_unmark_valid(fs);
719
720
721         /*
722          * If we have invalid bitmaps, set the error state of the
723          * filesystem.
724          */
725         if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
726                 sb->s_state &= ~EXT2_VALID_FS;
727                 ext2fs_mark_super_dirty(fs);
728         }
729
730         clear_problem_context(&pctx);
731
732 #ifndef EXT2_SKIP_UUID
733         /*
734          * If the UUID field isn't assigned, assign it.
735          */
736         if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
737                 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
738                         uuid_generate(sb->s_uuid);
739                         ext2fs_mark_super_dirty(fs);
740                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
741                 }
742         }
743 #endif
744
745         /*
746          * Check to see if we should disable the test_fs flag
747          */
748         profile_get_boolean(ctx->profile, "options",
749                             "clear_test_fs_flag", 0, 1,
750                             &clear_test_fs_flag);
751         if (!(ctx->options & E2F_OPT_READONLY) &&
752             clear_test_fs_flag &&
753             (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
754             (fs_proc_check("ext4") || check_for_modules("ext4"))) {
755                 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
756                         fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
757                         ext2fs_mark_super_dirty(fs);
758                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
759                 }
760         }
761                         
762         /*
763          * For the Hurd, check to see if the filetype option is set,
764          * since it doesn't support it.
765          */
766         if (!(ctx->options & E2F_OPT_READONLY) &&
767             fs->super->s_creator_os == EXT2_OS_HURD &&
768             (fs->super->s_feature_incompat &
769              EXT2_FEATURE_INCOMPAT_FILETYPE)) {
770                 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
771                         fs->super->s_feature_incompat &=
772                                 ~EXT2_FEATURE_INCOMPAT_FILETYPE;
773                         ext2fs_mark_super_dirty(fs);
774                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
775                 }
776         }
777
778         /*
779          * If we have any of the compatibility flags set, we need to have a
780          * revision 1 filesystem.  Most kernels will not check the flags on
781          * a rev 0 filesystem and we may have corruption issues because of
782          * the incompatible changes to the filesystem.
783          */
784         if (!(ctx->options & E2F_OPT_READONLY) &&
785             fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
786             (fs->super->s_feature_compat ||
787              fs->super->s_feature_ro_compat ||
788              fs->super->s_feature_incompat) &&
789             fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
790                 ext2fs_update_dynamic_rev(fs);
791                 ext2fs_mark_super_dirty(fs);
792                 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
793         }
794
795         /*
796          * Clean up any orphan inodes, if present.
797          */
798         if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
799                 fs->super->s_state &= ~EXT2_VALID_FS;
800                 ext2fs_mark_super_dirty(fs);
801         }
802
803         /*
804          * Some buggy distributions (such as Ubuntu) have init scripts
805          * and/or installers which fail to correctly set the system
806          * clock before running e2fsck and/or formatting the
807          * filesystem initially.  Normally this happens because the
808          * hardware clock is ticking localtime, instead of the more
809          * proper and less error-prone UTC time.  So while the kernel
810          * is booting, the system time (which in Linux systems always
811          * ticks in UTC time) is set from the hardware clock, but
812          * since the hardware clock is ticking localtime, the system
813          * time is incorrect.  Unfortunately, some buggy distributions
814          * do not correct this before running e2fsck.  If this option
815          * is set to a boolean value of true, we attempt to work
816          * around this situation by allowing the superblock last write
817          * time, last mount time, and last check time to be in the
818          * future by up to 24 hours.
819          */
820         profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
821                             0, 0, &buggy_init_scripts);
822         ctx->time_fudge = buggy_init_scripts ? 86400 : 0;
823
824         /*
825          * Check to see if the superblock last mount time or last
826          * write time is in the future.
827          */
828         if (fs->super->s_mtime > (__u32) ctx->now) {
829                 pctx.num = fs->super->s_mtime;
830                 problem = PR_0_FUTURE_SB_LAST_MOUNT;
831                 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
832                         problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
833                 if (fix_problem(ctx, problem, &pctx)) {
834                         fs->super->s_mtime = ctx->now;
835                         ext2fs_mark_super_dirty(fs);
836                 }
837         }
838         if (fs->super->s_wtime > (__u32) ctx->now) {
839                 pctx.num = fs->super->s_wtime;
840                 problem = PR_0_FUTURE_SB_LAST_WRITE;
841                 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
842                         problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
843                 if (fix_problem(ctx, problem, &pctx)) {
844                         fs->super->s_wtime = ctx->now;
845                         ext2fs_mark_super_dirty(fs);
846                 }
847         }
848
849         /*
850          * Move the ext3 journal file, if necessary.
851          */
852         e2fsck_move_ext3_journal(ctx);
853
854         /*
855          * Fix journal hint, if necessary
856          */
857         e2fsck_fix_ext3_journal_hint(ctx);
858
859         /*
860          * Add dirhash hint if necessary
861          */
862         e2fsck_fix_dirhash_hint(ctx);
863
864         return;
865 }
866
867 /*
868  * Check to see if we should backup the master sb to the backup super
869  * blocks.  Returns non-zero if the sb should be backed up.
870  */
871
872 /*
873  * A few flags are set on the fly by the kernel, but only in the
874  * primary superblock.  This is actually a bad thing, and we should
875  * try to discourage it in the future.  In particular, for the newer
876  * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
877  * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
878  * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
879  * copying the primary superblock during online resize.
880  *
881  * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
882  * unfortunately, we shouldn't ignore it since if it's not set in the
883  * backup, the extended attributes in the filesystem will be stripped
884  * away.
885  */
886 #define FEATURE_RO_COMPAT_IGNORE        (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
887                                          EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
888 #define FEATURE_INCOMPAT_IGNORE         (EXT3_FEATURE_INCOMPAT_EXTENTS| \
889                                          EXT3_FEATURE_INCOMPAT_RECOVER)
890
891 int check_backup_super_block(e2fsck_t ctx)
892 {
893         ext2_filsys     fs = ctx->fs;
894         errcode_t       retval;
895         dgrp_t          g;
896         blk_t           sb;
897         int             ret = 0;
898         char            buf[SUPERBLOCK_SIZE];
899         struct ext2_super_block *backup_sb;
900
901         /*
902          * If we are already writing out the backup blocks, then we
903          * don't need to test.  Also, if the filesystem is invalid, or
904          * the check was aborted or cancelled, we also don't want to
905          * do the backup.  If the filesystem was opened read-only then
906          * we can't do the backup.
907          */
908         if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
909             !ext2fs_test_valid(fs) ||
910             (fs->super->s_state & EXT2_ERROR_FS) ||
911             (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
912             (ctx->options & E2F_OPT_READONLY))
913                 return 0;
914
915         for (g = 1; g < fs->group_desc_count; g++) {
916                 if (!ext2fs_bg_has_super(fs, g))
917                         continue;
918
919                 sb = fs->super->s_first_data_block +
920                         (g * fs->super->s_blocks_per_group);
921
922                 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
923                                              buf);
924                 if (retval)
925                         continue;
926                 backup_sb = (struct ext2_super_block *) buf;
927 #ifdef WORDS_BIGENDIAN
928                 ext2fs_swap_super(backup_sb);
929 #endif
930                 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
931                     (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
932                     ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
933                      EXT2_MAX_BLOCK_LOG_SIZE) ||
934                     (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
935                         continue;
936
937 #define SUPER_INCOMPAT_DIFFERENT(x)     \
938         ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=   \
939          (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
940 #define SUPER_RO_COMPAT_DIFFERENT(x)    \
941         ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=  \
942          (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
943 #define SUPER_DIFFERENT(x)              \
944         (fs->super->x != backup_sb->x)
945
946                 if (SUPER_DIFFERENT(s_feature_compat) ||
947                     SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
948                     SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
949                     SUPER_DIFFERENT(s_blocks_count) ||
950                     SUPER_DIFFERENT(s_inodes_count) ||
951                     memcmp(fs->super->s_uuid, backup_sb->s_uuid,
952                            sizeof(fs->super->s_uuid)))
953                         ret = 1;
954                 break;
955         }
956         return ret;
957 }