e2fsck/super.c

   1 /*
   2  * e2fsck.c - superblock checks
   3  *
   4  * Copyright (C) 1993, 1994, 1995, 1996, 1997 Theodore Ts'o.
   5  *
   6  * %Begin-Header%
   7  * This file may be redistributed under the terms of the GNU Public
   8  * License.
   9  * %End-Header%
  10  */
  11
  12 #ifdef HAVE_ERRNO_H
  13 #include <errno.h>
  14 #endif
  15
  16 #ifndef EXT2_SKIP_UUID
  17 #include "uuid/uuid.h"
  18 #endif
  19 #include "e2fsck.h"
  20 #include "problem.h"
  21
  22 #define MIN_CHECK 1
  23 #define MAX_CHECK 2
  24 #define LOG2_CHECK 4
  25
  26 static void check_super_value(e2fsck_t ctx, const char *descr,
  27                               unsigned long value, int flags,
  28                               unsigned long min_val, unsigned long max_val)
  29 {
  30         struct          problem_context pctx;
  31
  32         if (((flags & MIN_CHECK) && (value < min_val)) ||
  33             ((flags & MAX_CHECK) && (value > max_val)) ||
  34             ((flags & LOG2_CHECK) && (value & (value - 1) != 0))) {
  35                 clear_problem_context(&pctx);
  36                 pctx.num = value;
  37                 pctx.str = descr;
  38                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
  39                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
  40         }
  41 }
  42
  43 /*
  44  * helper function to release an inode
  45  */
  46 struct process_block_struct {
  47         e2fsck_t        ctx;
  48         char            *buf;
  49         struct problem_context *pctx;
  50         int             truncating;
  51         int             truncate_offset;
  52         e2_blkcnt_t     truncate_block;
  53         int             truncated_blocks;
  54         int             abort;
  55         errcode_t       errcode;
  56 };
  57
  58 static int release_inode_block(ext2_filsys fs,
  59                                blk64_t  *block_nr,
  60                                e2_blkcnt_t blockcnt,
  61                                blk64_t  ref_blk EXT2FS_ATTR((unused)),
  62                                int      ref_offset EXT2FS_ATTR((unused)),
  63                                void *priv_data)
  64 {
  65         struct process_block_struct *pb;
  66         e2fsck_t                ctx;
  67         struct problem_context  *pctx;
  68         blk64_t                 blk = *block_nr;
  69         int                     retval = 0;
  70
  71         pb = (struct process_block_struct *) priv_data;
  72         ctx = pb->ctx;
  73         pctx = pb->pctx;
  74
  75         pctx->blk = blk;
  76         pctx->blkcount = blockcnt;
  77
  78         if (HOLE_BLKADDR(blk))
  79                 return 0;
  80
  81         if ((blk < fs->super->s_first_data_block) ||
  82             (blk >= ext2fs_blocks_count(fs->super))) {
  83                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_BLOCK_NUM, pctx);
  84         return_abort:
  85                 pb->abort = 1;
  86                 return BLOCK_ABORT;
  87         }
  88
  89         if (!ext2fs_test_block_bitmap2(fs->block_map, blk)) {
  90                 fix_problem(ctx, PR_0_ORPHAN_ALREADY_CLEARED_BLOCK, pctx);
  91                 goto return_abort;
  92         }
  93
  94         /*
  95          * If we are deleting an orphan, then we leave the fields alone.
  96          * If we are truncating an orphan, then update the inode fields
  97          * and clean up any partial block data.
  98          */
  99         if (pb->truncating) {
 100                 /*
 101                  * We only remove indirect blocks if they are
 102                  * completely empty.
 103                  */
 104                 if (blockcnt < 0) {
 105                         int     i, limit;
 106                         blk_t   *bp;
 107
 108                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
 109                                                         pb->buf);
 110                         if (pb->errcode)
 111                                 goto return_abort;
 112
 113                         limit = fs->blocksize >> 2;
 114                         for (i = 0, bp = (blk_t *) pb->buf;
 115                              i < limit;  i++, bp++)
 116                                 if (*bp)
 117                                         return 0;
 118                 }
 119                 /*
 120                  * We don't remove direct blocks until we've reached
 121                  * the truncation block.
 122                  */
 123                 if (blockcnt >= 0 && blockcnt < pb->truncate_block)
 124                         return 0;
 125                 /*
 126                  * If part of the last block needs truncating, we do
 127                  * it here.
 128                  */
 129                 if ((blockcnt == pb->truncate_block) && pb->truncate_offset) {
 130                         pb->errcode = io_channel_read_blk64(fs->io, blk, 1,
 131                                                         pb->buf);
 132                         if (pb->errcode)
 133                                 goto return_abort;
 134                         memset(pb->buf + pb->truncate_offset, 0,
 135                                fs->blocksize - pb->truncate_offset);
 136                         pb->errcode = io_channel_write_blk64(fs->io, blk, 1,
 137                                                          pb->buf);
 138                         if (pb->errcode)
 139                                 goto return_abort;
 140                 }
 141                 pb->truncated_blocks++;
 142                 *block_nr = 0;
 143                 retval |= BLOCK_CHANGED;
 144         }
 145
 146         ext2fs_block_alloc_stats2(fs, blk, -1);
 147         ctx->free_blocks++;
 148         return retval;
 149 }
 150
 151 /*
 152  * This function releases an inode.  Returns 1 if an inconsistency was
 153  * found.  If the inode has a link count, then it is being truncated and
 154  * not deleted.
 155  */
 156 static int release_inode_blocks(e2fsck_t ctx, ext2_ino_t ino,
 157                                 struct ext2_inode *inode, char *block_buf,
 158                                 struct problem_context *pctx)
 159 {
 160         struct process_block_struct     pb;
 161         ext2_filsys                     fs = ctx->fs;
 162         errcode_t                       retval;
 163         __u32                           count;
 164
 165         if (!ext2fs_inode_has_valid_blocks2(fs, inode))
 166                 return 0;
 167
 168         pb.buf = block_buf + 3 * ctx->fs->blocksize;
 169         pb.ctx = ctx;
 170         pb.abort = 0;
 171         pb.errcode = 0;
 172         pb.pctx = pctx;
 173         if (inode->i_links_count) {
 174                 pb.truncating = 1;
 175                 pb.truncate_block = (e2_blkcnt_t)
 176                         ((EXT2_I_SIZE(inode) + fs->blocksize - 1) /
 177                          fs->blocksize);
 178                 pb.truncate_offset = inode->i_size % fs->blocksize;
 179         } else {
 180                 pb.truncating = 0;
 181                 pb.truncate_block = 0;
 182                 pb.truncate_offset = 0;
 183         }
 184         pb.truncated_blocks = 0;
 185         retval = ext2fs_block_iterate3(fs, ino, BLOCK_FLAG_DEPTH_TRAVERSE,
 186                                       block_buf, release_inode_block, &pb);
 187         if (retval) {
 188                 com_err("release_inode_blocks", retval,
 189                         _("while calling ext2fs_block_iterate for inode %d"),
 190                         ino);
 191                 return 1;
 192         }
 193         if (pb.abort)
 194                 return 1;
 195
 196         /* Refresh the inode since ext2fs_block_iterate may have changed it */
 197         e2fsck_read_inode(ctx, ino, inode, "release_inode_blocks");
 198
 199         if (pb.truncated_blocks)
 200                 ext2fs_iblk_sub_blocks(fs, inode, pb.truncated_blocks);
 201
 202         if (ext2fs_file_acl_block(fs, inode)) {
 203                 retval = ext2fs_adjust_ea_refcount2(fs,
 204                                         ext2fs_file_acl_block(fs, inode),
 205                                         block_buf, -1, &count);
 206                 if (retval == EXT2_ET_BAD_EA_BLOCK_NUM) {
 207                         retval = 0;
 208                         count = 1;
 209                 }
 210                 if (retval) {
 211                         com_err("release_inode_blocks", retval,
 212                 _("while calling ext2fs_adjust_ea_refcount2 for inode %d"),
 213                                 ino);
 214                         return 1;
 215                 }
 216                 if (count == 0) {
 217                         ext2fs_block_alloc_stats2(fs,
 218                                         ext2fs_file_acl_block(fs, inode), -1);
 219                         ctx->free_blocks++;
 220                 }
 221                 ext2fs_file_acl_block_set(fs, inode, 0);
 222         }
 223         return 0;
 224 }
 225
 226 /*
 227  * This function releases all of the orphan inodes.  It returns 1 if
 228  * it hit some error, and 0 on success.
 229  */
 230 static int release_orphan_inodes(e2fsck_t ctx)
 231 {
 232         ext2_filsys fs = ctx->fs;
 233         ext2_ino_t      ino, next_ino;
 234         struct ext2_inode inode;
 235         struct problem_context pctx;
 236         char *block_buf;
 237
 238         if ((ino = fs->super->s_last_orphan) == 0)
 239                 return 0;
 240
 241         /*
 242          * Win or lose, we won't be using the head of the orphan inode
 243          * list again.
 244          */
 245         fs->super->s_last_orphan = 0;
 246         ext2fs_mark_super_dirty(fs);
 247
 248         /*
 249          * If the filesystem contains errors, don't run the orphan
 250          * list, since the orphan list can't be trusted; and we're
 251          * going to be running a full e2fsck run anyway...
 252          */
 253         if (fs->super->s_state & EXT2_ERROR_FS)
 254                 return 0;
 255
 256         if ((ino < EXT2_FIRST_INODE(fs->super)) ||
 257             (ino > fs->super->s_inodes_count)) {
 258                 clear_problem_context(&pctx);
 259                 pctx.ino = ino;
 260                 fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_HEAD_INODE, &pctx);
 261                 return 1;
 262         }
 263
 264         block_buf = (char *) e2fsck_allocate_memory(ctx, fs->blocksize * 4,
 265                                                     "block iterate buffer");
 266         e2fsck_read_bitmaps(ctx);
 267
 268         while (ino) {
 269                 e2fsck_read_inode(ctx, ino, &inode, "release_orphan_inodes");
 270                 clear_problem_context(&pctx);
 271                 pctx.ino = ino;
 272                 pctx.inode = &inode;
 273                 pctx.str = inode.i_links_count ? _("Truncating") :
 274                         _("Clearing");
 275
 276                 fix_problem(ctx, PR_0_ORPHAN_CLEAR_INODE, &pctx);
 277
 278                 next_ino = inode.i_dtime;
 279                 if (next_ino &&
 280                     ((next_ino < EXT2_FIRST_INODE(fs->super)) ||
 281                      (next_ino > fs->super->s_inodes_count))) {
 282                         pctx.ino = next_ino;
 283                         fix_problem(ctx, PR_0_ORPHAN_ILLEGAL_INODE, &pctx);
 284                         goto return_abort;
 285                 }
 286
 287                 if (release_inode_blocks(ctx, ino, &inode, block_buf, &pctx))
 288                         goto return_abort;
 289
 290                 if (!inode.i_links_count) {
 291                         ext2fs_inode_alloc_stats2(fs, ino, -1,
 292                                                   LINUX_S_ISDIR(inode.i_mode));
 293                         ctx->free_inodes++;
 294                         inode.i_dtime = ctx->now;
 295                 } else {
 296                         inode.i_dtime = 0;
 297                 }
 298                 e2fsck_write_inode(ctx, ino, &inode, "delete_file");
 299                 ino = next_ino;
 300         }
 301         ext2fs_free_mem(&block_buf);
 302         return 0;
 303 return_abort:
 304         ext2fs_free_mem(&block_buf);
 305         return 1;
 306 }
 307
 308 /*
 309  * Check the resize inode to make sure it is sane.  We check both for
 310  * the case where on-line resizing is not enabled (in which case the
 311  * resize inode should be cleared) as well as the case where on-line
 312  * resizing is enabled.
 313  */
 314 void check_resize_inode(e2fsck_t ctx)
 315 {
 316         ext2_filsys fs = ctx->fs;
 317         struct ext2_inode inode;
 318         struct problem_context  pctx;
 319         int             i, gdt_off, ind_off;
 320         dgrp_t          j;
 321         blk_t           blk, pblk;
 322         blk_t           expect; /* for resize inode, which is 32-bit only */
 323         __u32           *dind_buf = 0, *ind_buf;
 324         errcode_t       retval;
 325
 326         clear_problem_context(&pctx);
 327
 328         /*
 329          * If the resize inode feature isn't set, then
 330          * s_reserved_gdt_blocks must be zero.
 331          */
 332         if (!(fs->super->s_feature_compat &
 333               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
 334                 if (fs->super->s_reserved_gdt_blocks) {
 335                         pctx.num = fs->super->s_reserved_gdt_blocks;
 336                         if (fix_problem(ctx, PR_0_NONZERO_RESERVED_GDT_BLOCKS,
 337                                         &pctx)) {
 338                                 fs->super->s_reserved_gdt_blocks = 0;
 339                                 ext2fs_mark_super_dirty(fs);
 340                         }
 341                 }
 342         }
 343
 344         /* Read the resize inode */
 345         pctx.ino = EXT2_RESIZE_INO;
 346         retval = ext2fs_read_inode(fs, EXT2_RESIZE_INO, &inode);
 347         if (retval) {
 348                 if (fs->super->s_feature_compat &
 349                     EXT2_FEATURE_COMPAT_RESIZE_INODE)
 350                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
 351                 return;
 352         }
 353
 354         /*
 355          * If the resize inode feature isn't set, check to make sure
 356          * the resize inode is cleared; then we're done.
 357          */
 358         if (!(fs->super->s_feature_compat &
 359               EXT2_FEATURE_COMPAT_RESIZE_INODE)) {
 360                 for (i=0; i < EXT2_N_BLOCKS; i++) {
 361                         if (inode.i_block[i])
 362                                 break;
 363                 }
 364                 if ((i < EXT2_N_BLOCKS) &&
 365                     fix_problem(ctx, PR_0_CLEAR_RESIZE_INODE, &pctx)) {
 366                         memset(&inode, 0, sizeof(inode));
 367                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
 368                                            "clear_resize");
 369                 }
 370                 return;
 371         }
 372
 373         /*
 374          * The resize inode feature is enabled; check to make sure the
 375          * only block in use is the double indirect block
 376          */
 377         blk = inode.i_block[EXT2_DIND_BLOCK];
 378         for (i=0; i < EXT2_N_BLOCKS; i++) {
 379                 if (i != EXT2_DIND_BLOCK && inode.i_block[i])
 380                         break;
 381         }
 382         if ((i < EXT2_N_BLOCKS) || !blk || !inode.i_links_count ||
 383             !(inode.i_mode & LINUX_S_IFREG) ||
 384             (blk < fs->super->s_first_data_block ||
 385              blk >= ext2fs_blocks_count(fs->super))) {
 386         resize_inode_invalid:
 387                 if (fix_problem(ctx, PR_0_RESIZE_INODE_INVALID, &pctx)) {
 388                         memset(&inode, 0, sizeof(inode));
 389                         e2fsck_write_inode(ctx, EXT2_RESIZE_INO, &inode,
 390                                            "clear_resize");
 391                         ctx->flags |= E2F_FLAG_RESIZE_INODE;
 392                 }
 393                 if (!(ctx->options & E2F_OPT_READONLY)) {
 394                         fs->super->s_state &= ~EXT2_VALID_FS;
 395                         ext2fs_mark_super_dirty(fs);
 396                 }
 397                 goto cleanup;
 398         }
 399         dind_buf = (__u32 *) e2fsck_allocate_memory(ctx, fs->blocksize * 2,
 400                                                     "resize dind buffer");
 401         ind_buf = (__u32 *) ((char *) dind_buf + fs->blocksize);
 402
 403         retval = ext2fs_read_ind_block(fs, blk, dind_buf);
 404         if (retval)
 405                 goto resize_inode_invalid;
 406
 407         gdt_off = fs->desc_blocks;
 408         pblk = fs->super->s_first_data_block + 1 + fs->desc_blocks;
 409         if (fs->blocksize == 1024 && fs->super->s_first_data_block == 0)
 410                 pblk++; /* Deal with 1024 blocksize bigalloc fs */
 411         for (i = 0; i < fs->super->s_reserved_gdt_blocks / 4;
 412              i++, gdt_off++, pblk++) {
 413                 gdt_off %= fs->blocksize/4;
 414                 if (dind_buf[gdt_off] != pblk)
 415                         goto resize_inode_invalid;
 416                 retval = ext2fs_read_ind_block(fs, pblk, ind_buf);
 417                 if (retval)
 418                         goto resize_inode_invalid;
 419                 ind_off = 0;
 420                 for (j = 1; j < fs->group_desc_count; j++) {
 421                         if (!ext2fs_bg_has_super(fs, j))
 422                                 continue;
 423                         expect = pblk + (j * fs->super->s_blocks_per_group);
 424                         if (ind_buf[ind_off] != expect)
 425                                 goto resize_inode_invalid;
 426                         ind_off++;
 427                 }
 428         }
 429
 430 cleanup:
 431         if (dind_buf)
 432                 ext2fs_free_mem(&dind_buf);
 433
 434  }
 435
 436 /*
 437  * This function checks the dirhash signed/unsigned hint if necessary.
 438  */
 439 static void e2fsck_fix_dirhash_hint(e2fsck_t ctx)
 440 {
 441         struct ext2_super_block *sb = ctx->fs->super;
 442         struct problem_context pctx;
 443         char    c;
 444
 445         if ((ctx->options & E2F_OPT_READONLY) ||
 446             !(sb->s_feature_compat & EXT2_FEATURE_COMPAT_DIR_INDEX) ||
 447             (sb->s_flags & (EXT2_FLAGS_SIGNED_HASH|EXT2_FLAGS_UNSIGNED_HASH)))
 448                 return;
 449
 450         c = (char) 255;
 451
 452         clear_problem_context(&pctx);
 453         if (fix_problem(ctx, PR_0_DIRHASH_HINT, &pctx)) {
 454                 if (((int) c) == -1) {
 455                         sb->s_flags |= EXT2_FLAGS_SIGNED_HASH;
 456                 } else {
 457                         sb->s_flags |= EXT2_FLAGS_UNSIGNED_HASH;
 458                 }
 459                 ext2fs_mark_super_dirty(ctx->fs);
 460         }
 461 }
 462
 463
 464 void check_super_block(e2fsck_t ctx)
 465 {
 466         ext2_filsys fs = ctx->fs;
 467         blk64_t first_block, last_block;
 468         struct ext2_super_block *sb = fs->super;
 469         unsigned int    ipg_max;
 470         problem_t       problem;
 471         blk64_t blocks_per_group = fs->super->s_blocks_per_group;
 472         __u32   bpg_max, cpg_max;
 473         int     inodes_per_block;
 474         int     inode_size;
 475         int     accept_time_fudge;
 476         int     broken_system_clock;
 477         dgrp_t  i;
 478         blk64_t should_be;
 479         struct problem_context  pctx;
 480         blk64_t free_blocks = 0;
 481         ino_t   free_inodes = 0;
 482         int     csum_flag, clear_test_fs_flag;
 483
 484         inodes_per_block = EXT2_INODES_PER_BLOCK(fs->super);
 485         ipg_max = inodes_per_block * (blocks_per_group - 4);
 486         if (ipg_max > EXT2_MAX_INODES_PER_GROUP(sb))
 487                 ipg_max = EXT2_MAX_INODES_PER_GROUP(sb);
 488         cpg_max = 8 * EXT2_BLOCK_SIZE(sb);
 489         if (cpg_max > EXT2_MAX_CLUSTERS_PER_GROUP(sb))
 490                 cpg_max = EXT2_MAX_CLUSTERS_PER_GROUP(sb);
 491         bpg_max = 8 * EXT2_BLOCK_SIZE(sb) * EXT2FS_CLUSTER_RATIO(fs);
 492         if (bpg_max > EXT2_MAX_BLOCKS_PER_GROUP(sb))
 493                 bpg_max = EXT2_MAX_BLOCKS_PER_GROUP(sb);
 494
 495         ctx->invalid_inode_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
 496                  sizeof(int) * fs->group_desc_count, "invalid_inode_bitmap");
 497         ctx->invalid_block_bitmap_flag = (int *) e2fsck_allocate_memory(ctx,
 498                  sizeof(int) * fs->group_desc_count, "invalid_block_bitmap");
 499         ctx->invalid_inode_table_flag = (int *) e2fsck_allocate_memory(ctx,
 500                 sizeof(int) * fs->group_desc_count, "invalid_inode_table");
 501
 502         clear_problem_context(&pctx);
 503
 504         /*
 505          * Verify the super block constants...
 506          */
 507         check_super_value(ctx, "inodes_count", sb->s_inodes_count,
 508                           MIN_CHECK, 1, 0);
 509         check_super_value(ctx, "blocks_count", ext2fs_blocks_count(sb),
 510                           MIN_CHECK, 1, 0);
 511         check_super_value(ctx, "first_data_block", sb->s_first_data_block,
 512                           MAX_CHECK, 0, ext2fs_blocks_count(sb));
 513         check_super_value(ctx, "log_block_size", sb->s_log_block_size,
 514                           MIN_CHECK | MAX_CHECK, 0,
 515                           EXT2_MAX_BLOCK_LOG_SIZE - EXT2_MIN_BLOCK_LOG_SIZE);
 516         check_super_value(ctx, "log_cluster_size",
 517                           sb->s_log_cluster_size,
 518                           MIN_CHECK | MAX_CHECK, sb->s_log_block_size,
 519                           (EXT2_MAX_CLUSTER_LOG_SIZE -
 520                            EXT2_MIN_CLUSTER_LOG_SIZE));
 521         check_super_value(ctx, "clusters_per_group", sb->s_clusters_per_group,
 522                           MIN_CHECK | MAX_CHECK, 8, cpg_max);
 523         check_super_value(ctx, "blocks_per_group", sb->s_blocks_per_group,
 524                           MIN_CHECK | MAX_CHECK, 8, bpg_max);
 525         check_super_value(ctx, "inodes_per_group", sb->s_inodes_per_group,
 526                           MIN_CHECK | MAX_CHECK, inodes_per_block, ipg_max);
 527         check_super_value(ctx, "r_blocks_count", ext2fs_r_blocks_count(sb),
 528                           MAX_CHECK, 0, ext2fs_blocks_count(sb) / 2);
 529         check_super_value(ctx, "reserved_gdt_blocks",
 530                           sb->s_reserved_gdt_blocks, MAX_CHECK, 0,
 531                           fs->blocksize / sizeof(__u32));
 532         check_super_value(ctx, "desc_size",
 533                           sb->s_desc_size, MAX_CHECK | LOG2_CHECK, 0,
 534                           EXT2_MAX_DESC_SIZE);
 535         if (sb->s_rev_level > EXT2_GOOD_OLD_REV)
 536                 check_super_value(ctx, "first_ino", sb->s_first_ino,
 537                                   MIN_CHECK | MAX_CHECK,
 538                                   EXT2_GOOD_OLD_FIRST_INO, sb->s_inodes_count);
 539         inode_size = EXT2_INODE_SIZE(sb);
 540         check_super_value(ctx, "inode_size",
 541                           inode_size, MIN_CHECK | MAX_CHECK | LOG2_CHECK,
 542                           EXT2_GOOD_OLD_INODE_SIZE, fs->blocksize);
 543         if (sb->s_blocks_per_group != (sb->s_clusters_per_group *
 544                                        EXT2FS_CLUSTER_RATIO(fs))) {
 545                 pctx.num = sb->s_clusters_per_group * EXT2FS_CLUSTER_RATIO(fs);
 546                 pctx.str = "block_size";
 547                 fix_problem(ctx, PR_0_MISC_CORRUPT_SUPER, &pctx);
 548                 ctx->flags |= E2F_FLAG_ABORT; /* never get here! */
 549                 return;
 550         }
 551
 552         if ((ctx->flags & E2F_FLAG_GOT_DEVSIZE) &&
 553             (ctx->num_blocks < ext2fs_blocks_count(sb))) {
 554                 pctx.blk = ext2fs_blocks_count(sb);
 555                 pctx.blk2 = ctx->num_blocks;
 556                 if (fix_problem(ctx, PR_0_FS_SIZE_WRONG, &pctx)) {
 557                         ctx->flags |= E2F_FLAG_ABORT;
 558                         return;
 559                 }
 560         }
 561
 562         should_be = (sb->s_log_block_size == 0 &&
 563                      EXT2FS_CLUSTER_RATIO(fs) == 1) ? 1 : 0;
 564         if (sb->s_first_data_block != should_be) {
 565                 pctx.blk = sb->s_first_data_block;
 566                 pctx.blk2 = should_be;
 567                 fix_problem(ctx, PR_0_FIRST_DATA_BLOCK, &pctx);
 568                 ctx->flags |= E2F_FLAG_ABORT;
 569                 return;
 570         }
 571
 572         should_be = sb->s_inodes_per_group * fs->group_desc_count;
 573         if (sb->s_inodes_count != should_be) {
 574                 pctx.ino = sb->s_inodes_count;
 575                 pctx.ino2 = should_be;
 576                 if (fix_problem(ctx, PR_0_INODE_COUNT_WRONG, &pctx)) {
 577                         sb->s_inodes_count = should_be;
 578                         ext2fs_mark_super_dirty(fs);
 579                 }
 580         }
 581
 582         /* Is 64bit set and extents unset? */
 583         if (EXT2_HAS_INCOMPAT_FEATURE(fs->super,
 584                                       EXT4_FEATURE_INCOMPAT_64BIT) &&
 585             !EXT2_HAS_INCOMPAT_FEATURE(fs->super,
 586                                        EXT3_FEATURE_INCOMPAT_EXTENTS) &&
 587             fix_problem(ctx, PR_0_64BIT_WITHOUT_EXTENTS, &pctx)) {
 588                 fs->super->s_feature_incompat |=
 589                         EXT3_FEATURE_INCOMPAT_EXTENTS;
 590                 ext2fs_mark_super_dirty(fs);
 591         }
 592
 593         /*
 594          * Verify the group descriptors....
 595          */
 596         first_block = sb->s_first_data_block;
 597         last_block = ext2fs_blocks_count(sb)-1;
 598
 599         csum_flag = EXT2_HAS_RO_COMPAT_FEATURE(fs->super,
 600                                                EXT4_FEATURE_RO_COMPAT_GDT_CSUM);
 601         for (i = 0; i < fs->group_desc_count; i++) {
 602                 pctx.group = i;
 603
 604                 if (!EXT2_HAS_INCOMPAT_FEATURE(fs->super,
 605                                                EXT4_FEATURE_INCOMPAT_FLEX_BG)) {
 606                         first_block = ext2fs_group_first_block2(fs, i);
 607                         last_block = ext2fs_group_last_block2(fs, i);
 608                 }
 609
 610                 if ((ext2fs_block_bitmap_loc(fs, i) < first_block) ||
 611                     (ext2fs_block_bitmap_loc(fs, i) > last_block)) {
 612                         pctx.blk = ext2fs_block_bitmap_loc(fs, i);
 613                         if (fix_problem(ctx, PR_0_BB_NOT_GROUP, &pctx))
 614                                 ext2fs_block_bitmap_loc_set(fs, i, 0);
 615                 }
 616                 if (ext2fs_block_bitmap_loc(fs, i) == 0) {
 617                         ctx->invalid_block_bitmap_flag[i]++;
 618                         ctx->invalid_bitmaps++;
 619                 }
 620                 if ((ext2fs_inode_bitmap_loc(fs, i) < first_block) ||
 621                     (ext2fs_inode_bitmap_loc(fs, i) > last_block)) {
 622                         pctx.blk = ext2fs_inode_bitmap_loc(fs, i);
 623                         if (fix_problem(ctx, PR_0_IB_NOT_GROUP, &pctx))
 624                                 ext2fs_inode_bitmap_loc_set(fs, i, 0);
 625                 }
 626                 if (ext2fs_inode_bitmap_loc(fs, i) == 0) {
 627                         ctx->invalid_inode_bitmap_flag[i]++;
 628                         ctx->invalid_bitmaps++;
 629                 }
 630                 if ((ext2fs_inode_table_loc(fs, i) < first_block) ||
 631                     ((ext2fs_inode_table_loc(fs, i) +
 632                       fs->inode_blocks_per_group - 1) > last_block)) {
 633                         pctx.blk = ext2fs_inode_table_loc(fs, i);
 634                         if (fix_problem(ctx, PR_0_ITABLE_NOT_GROUP, &pctx))
 635                                 ext2fs_inode_table_loc_set(fs, i, 0);
 636                 }
 637                 if (ext2fs_inode_table_loc(fs, i) == 0) {
 638                         ctx->invalid_inode_table_flag[i]++;
 639                         ctx->invalid_bitmaps++;
 640                 }
 641                 free_blocks += ext2fs_bg_free_blocks_count(fs, i);
 642                 free_inodes += ext2fs_bg_free_inodes_count(fs, i);
 643
 644                 if ((ext2fs_bg_free_blocks_count(fs, i) > sb->s_blocks_per_group) ||
 645                     (ext2fs_bg_free_inodes_count(fs, i) > sb->s_inodes_per_group) ||
 646                     (ext2fs_bg_used_dirs_count(fs, i) > sb->s_inodes_per_group))
 647                         ext2fs_unmark_valid(fs);
 648
 649                 should_be = 0;
 650                 if (!ext2fs_group_desc_csum_verify(fs, i)) {
 651                         pctx.csum1 = ext2fs_bg_checksum(fs, i);
 652                         pctx.csum2 = ext2fs_group_desc_csum(fs, i);
 653                         if (fix_problem(ctx, PR_0_GDT_CSUM, &pctx)) {
 654                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
 655                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
 656                                 ext2fs_bg_itable_unused_set(fs, i, 0);
 657                                 should_be = 1;
 658                         }
 659                         ext2fs_unmark_valid(fs);
 660                 }
 661
 662                 if (!csum_flag &&
 663                     (ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT) ||
 664                      ext2fs_bg_flags_test(fs, i, EXT2_BG_INODE_UNINIT) ||
 665                      ext2fs_bg_itable_unused(fs, i) != 0)) {
 666                         if (fix_problem(ctx, PR_0_GDT_UNINIT, &pctx)) {
 667                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
 668                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_INODE_UNINIT);
 669                                 ext2fs_bg_itable_unused_set(fs, i, 0);
 670                                 should_be = 1;
 671                         }
 672                         ext2fs_unmark_valid(fs);
 673                 }
 674
 675                 if (i == fs->group_desc_count - 1 &&
 676                     ext2fs_bg_flags_test(fs, i, EXT2_BG_BLOCK_UNINIT)) {
 677                         if (fix_problem(ctx, PR_0_BB_UNINIT_LAST, &pctx)) {
 678                                 ext2fs_bg_flags_clear(fs, i, EXT2_BG_BLOCK_UNINIT);
 679                                 should_be = 1;
 680                         }
 681                         ext2fs_unmark_valid(fs);
 682                 }
 683
 684                 if (csum_flag &&
 685                     (ext2fs_bg_itable_unused(fs, i) > ext2fs_bg_free_inodes_count(fs, i) ||
 686                      ext2fs_bg_itable_unused(fs, i) > sb->s_inodes_per_group)) {
 687                         pctx.blk = ext2fs_bg_itable_unused(fs, i);
 688                         if (fix_problem(ctx, PR_0_GDT_ITABLE_UNUSED, &pctx)) {
 689                                 ext2fs_bg_itable_unused_set(fs, i, 0);
 690                                 should_be = 1;
 691                         }
 692                         ext2fs_unmark_valid(fs);
 693                 }
 694
 695                 if (should_be)
 696                         ext2fs_group_desc_csum_set(fs, i);
 697                 /* If the user aborts e2fsck by typing ^C, stop right away */
 698                 if (ctx->flags & E2F_FLAG_SIGNAL_MASK)
 699                         return;
 700         }
 701
 702         ctx->free_blocks = EXT2FS_C2B(fs, free_blocks);
 703         ctx->free_inodes = free_inodes;
 704
 705         if ((ext2fs_free_blocks_count(sb) > ext2fs_blocks_count(sb)) ||
 706             (sb->s_free_inodes_count > sb->s_inodes_count))
 707                 ext2fs_unmark_valid(fs);
 708
 709
 710         /*
 711          * If we have invalid bitmaps, set the error state of the
 712          * filesystem.
 713          */
 714         if (ctx->invalid_bitmaps && !(ctx->options & E2F_OPT_READONLY)) {
 715                 sb->s_state &= ~EXT2_VALID_FS;
 716                 ext2fs_mark_super_dirty(fs);
 717         }
 718
 719         clear_problem_context(&pctx);
 720
 721 #ifndef EXT2_SKIP_UUID
 722         /*
 723          * If the UUID field isn't assigned, assign it.
 724          */
 725         if (!(ctx->options & E2F_OPT_READONLY) && uuid_is_null(sb->s_uuid)) {
 726                 if (fix_problem(ctx, PR_0_ADD_UUID, &pctx)) {
 727                         uuid_generate(sb->s_uuid);
 728                         fs->flags |= EXT2_FLAG_DIRTY;
 729                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 730                 }
 731         }
 732 #endif
 733
 734         /*
 735          * Check to see if we should disable the test_fs flag
 736          */
 737         profile_get_boolean(ctx->profile, "options",
 738                             "clear_test_fs_flag", 0, 1,
 739                             &clear_test_fs_flag);
 740         if (!(ctx->options & E2F_OPT_READONLY) &&
 741             clear_test_fs_flag &&
 742             (fs->super->s_flags & EXT2_FLAGS_TEST_FILESYS) &&
 743             (fs_proc_check("ext4") || check_for_modules("ext4"))) {
 744                 if (fix_problem(ctx, PR_0_CLEAR_TESTFS_FLAG, &pctx)) {
 745                         fs->super->s_flags &= ~EXT2_FLAGS_TEST_FILESYS;
 746                         fs->flags |= EXT2_FLAG_DIRTY;
 747                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 748                 }
 749         }
 750
 751         /*
 752          * For the Hurd, check to see if the filetype option is set,
 753          * since it doesn't support it.
 754          */
 755         if (!(ctx->options & E2F_OPT_READONLY) &&
 756             fs->super->s_creator_os == EXT2_OS_HURD &&
 757             (fs->super->s_feature_incompat &
 758              EXT2_FEATURE_INCOMPAT_FILETYPE)) {
 759                 if (fix_problem(ctx, PR_0_HURD_CLEAR_FILETYPE, &pctx)) {
 760                         fs->super->s_feature_incompat &=
 761                                 ~EXT2_FEATURE_INCOMPAT_FILETYPE;
 762                         ext2fs_mark_super_dirty(fs);
 763                         fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 764                 }
 765         }
 766
 767         /*
 768          * If we have any of the compatibility flags set, we need to have a
 769          * revision 1 filesystem.  Most kernels will not check the flags on
 770          * a rev 0 filesystem and we may have corruption issues because of
 771          * the incompatible changes to the filesystem.
 772          */
 773         if (!(ctx->options & E2F_OPT_READONLY) &&
 774             fs->super->s_rev_level == EXT2_GOOD_OLD_REV &&
 775             (fs->super->s_feature_compat ||
 776              fs->super->s_feature_ro_compat ||
 777              fs->super->s_feature_incompat) &&
 778             fix_problem(ctx, PR_0_FS_REV_LEVEL, &pctx)) {
 779                 ext2fs_update_dynamic_rev(fs);
 780                 ext2fs_mark_super_dirty(fs);
 781                 fs->flags &= ~EXT2_FLAG_MASTER_SB_ONLY;
 782         }
 783
 784         /*
 785          * Clean up any orphan inodes, if present.
 786          */
 787         if (!(ctx->options & E2F_OPT_READONLY) && release_orphan_inodes(ctx)) {
 788                 fs->super->s_state &= ~EXT2_VALID_FS;
 789                 ext2fs_mark_super_dirty(fs);
 790         }
 791
 792         /*
 793          * Unfortunately, due to Windows' unfortunate design decision
 794          * to configure the hardware clock to tick localtime, instead
 795          * of the more proper and less error-prone UTC time, many
 796          * users end up in the situation where the system clock is
 797          * incorrectly set at the time when e2fsck is run.
 798          *
 799          * Historically this was usually due to some distributions
 800          * having buggy init scripts and/or installers that didn't
 801          * correctly detect this case and take appropriate
 802          * countermeasures.  However, it's still possible, despite the
 803          * best efforts of init script and installer authors to not be
 804          * able to detect this misconfiguration, usually due to a
 805          * buggy or misconfigured virtualization manager or the
 806          * installer not having access to a network time server during
 807          * the installation process.  So by default, we allow the
 808          * superblock times to be fudged by up to 24 hours.  This can
 809          * be disabled by setting options.accept_time_fudge to the
 810          * boolean value of false in e2fsck.conf.  We also support
 811          * options.buggy_init_scripts for backwards compatibility.
 812          */
 813         profile_get_boolean(ctx->profile, "options", "accept_time_fudge",
 814                             0, 1, &accept_time_fudge);
 815         profile_get_boolean(ctx->profile, "options", "buggy_init_scripts",
 816                             0, accept_time_fudge, &accept_time_fudge);
 817         ctx->time_fudge = accept_time_fudge ? 86400 : 0;
 818
 819         profile_get_boolean(ctx->profile, "options", "broken_system_clock",
 820                             0, 0, &broken_system_clock);
 821
 822         /*
 823          * Check to see if the superblock last mount time or last
 824          * write time is in the future.
 825          */
 826         if (!broken_system_clock &&
 827             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
 828             fs->super->s_mtime > (__u32) ctx->now) {
 829                 pctx.num = fs->super->s_mtime;
 830                 problem = PR_0_FUTURE_SB_LAST_MOUNT;
 831                 if (fs->super->s_mtime <= (__u32) ctx->now + ctx->time_fudge)
 832                         problem = PR_0_FUTURE_SB_LAST_MOUNT_FUDGED;
 833                 if (fix_problem(ctx, problem, &pctx)) {
 834                         fs->super->s_mtime = ctx->now;
 835                         fs->flags |= EXT2_FLAG_DIRTY;
 836                 }
 837         }
 838         if (!broken_system_clock &&
 839             !(ctx->flags & E2F_FLAG_TIME_INSANE) &&
 840             fs->super->s_wtime > (__u32) ctx->now) {
 841                 pctx.num = fs->super->s_wtime;
 842                 problem = PR_0_FUTURE_SB_LAST_WRITE;
 843                 if (fs->super->s_wtime <= (__u32) ctx->now + ctx->time_fudge)
 844                         problem = PR_0_FUTURE_SB_LAST_WRITE_FUDGED;
 845                 if (fix_problem(ctx, problem, &pctx)) {
 846                         fs->super->s_wtime = ctx->now;
 847                         fs->flags |= EXT2_FLAG_DIRTY;
 848                 }
 849         }
 850
 851         /*
 852          * Move the ext3 journal file, if necessary.
 853          */
 854         e2fsck_move_ext3_journal(ctx);
 855
 856         /*
 857          * Fix journal hint, if necessary
 858          */
 859         e2fsck_fix_ext3_journal_hint(ctx);
 860
 861         /*
 862          * Add dirhash hint if necessary
 863          */
 864         e2fsck_fix_dirhash_hint(ctx);
 865
 866         /*
 867          * Hide quota inodes if necessary.
 868          */
 869         e2fsck_hide_quota(ctx);
 870
 871         return;
 872 }
 873
 874 /*
 875  * Check to see if we should backup the master sb to the backup super
 876  * blocks.  Returns non-zero if the sb should be backed up.
 877  */
 878
 879 /*
 880  * A few flags are set on the fly by the kernel, but only in the
 881  * primary superblock.  This is actually a bad thing, and we should
 882  * try to discourage it in the future.  In particular, for the newer
 883  * ext4 files, especially EXT4_FEATURE_RO_COMPAT_DIR_NLINK and
 884  * EXT3_FEATURE_INCOMPAT_EXTENTS.  So some of these may go away in the
 885  * future.  EXT3_FEATURE_INCOMPAT_RECOVER may also get set when
 886  * copying the primary superblock during online resize.
 887  *
 888  * The kernel will set EXT2_FEATURE_COMPAT_EXT_ATTR, but
 889  * unfortunately, we shouldn't ignore it since if it's not set in the
 890  * backup, the extended attributes in the filesystem will be stripped
 891  * away.
 892  */
 893 #define FEATURE_RO_COMPAT_IGNORE        (EXT2_FEATURE_RO_COMPAT_LARGE_FILE| \
 894                                          EXT4_FEATURE_RO_COMPAT_DIR_NLINK)
 895 #define FEATURE_INCOMPAT_IGNORE         (EXT3_FEATURE_INCOMPAT_EXTENTS| \
 896                                          EXT3_FEATURE_INCOMPAT_RECOVER)
 897
 898 int check_backup_super_block(e2fsck_t ctx)
 899 {
 900         ext2_filsys     fs = ctx->fs;
 901         errcode_t       retval;
 902         dgrp_t          g;
 903         blk64_t         sb;
 904         int             ret = 0;
 905         char            buf[SUPERBLOCK_SIZE];
 906         struct ext2_super_block *backup_sb;
 907
 908         /*
 909          * If we are already writing out the backup blocks, then we
 910          * don't need to test.  Also, if the filesystem is invalid, or
 911          * the check was aborted or cancelled, we also don't want to
 912          * do the backup.  If the filesystem was opened read-only then
 913          * we can't do the backup.
 914          */
 915         if (((fs->flags & EXT2_FLAG_MASTER_SB_ONLY) == 0) ||
 916             !ext2fs_test_valid(fs) ||
 917             (fs->super->s_state & EXT2_ERROR_FS) ||
 918             (ctx->flags & (E2F_FLAG_ABORT | E2F_FLAG_CANCEL)) ||
 919             (ctx->options & E2F_OPT_READONLY))
 920                 return 0;
 921
 922         for (g = 1; g < fs->group_desc_count; g++) {
 923                 if (!ext2fs_bg_has_super(fs, g))
 924                         continue;
 925
 926                 sb = ext2fs_group_first_block2(fs, g);
 927
 928                 retval = io_channel_read_blk(fs->io, sb, -SUPERBLOCK_SIZE,
 929                                              buf);
 930                 if (retval)
 931                         continue;
 932                 backup_sb = (struct ext2_super_block *) buf;
 933 #ifdef WORDS_BIGENDIAN
 934                 ext2fs_swap_super(backup_sb);
 935 #endif
 936                 if ((backup_sb->s_magic != EXT2_SUPER_MAGIC) ||
 937                     (backup_sb->s_rev_level > EXT2_LIB_CURRENT_REV) ||
 938                     ((backup_sb->s_log_block_size + EXT2_MIN_BLOCK_LOG_SIZE) >
 939                      EXT2_MAX_BLOCK_LOG_SIZE) ||
 940                     (EXT2_INODE_SIZE(backup_sb) < EXT2_GOOD_OLD_INODE_SIZE))
 941                         continue;
 942
 943 #define SUPER_INCOMPAT_DIFFERENT(x)     \
 944         ((fs->super->x & ~FEATURE_INCOMPAT_IGNORE) !=   \
 945          (backup_sb->x & ~FEATURE_INCOMPAT_IGNORE))
 946 #define SUPER_RO_COMPAT_DIFFERENT(x)    \
 947         ((fs->super->x & ~FEATURE_RO_COMPAT_IGNORE) !=  \
 948          (backup_sb->x & ~FEATURE_RO_COMPAT_IGNORE))
 949 #define SUPER_DIFFERENT(x)              \
 950         (fs->super->x != backup_sb->x)
 951
 952                 if (SUPER_DIFFERENT(s_feature_compat) ||
 953                     SUPER_INCOMPAT_DIFFERENT(s_feature_incompat) ||
 954                     SUPER_RO_COMPAT_DIFFERENT(s_feature_ro_compat) ||
 955                     SUPER_DIFFERENT(s_blocks_count) ||
 956                     SUPER_DIFFERENT(s_blocks_count_hi) ||
 957                     SUPER_DIFFERENT(s_inodes_count) ||
 958                     memcmp(fs->super->s_uuid, backup_sb->s_uuid,
 959                            sizeof(fs->super->s_uuid)))
 960                         ret = 1;
 961                 break;
 962         }
 963         return ret;
 964 }