cbabeda669
Add the -R option to allow fsck_ffs to restart itself when too many critical errors have been detected in a particular run. Clean up the global state variables so that a restart can happen correctly. Separate the global variables in fsck_ffs and fsdb to their own file. This fixes header sharing with fscd. Correctly initialize, static-ize, and remove global variables as needed in dir.c. This fixes a problem with lost+found directories that was causing a segfault. Correctly initialize, static-ize, and remove global variables as needed in suj.c. Initialize the suj globals before allocating the disk object, not after. Also ensure that 'preen' mode doesn't conflict with 'restart' mode Obtained from: Netflix
523 lines
14 KiB
C
523 lines
14 KiB
C
/*
|
|
* Copyright (c) 1980, 1986, 1993
|
|
* The Regents of the University of California. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 4. Neither the name of the University nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#if 0
|
|
#ifndef lint
|
|
static const char sccsid[] = "@(#)pass1.c 8.6 (Berkeley) 4/28/95";
|
|
#endif /* not lint */
|
|
#endif
|
|
#include <sys/cdefs.h>
|
|
__FBSDID("$FreeBSD$");
|
|
|
|
#include <sys/param.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/sysctl.h>
|
|
|
|
#include <ufs/ufs/dinode.h>
|
|
#include <ufs/ufs/dir.h>
|
|
#include <ufs/ffs/fs.h>
|
|
|
|
#include <err.h>
|
|
#include <limits.h>
|
|
#include <stdint.h>
|
|
#include <string.h>
|
|
|
|
#include "fsck.h"
|
|
|
|
static ufs2_daddr_t badblk;
|
|
static ufs2_daddr_t dupblk;
|
|
static ino_t lastino; /* last inode in use */
|
|
|
|
static int checkinode(ino_t inumber, struct inodesc *, int rebuildcg);
|
|
|
|
void
|
|
pass1(void)
|
|
{
|
|
struct inostat *info;
|
|
struct inodesc idesc;
|
|
struct bufarea *cgbp;
|
|
struct cg *cgp;
|
|
ino_t inumber, inosused, mininos;
|
|
ufs2_daddr_t i, cgd;
|
|
u_int8_t *cp;
|
|
int c, rebuildcg;
|
|
|
|
badblk = dupblk = lastino = 0;
|
|
|
|
/*
|
|
* Set file system reserved blocks in used block map.
|
|
*/
|
|
for (c = 0; c < sblock.fs_ncg; c++) {
|
|
cgd = cgdmin(&sblock, c);
|
|
if (c == 0) {
|
|
i = cgbase(&sblock, c);
|
|
} else
|
|
i = cgsblock(&sblock, c);
|
|
for (; i < cgd; i++)
|
|
setbmap(i);
|
|
}
|
|
i = sblock.fs_csaddr;
|
|
cgd = i + howmany(sblock.fs_cssize, sblock.fs_fsize);
|
|
for (; i < cgd; i++)
|
|
setbmap(i);
|
|
|
|
/*
|
|
* Find all allocated blocks.
|
|
*/
|
|
memset(&idesc, 0, sizeof(struct inodesc));
|
|
idesc.id_func = pass1check;
|
|
n_files = n_blks = 0;
|
|
for (c = 0; c < sblock.fs_ncg; c++) {
|
|
inumber = c * sblock.fs_ipg;
|
|
setinodebuf(inumber);
|
|
cgbp = cgget(c);
|
|
cgp = cgbp->b_un.b_cg;
|
|
rebuildcg = 0;
|
|
if (!check_cgmagic(c, cgbp))
|
|
rebuildcg = 1;
|
|
if (!rebuildcg && sblock.fs_magic == FS_UFS2_MAGIC) {
|
|
inosused = cgp->cg_initediblk;
|
|
if (inosused > sblock.fs_ipg) {
|
|
pfatal(
|
|
"Too many initialized inodes (%ju > %d) in cylinder group %d\nReset to %d\n",
|
|
(uintmax_t)inosused,
|
|
sblock.fs_ipg, c, sblock.fs_ipg);
|
|
inosused = sblock.fs_ipg;
|
|
}
|
|
} else {
|
|
inosused = sblock.fs_ipg;
|
|
}
|
|
if (got_siginfo) {
|
|
printf("%s: phase 1: cyl group %d of %d (%d%%)\n",
|
|
cdevname, c, sblock.fs_ncg,
|
|
c * 100 / sblock.fs_ncg);
|
|
got_siginfo = 0;
|
|
}
|
|
if (got_sigalarm) {
|
|
setproctitle("%s p1 %d%%", cdevname,
|
|
c * 100 / sblock.fs_ncg);
|
|
got_sigalarm = 0;
|
|
}
|
|
/*
|
|
* If we are using soft updates, then we can trust the
|
|
* cylinder group inode allocation maps to tell us which
|
|
* inodes are allocated. We will scan the used inode map
|
|
* to find the inodes that are really in use, and then
|
|
* read only those inodes in from disk.
|
|
*/
|
|
if ((preen || inoopt) && usedsoftdep && !rebuildcg) {
|
|
cp = &cg_inosused(cgp)[(inosused - 1) / CHAR_BIT];
|
|
for ( ; inosused > 0; inosused -= CHAR_BIT, cp--) {
|
|
if (*cp == 0)
|
|
continue;
|
|
for (i = 1 << (CHAR_BIT - 1); i > 0; i >>= 1) {
|
|
if (*cp & i)
|
|
break;
|
|
inosused--;
|
|
}
|
|
break;
|
|
}
|
|
if (inosused < 0)
|
|
inosused = 0;
|
|
}
|
|
/*
|
|
* Allocate inoinfo structures for the allocated inodes.
|
|
*/
|
|
inostathead[c].il_numalloced = inosused;
|
|
if (inosused == 0) {
|
|
inostathead[c].il_stat = 0;
|
|
continue;
|
|
}
|
|
info = Calloc((unsigned)inosused, sizeof(struct inostat));
|
|
if (info == NULL)
|
|
errx(EEXIT, "cannot alloc %u bytes for inoinfo",
|
|
(unsigned)(sizeof(struct inostat) * inosused));
|
|
inostathead[c].il_stat = info;
|
|
/*
|
|
* Scan the allocated inodes.
|
|
*/
|
|
for (i = 0; i < inosused; i++, inumber++) {
|
|
if (inumber < ROOTINO) {
|
|
(void)getnextinode(inumber, rebuildcg);
|
|
continue;
|
|
}
|
|
/*
|
|
* NULL return indicates probable end of allocated
|
|
* inodes during cylinder group rebuild attempt.
|
|
* We always keep trying until we get to the minimum
|
|
* valid number for this cylinder group.
|
|
*/
|
|
if (checkinode(inumber, &idesc, rebuildcg) == 0 &&
|
|
i > cgp->cg_initediblk)
|
|
break;
|
|
}
|
|
/*
|
|
* This optimization speeds up future runs of fsck
|
|
* by trimming down the number of inodes in cylinder
|
|
* groups that formerly had many inodes but now have
|
|
* fewer in use.
|
|
*/
|
|
mininos = roundup(inosused + INOPB(&sblock), INOPB(&sblock));
|
|
if (inoopt && !preen && !rebuildcg &&
|
|
sblock.fs_magic == FS_UFS2_MAGIC &&
|
|
cgp->cg_initediblk > 2 * INOPB(&sblock) &&
|
|
mininos < cgp->cg_initediblk) {
|
|
i = cgp->cg_initediblk;
|
|
if (mininos < 2 * INOPB(&sblock))
|
|
cgp->cg_initediblk = 2 * INOPB(&sblock);
|
|
else
|
|
cgp->cg_initediblk = mininos;
|
|
pwarn("CYLINDER GROUP %d: RESET FROM %ju TO %d %s\n",
|
|
c, i, cgp->cg_initediblk, "VALID INODES");
|
|
dirty(cgbp);
|
|
}
|
|
if (inosused < sblock.fs_ipg)
|
|
continue;
|
|
lastino += 1;
|
|
if (lastino < (c * sblock.fs_ipg))
|
|
inosused = 0;
|
|
else
|
|
inosused = lastino - (c * sblock.fs_ipg);
|
|
if (rebuildcg && inosused > cgp->cg_initediblk &&
|
|
sblock.fs_magic == FS_UFS2_MAGIC) {
|
|
cgp->cg_initediblk = roundup(inosused, INOPB(&sblock));
|
|
pwarn("CYLINDER GROUP %d: FOUND %d VALID INODES\n", c,
|
|
cgp->cg_initediblk);
|
|
}
|
|
/*
|
|
* If we were not able to determine in advance which inodes
|
|
* were in use, then reduce the size of the inoinfo structure
|
|
* to the size necessary to describe the inodes that we
|
|
* really found.
|
|
*/
|
|
if (inumber == lastino)
|
|
continue;
|
|
inostathead[c].il_numalloced = inosused;
|
|
if (inosused == 0) {
|
|
free(inostathead[c].il_stat);
|
|
inostathead[c].il_stat = 0;
|
|
continue;
|
|
}
|
|
info = Calloc((unsigned)inosused, sizeof(struct inostat));
|
|
if (info == NULL)
|
|
errx(EEXIT, "cannot alloc %u bytes for inoinfo",
|
|
(unsigned)(sizeof(struct inostat) * inosused));
|
|
memmove(info, inostathead[c].il_stat, inosused * sizeof(*info));
|
|
free(inostathead[c].il_stat);
|
|
inostathead[c].il_stat = info;
|
|
}
|
|
freeinodebuf();
|
|
}
|
|
|
|
static int
|
|
checkinode(ino_t inumber, struct inodesc *idesc, int rebuildcg)
|
|
{
|
|
union dinode *dp;
|
|
off_t kernmaxfilesize;
|
|
ufs2_daddr_t ndb;
|
|
mode_t mode;
|
|
int j, ret, offset;
|
|
|
|
if ((dp = getnextinode(inumber, rebuildcg)) == NULL)
|
|
return (0);
|
|
mode = DIP(dp, di_mode) & IFMT;
|
|
if (mode == 0) {
|
|
if ((sblock.fs_magic == FS_UFS1_MAGIC &&
|
|
(memcmp(dp->dp1.di_db, ufs1_zino.di_db,
|
|
NDADDR * sizeof(ufs1_daddr_t)) ||
|
|
memcmp(dp->dp1.di_ib, ufs1_zino.di_ib,
|
|
NIADDR * sizeof(ufs1_daddr_t)) ||
|
|
dp->dp1.di_mode || dp->dp1.di_size)) ||
|
|
(sblock.fs_magic == FS_UFS2_MAGIC &&
|
|
(memcmp(dp->dp2.di_db, ufs2_zino.di_db,
|
|
NDADDR * sizeof(ufs2_daddr_t)) ||
|
|
memcmp(dp->dp2.di_ib, ufs2_zino.di_ib,
|
|
NIADDR * sizeof(ufs2_daddr_t)) ||
|
|
dp->dp2.di_mode || dp->dp2.di_size))) {
|
|
pfatal("PARTIALLY ALLOCATED INODE I=%lu",
|
|
(u_long)inumber);
|
|
if (reply("CLEAR") == 1) {
|
|
dp = ginode(inumber);
|
|
clearinode(dp);
|
|
inodirty();
|
|
}
|
|
}
|
|
inoinfo(inumber)->ino_state = USTATE;
|
|
return (1);
|
|
}
|
|
lastino = inumber;
|
|
/* This should match the file size limit in ffs_mountfs(). */
|
|
if (sblock.fs_magic == FS_UFS1_MAGIC)
|
|
kernmaxfilesize = (off_t)0x40000000 * sblock.fs_bsize - 1;
|
|
else
|
|
kernmaxfilesize = sblock.fs_maxfilesize;
|
|
if (DIP(dp, di_size) > kernmaxfilesize ||
|
|
DIP(dp, di_size) > sblock.fs_maxfilesize ||
|
|
(mode == IFDIR && DIP(dp, di_size) > MAXDIRSIZE)) {
|
|
if (debug)
|
|
printf("bad size %ju:", (uintmax_t)DIP(dp, di_size));
|
|
goto unknown;
|
|
}
|
|
if (!preen && mode == IFMT && reply("HOLD BAD BLOCK") == 1) {
|
|
dp = ginode(inumber);
|
|
DIP_SET(dp, di_size, sblock.fs_fsize);
|
|
DIP_SET(dp, di_mode, IFREG|0600);
|
|
inodirty();
|
|
}
|
|
if ((mode == IFBLK || mode == IFCHR || mode == IFIFO ||
|
|
mode == IFSOCK) && DIP(dp, di_size) != 0) {
|
|
if (debug)
|
|
printf("bad special-file size %ju:",
|
|
(uintmax_t)DIP(dp, di_size));
|
|
goto unknown;
|
|
}
|
|
if ((mode == IFBLK || mode == IFCHR) &&
|
|
(dev_t)DIP(dp, di_rdev) == NODEV) {
|
|
if (debug)
|
|
printf("bad special-file rdev NODEV:");
|
|
goto unknown;
|
|
}
|
|
ndb = howmany(DIP(dp, di_size), sblock.fs_bsize);
|
|
if (ndb < 0) {
|
|
if (debug)
|
|
printf("bad size %ju ndb %ju:",
|
|
(uintmax_t)DIP(dp, di_size), (uintmax_t)ndb);
|
|
goto unknown;
|
|
}
|
|
if (mode == IFBLK || mode == IFCHR)
|
|
ndb++;
|
|
if (mode == IFLNK) {
|
|
/*
|
|
* Fake ndb value so direct/indirect block checks below
|
|
* will detect any garbage after symlink string.
|
|
*/
|
|
if (DIP(dp, di_size) < (off_t)sblock.fs_maxsymlinklen) {
|
|
if (sblock.fs_magic == FS_UFS1_MAGIC)
|
|
ndb = howmany(DIP(dp, di_size),
|
|
sizeof(ufs1_daddr_t));
|
|
else
|
|
ndb = howmany(DIP(dp, di_size),
|
|
sizeof(ufs2_daddr_t));
|
|
if (ndb > NDADDR) {
|
|
j = ndb - NDADDR;
|
|
for (ndb = 1; j > 1; j--)
|
|
ndb *= NINDIR(&sblock);
|
|
ndb += NDADDR;
|
|
}
|
|
}
|
|
}
|
|
for (j = ndb; ndb < NDADDR && j < NDADDR; j++)
|
|
if (DIP(dp, di_db[j]) != 0) {
|
|
if (debug)
|
|
printf("bad direct addr[%d]: %ju\n", j,
|
|
(uintmax_t)DIP(dp, di_db[j]));
|
|
goto unknown;
|
|
}
|
|
for (j = 0, ndb -= NDADDR; ndb > 0; j++)
|
|
ndb /= NINDIR(&sblock);
|
|
for (; j < NIADDR; j++)
|
|
if (DIP(dp, di_ib[j]) != 0) {
|
|
if (debug)
|
|
printf("bad indirect addr: %ju\n",
|
|
(uintmax_t)DIP(dp, di_ib[j]));
|
|
goto unknown;
|
|
}
|
|
if (ftypeok(dp) == 0)
|
|
goto unknown;
|
|
n_files++;
|
|
inoinfo(inumber)->ino_linkcnt = DIP(dp, di_nlink);
|
|
if (mode == IFDIR) {
|
|
if (DIP(dp, di_size) == 0)
|
|
inoinfo(inumber)->ino_state = DCLEAR;
|
|
else if (DIP(dp, di_nlink) <= 0)
|
|
inoinfo(inumber)->ino_state = DZLINK;
|
|
else
|
|
inoinfo(inumber)->ino_state = DSTATE;
|
|
cacheino(dp, inumber);
|
|
countdirs++;
|
|
} else if (DIP(dp, di_nlink) <= 0)
|
|
inoinfo(inumber)->ino_state = FZLINK;
|
|
else
|
|
inoinfo(inumber)->ino_state = FSTATE;
|
|
inoinfo(inumber)->ino_type = IFTODT(mode);
|
|
badblk = dupblk = 0;
|
|
idesc->id_number = inumber;
|
|
if (DIP(dp, di_flags) & SF_SNAPSHOT)
|
|
idesc->id_type = SNAP;
|
|
else
|
|
idesc->id_type = ADDR;
|
|
(void)ckinode(dp, idesc);
|
|
if (sblock.fs_magic == FS_UFS2_MAGIC && dp->dp2.di_extsize > 0) {
|
|
idesc->id_type = ADDR;
|
|
ndb = howmany(dp->dp2.di_extsize, sblock.fs_bsize);
|
|
for (j = 0; j < NXADDR; j++) {
|
|
if (--ndb == 0 &&
|
|
(offset = blkoff(&sblock, dp->dp2.di_extsize)) != 0)
|
|
idesc->id_numfrags = numfrags(&sblock,
|
|
fragroundup(&sblock, offset));
|
|
else
|
|
idesc->id_numfrags = sblock.fs_frag;
|
|
if (dp->dp2.di_extb[j] == 0)
|
|
continue;
|
|
idesc->id_blkno = dp->dp2.di_extb[j];
|
|
ret = (*idesc->id_func)(idesc);
|
|
if (ret & STOP)
|
|
break;
|
|
}
|
|
}
|
|
if (sblock.fs_magic == FS_UFS2_MAGIC)
|
|
eascan(idesc, &dp->dp2);
|
|
idesc->id_entryno *= btodb(sblock.fs_fsize);
|
|
if (DIP(dp, di_blocks) != idesc->id_entryno) {
|
|
pwarn("INCORRECT BLOCK COUNT I=%lu (%ju should be %ju)",
|
|
(u_long)inumber, (uintmax_t)DIP(dp, di_blocks),
|
|
(uintmax_t)idesc->id_entryno);
|
|
if (preen)
|
|
printf(" (CORRECTED)\n");
|
|
else if (reply("CORRECT") == 0)
|
|
return (1);
|
|
if (bkgrdflag == 0) {
|
|
dp = ginode(inumber);
|
|
DIP_SET(dp, di_blocks, idesc->id_entryno);
|
|
inodirty();
|
|
} else {
|
|
cmd.value = idesc->id_number;
|
|
cmd.size = idesc->id_entryno - DIP(dp, di_blocks);
|
|
if (debug)
|
|
printf("adjblkcnt ino %ju amount %lld\n",
|
|
(uintmax_t)cmd.value, (long long)cmd.size);
|
|
if (sysctl(adjblkcnt, MIBSIZE, 0, 0,
|
|
&cmd, sizeof cmd) == -1)
|
|
rwerror("ADJUST INODE BLOCK COUNT", cmd.value);
|
|
}
|
|
}
|
|
return (1);
|
|
unknown:
|
|
pfatal("UNKNOWN FILE TYPE I=%lu", (u_long)inumber);
|
|
inoinfo(inumber)->ino_state = FCLEAR;
|
|
if (reply("CLEAR") == 1) {
|
|
inoinfo(inumber)->ino_state = USTATE;
|
|
dp = ginode(inumber);
|
|
clearinode(dp);
|
|
inodirty();
|
|
}
|
|
return (1);
|
|
}
|
|
|
|
int
|
|
pass1check(struct inodesc *idesc)
|
|
{
|
|
int res = KEEPON;
|
|
int anyout, nfrags;
|
|
ufs2_daddr_t blkno = idesc->id_blkno;
|
|
struct dups *dlp;
|
|
struct dups *new;
|
|
|
|
if (idesc->id_type == SNAP) {
|
|
if (blkno == BLK_NOCOPY)
|
|
return (KEEPON);
|
|
if (idesc->id_number == cursnapshot) {
|
|
if (blkno == blkstofrags(&sblock, idesc->id_lbn))
|
|
return (KEEPON);
|
|
if (blkno == BLK_SNAP) {
|
|
blkno = blkstofrags(&sblock, idesc->id_lbn);
|
|
idesc->id_entryno -= idesc->id_numfrags;
|
|
}
|
|
} else {
|
|
if (blkno == BLK_SNAP)
|
|
return (KEEPON);
|
|
}
|
|
}
|
|
if ((anyout = chkrange(blkno, idesc->id_numfrags)) != 0) {
|
|
blkerror(idesc->id_number, "BAD", blkno);
|
|
if (badblk++ >= MAXBAD) {
|
|
pwarn("EXCESSIVE BAD BLKS I=%lu",
|
|
(u_long)idesc->id_number);
|
|
if (preen)
|
|
printf(" (SKIPPING)\n");
|
|
else if (reply("CONTINUE") == 0) {
|
|
ckfini(0);
|
|
exit(EEXIT);
|
|
}
|
|
rerun = 1;
|
|
return (STOP);
|
|
}
|
|
}
|
|
for (nfrags = idesc->id_numfrags; nfrags > 0; blkno++, nfrags--) {
|
|
if (anyout && chkrange(blkno, 1)) {
|
|
res = SKIP;
|
|
} else if (!testbmap(blkno)) {
|
|
n_blks++;
|
|
setbmap(blkno);
|
|
} else {
|
|
blkerror(idesc->id_number, "DUP", blkno);
|
|
if (dupblk++ >= MAXDUP) {
|
|
pwarn("EXCESSIVE DUP BLKS I=%lu",
|
|
(u_long)idesc->id_number);
|
|
if (preen)
|
|
printf(" (SKIPPING)\n");
|
|
else if (reply("CONTINUE") == 0) {
|
|
ckfini(0);
|
|
exit(EEXIT);
|
|
}
|
|
rerun = 1;
|
|
return (STOP);
|
|
}
|
|
new = (struct dups *)Malloc(sizeof(struct dups));
|
|
if (new == NULL) {
|
|
pfatal("DUP TABLE OVERFLOW.");
|
|
if (reply("CONTINUE") == 0) {
|
|
ckfini(0);
|
|
exit(EEXIT);
|
|
}
|
|
rerun = 1;
|
|
return (STOP);
|
|
}
|
|
new->dup = blkno;
|
|
if (muldup == 0) {
|
|
duplist = muldup = new;
|
|
new->next = 0;
|
|
} else {
|
|
new->next = muldup->next;
|
|
muldup->next = new;
|
|
}
|
|
for (dlp = duplist; dlp != muldup; dlp = dlp->next)
|
|
if (dlp->dup == blkno)
|
|
break;
|
|
if (dlp == muldup && dlp->dup != blkno)
|
|
muldup = new;
|
|
}
|
|
/*
|
|
* count the number of blocks found in id_entryno
|
|
*/
|
|
idesc->id_entryno++;
|
|
}
|
|
return (res);
|
|
}
|