1 // SPDX-License-Identifier: GPL-2.0 2 /* 3 * Copyright (c) 2000-2006 Silicon Graphics, Inc. 4 * All Rights Reserved. 5 */ 6 #include "xfs.h" 7 #include "xfs_fs.h" 8 #include "xfs_shared.h" 9 #include "xfs_format.h" 10 #include "xfs_log_format.h" 11 #include "xfs_trans_resv.h" 12 #include "xfs_mount.h" 13 #include "xfs_inode.h" 14 #include "xfs_trans.h" 15 #include "xfs_inode_item.h" 16 #include "xfs_trace.h" 17 #include "xfs_trans_priv.h" 18 #include "xfs_buf_item.h" 19 #include "xfs_log.h" 20 #include "xfs_error.h" 21 #include "xfs_log_priv.h" 22 #include "xfs_log_recover.h" 23 #include "xfs_icache.h" 24 #include "xfs_bmap_btree.h" 25 26 STATIC void 27 xlog_recover_inode_ra_pass2( 28 struct xlog *log, 29 struct xlog_recover_item *item) 30 { 31 if (item->ri_buf[0].i_len == sizeof(struct xfs_inode_log_format)) { 32 struct xfs_inode_log_format *ilfp = item->ri_buf[0].i_addr; 33 34 xlog_buf_readahead(log, ilfp->ilf_blkno, ilfp->ilf_len, 35 &xfs_inode_buf_ra_ops); 36 } else { 37 struct xfs_inode_log_format_32 *ilfp = item->ri_buf[0].i_addr; 38 39 xlog_buf_readahead(log, ilfp->ilf_blkno, ilfp->ilf_len, 40 &xfs_inode_buf_ra_ops); 41 } 42 } 43 44 /* 45 * Inode fork owner changes 46 * 47 * If we have been told that we have to reparent the inode fork, it's because an 48 * extent swap operation on a CRC enabled filesystem has been done and we are 49 * replaying it. We need to walk the BMBT of the appropriate fork and change the 50 * owners of it. 51 * 52 * The complexity here is that we don't have an inode context to work with, so 53 * after we've replayed the inode we need to instantiate one. This is where the 54 * fun begins. 55 * 56 * We are in the middle of log recovery, so we can't run transactions. That 57 * means we cannot use cache coherent inode instantiation via xfs_iget(), as 58 * that will result in the corresponding iput() running the inode through 59 * xfs_inactive(). If we've just replayed an inode core that changes the link 60 * count to zero (i.e. it's been unlinked), then xfs_inactive() will run 61 * transactions (bad!). 62 * 63 * So, to avoid this, we instantiate an inode directly from the inode core we've 64 * just recovered. We have the buffer still locked, and all we really need to 65 * instantiate is the inode core and the forks being modified. We can do this 66 * manually, then run the inode btree owner change, and then tear down the 67 * xfs_inode without having to run any transactions at all. 68 * 69 * Also, because we don't have a transaction context available here but need to 70 * gather all the buffers we modify for writeback so we pass the buffer_list 71 * instead for the operation to use. 72 */ 73 74 STATIC int 75 xfs_recover_inode_owner_change( 76 struct xfs_mount *mp, 77 struct xfs_dinode *dip, 78 struct xfs_inode_log_format *in_f, 79 struct list_head *buffer_list) 80 { 81 struct xfs_inode *ip; 82 int error; 83 84 ASSERT(in_f->ilf_fields & (XFS_ILOG_DOWNER|XFS_ILOG_AOWNER)); 85 86 ip = xfs_inode_alloc(mp, in_f->ilf_ino); 87 if (!ip) 88 return -ENOMEM; 89 90 /* instantiate the inode */ 91 ASSERT(dip->di_version >= 3); 92 93 error = xfs_inode_from_disk(ip, dip); 94 if (error) 95 goto out_free_ip; 96 97 if (in_f->ilf_fields & XFS_ILOG_DOWNER) { 98 ASSERT(in_f->ilf_fields & XFS_ILOG_DBROOT); 99 error = xfs_bmbt_change_owner(NULL, ip, XFS_DATA_FORK, 100 ip->i_ino, buffer_list); 101 if (error) 102 goto out_free_ip; 103 } 104 105 if (in_f->ilf_fields & XFS_ILOG_AOWNER) { 106 ASSERT(in_f->ilf_fields & XFS_ILOG_ABROOT); 107 error = xfs_bmbt_change_owner(NULL, ip, XFS_ATTR_FORK, 108 ip->i_ino, buffer_list); 109 if (error) 110 goto out_free_ip; 111 } 112 113 out_free_ip: 114 xfs_inode_free(ip); 115 return error; 116 } 117 118 static inline bool xfs_log_dinode_has_bigtime(const struct xfs_log_dinode *ld) 119 { 120 return ld->di_version >= 3 && 121 (ld->di_flags2 & XFS_DIFLAG2_BIGTIME); 122 } 123 124 /* Convert a log timestamp to an ondisk timestamp. */ 125 static inline xfs_timestamp_t 126 xfs_log_dinode_to_disk_ts( 127 struct xfs_log_dinode *from, 128 const xfs_ictimestamp_t its) 129 { 130 struct xfs_legacy_timestamp *lts; 131 struct xfs_legacy_ictimestamp *lits; 132 xfs_timestamp_t ts; 133 134 if (xfs_log_dinode_has_bigtime(from)) 135 return cpu_to_be64(its); 136 137 lts = (struct xfs_legacy_timestamp *)&ts; 138 lits = (struct xfs_legacy_ictimestamp *)&its; 139 lts->t_sec = cpu_to_be32(lits->t_sec); 140 lts->t_nsec = cpu_to_be32(lits->t_nsec); 141 142 return ts; 143 } 144 145 STATIC void 146 xfs_log_dinode_to_disk( 147 struct xfs_log_dinode *from, 148 struct xfs_dinode *to) 149 { 150 to->di_magic = cpu_to_be16(from->di_magic); 151 to->di_mode = cpu_to_be16(from->di_mode); 152 to->di_version = from->di_version; 153 to->di_format = from->di_format; 154 to->di_onlink = 0; 155 to->di_uid = cpu_to_be32(from->di_uid); 156 to->di_gid = cpu_to_be32(from->di_gid); 157 to->di_nlink = cpu_to_be32(from->di_nlink); 158 to->di_projid_lo = cpu_to_be16(from->di_projid_lo); 159 to->di_projid_hi = cpu_to_be16(from->di_projid_hi); 160 memcpy(to->di_pad, from->di_pad, sizeof(to->di_pad)); 161 162 to->di_atime = xfs_log_dinode_to_disk_ts(from, from->di_atime); 163 to->di_mtime = xfs_log_dinode_to_disk_ts(from, from->di_mtime); 164 to->di_ctime = xfs_log_dinode_to_disk_ts(from, from->di_ctime); 165 166 to->di_size = cpu_to_be64(from->di_size); 167 to->di_nblocks = cpu_to_be64(from->di_nblocks); 168 to->di_extsize = cpu_to_be32(from->di_extsize); 169 to->di_nextents = cpu_to_be32(from->di_nextents); 170 to->di_anextents = cpu_to_be16(from->di_anextents); 171 to->di_forkoff = from->di_forkoff; 172 to->di_aformat = from->di_aformat; 173 to->di_dmevmask = cpu_to_be32(from->di_dmevmask); 174 to->di_dmstate = cpu_to_be16(from->di_dmstate); 175 to->di_flags = cpu_to_be16(from->di_flags); 176 to->di_gen = cpu_to_be32(from->di_gen); 177 178 if (from->di_version == 3) { 179 to->di_changecount = cpu_to_be64(from->di_changecount); 180 to->di_crtime = xfs_log_dinode_to_disk_ts(from, 181 from->di_crtime); 182 to->di_flags2 = cpu_to_be64(from->di_flags2); 183 to->di_cowextsize = cpu_to_be32(from->di_cowextsize); 184 to->di_ino = cpu_to_be64(from->di_ino); 185 to->di_lsn = cpu_to_be64(from->di_lsn); 186 memcpy(to->di_pad2, from->di_pad2, sizeof(to->di_pad2)); 187 uuid_copy(&to->di_uuid, &from->di_uuid); 188 to->di_flushiter = 0; 189 } else { 190 to->di_flushiter = cpu_to_be16(from->di_flushiter); 191 } 192 } 193 194 STATIC int 195 xlog_recover_inode_commit_pass2( 196 struct xlog *log, 197 struct list_head *buffer_list, 198 struct xlog_recover_item *item, 199 xfs_lsn_t current_lsn) 200 { 201 struct xfs_inode_log_format *in_f; 202 struct xfs_mount *mp = log->l_mp; 203 struct xfs_buf *bp; 204 struct xfs_dinode *dip; 205 int len; 206 char *src; 207 char *dest; 208 int error; 209 int attr_index; 210 uint fields; 211 struct xfs_log_dinode *ldip; 212 uint isize; 213 int need_free = 0; 214 215 if (item->ri_buf[0].i_len == sizeof(struct xfs_inode_log_format)) { 216 in_f = item->ri_buf[0].i_addr; 217 } else { 218 in_f = kmem_alloc(sizeof(struct xfs_inode_log_format), 0); 219 need_free = 1; 220 error = xfs_inode_item_format_convert(&item->ri_buf[0], in_f); 221 if (error) 222 goto error; 223 } 224 225 /* 226 * Inode buffers can be freed, look out for it, 227 * and do not replay the inode. 228 */ 229 if (xlog_is_buffer_cancelled(log, in_f->ilf_blkno, in_f->ilf_len)) { 230 error = 0; 231 trace_xfs_log_recover_inode_cancel(log, in_f); 232 goto error; 233 } 234 trace_xfs_log_recover_inode_recover(log, in_f); 235 236 error = xfs_buf_read(mp->m_ddev_targp, in_f->ilf_blkno, in_f->ilf_len, 237 0, &bp, &xfs_inode_buf_ops); 238 if (error) 239 goto error; 240 ASSERT(in_f->ilf_fields & XFS_ILOG_CORE); 241 dip = xfs_buf_offset(bp, in_f->ilf_boffset); 242 243 /* 244 * Make sure the place we're flushing out to really looks 245 * like an inode! 246 */ 247 if (XFS_IS_CORRUPT(mp, !xfs_verify_magic16(bp, dip->di_magic))) { 248 xfs_alert(mp, 249 "%s: Bad inode magic number, dip = "PTR_FMT", dino bp = "PTR_FMT", ino = %Ld", 250 __func__, dip, bp, in_f->ilf_ino); 251 error = -EFSCORRUPTED; 252 goto out_release; 253 } 254 ldip = item->ri_buf[1].i_addr; 255 if (XFS_IS_CORRUPT(mp, ldip->di_magic != XFS_DINODE_MAGIC)) { 256 xfs_alert(mp, 257 "%s: Bad inode log record, rec ptr "PTR_FMT", ino %Ld", 258 __func__, item, in_f->ilf_ino); 259 error = -EFSCORRUPTED; 260 goto out_release; 261 } 262 263 /* 264 * If the inode has an LSN in it, recover the inode only if it's less 265 * than the lsn of the transaction we are replaying. Note: we still 266 * need to replay an owner change even though the inode is more recent 267 * than the transaction as there is no guarantee that all the btree 268 * blocks are more recent than this transaction, too. 269 */ 270 if (dip->di_version >= 3) { 271 xfs_lsn_t lsn = be64_to_cpu(dip->di_lsn); 272 273 if (lsn && lsn != -1 && XFS_LSN_CMP(lsn, current_lsn) >= 0) { 274 trace_xfs_log_recover_inode_skip(log, in_f); 275 error = 0; 276 goto out_owner_change; 277 } 278 } 279 280 /* 281 * di_flushiter is only valid for v1/2 inodes. All changes for v3 inodes 282 * are transactional and if ordering is necessary we can determine that 283 * more accurately by the LSN field in the V3 inode core. Don't trust 284 * the inode versions we might be changing them here - use the 285 * superblock flag to determine whether we need to look at di_flushiter 286 * to skip replay when the on disk inode is newer than the log one 287 */ 288 if (!xfs_sb_version_has_v3inode(&mp->m_sb) && 289 ldip->di_flushiter < be16_to_cpu(dip->di_flushiter)) { 290 /* 291 * Deal with the wrap case, DI_MAX_FLUSH is less 292 * than smaller numbers 293 */ 294 if (be16_to_cpu(dip->di_flushiter) == DI_MAX_FLUSH && 295 ldip->di_flushiter < (DI_MAX_FLUSH >> 1)) { 296 /* do nothing */ 297 } else { 298 trace_xfs_log_recover_inode_skip(log, in_f); 299 error = 0; 300 goto out_release; 301 } 302 } 303 304 /* Take the opportunity to reset the flush iteration count */ 305 ldip->di_flushiter = 0; 306 307 if (unlikely(S_ISREG(ldip->di_mode))) { 308 if ((ldip->di_format != XFS_DINODE_FMT_EXTENTS) && 309 (ldip->di_format != XFS_DINODE_FMT_BTREE)) { 310 XFS_CORRUPTION_ERROR("xlog_recover_inode_pass2(3)", 311 XFS_ERRLEVEL_LOW, mp, ldip, 312 sizeof(*ldip)); 313 xfs_alert(mp, 314 "%s: Bad regular inode log record, rec ptr "PTR_FMT", " 315 "ino ptr = "PTR_FMT", ino bp = "PTR_FMT", ino %Ld", 316 __func__, item, dip, bp, in_f->ilf_ino); 317 error = -EFSCORRUPTED; 318 goto out_release; 319 } 320 } else if (unlikely(S_ISDIR(ldip->di_mode))) { 321 if ((ldip->di_format != XFS_DINODE_FMT_EXTENTS) && 322 (ldip->di_format != XFS_DINODE_FMT_BTREE) && 323 (ldip->di_format != XFS_DINODE_FMT_LOCAL)) { 324 XFS_CORRUPTION_ERROR("xlog_recover_inode_pass2(4)", 325 XFS_ERRLEVEL_LOW, mp, ldip, 326 sizeof(*ldip)); 327 xfs_alert(mp, 328 "%s: Bad dir inode log record, rec ptr "PTR_FMT", " 329 "ino ptr = "PTR_FMT", ino bp = "PTR_FMT", ino %Ld", 330 __func__, item, dip, bp, in_f->ilf_ino); 331 error = -EFSCORRUPTED; 332 goto out_release; 333 } 334 } 335 if (unlikely(ldip->di_nextents + ldip->di_anextents > ldip->di_nblocks)){ 336 XFS_CORRUPTION_ERROR("xlog_recover_inode_pass2(5)", 337 XFS_ERRLEVEL_LOW, mp, ldip, 338 sizeof(*ldip)); 339 xfs_alert(mp, 340 "%s: Bad inode log record, rec ptr "PTR_FMT", dino ptr "PTR_FMT", " 341 "dino bp "PTR_FMT", ino %Ld, total extents = %d, nblocks = %Ld", 342 __func__, item, dip, bp, in_f->ilf_ino, 343 ldip->di_nextents + ldip->di_anextents, 344 ldip->di_nblocks); 345 error = -EFSCORRUPTED; 346 goto out_release; 347 } 348 if (unlikely(ldip->di_forkoff > mp->m_sb.sb_inodesize)) { 349 XFS_CORRUPTION_ERROR("xlog_recover_inode_pass2(6)", 350 XFS_ERRLEVEL_LOW, mp, ldip, 351 sizeof(*ldip)); 352 xfs_alert(mp, 353 "%s: Bad inode log record, rec ptr "PTR_FMT", dino ptr "PTR_FMT", " 354 "dino bp "PTR_FMT", ino %Ld, forkoff 0x%x", __func__, 355 item, dip, bp, in_f->ilf_ino, ldip->di_forkoff); 356 error = -EFSCORRUPTED; 357 goto out_release; 358 } 359 isize = xfs_log_dinode_size(mp); 360 if (unlikely(item->ri_buf[1].i_len > isize)) { 361 XFS_CORRUPTION_ERROR("xlog_recover_inode_pass2(7)", 362 XFS_ERRLEVEL_LOW, mp, ldip, 363 sizeof(*ldip)); 364 xfs_alert(mp, 365 "%s: Bad inode log record length %d, rec ptr "PTR_FMT, 366 __func__, item->ri_buf[1].i_len, item); 367 error = -EFSCORRUPTED; 368 goto out_release; 369 } 370 371 /* recover the log dinode inode into the on disk inode */ 372 xfs_log_dinode_to_disk(ldip, dip); 373 374 fields = in_f->ilf_fields; 375 if (fields & XFS_ILOG_DEV) 376 xfs_dinode_put_rdev(dip, in_f->ilf_u.ilfu_rdev); 377 378 if (in_f->ilf_size == 2) 379 goto out_owner_change; 380 len = item->ri_buf[2].i_len; 381 src = item->ri_buf[2].i_addr; 382 ASSERT(in_f->ilf_size <= 4); 383 ASSERT((in_f->ilf_size == 3) || (fields & XFS_ILOG_AFORK)); 384 ASSERT(!(fields & XFS_ILOG_DFORK) || 385 (len == in_f->ilf_dsize)); 386 387 switch (fields & XFS_ILOG_DFORK) { 388 case XFS_ILOG_DDATA: 389 case XFS_ILOG_DEXT: 390 memcpy(XFS_DFORK_DPTR(dip), src, len); 391 break; 392 393 case XFS_ILOG_DBROOT: 394 xfs_bmbt_to_bmdr(mp, (struct xfs_btree_block *)src, len, 395 (struct xfs_bmdr_block *)XFS_DFORK_DPTR(dip), 396 XFS_DFORK_DSIZE(dip, mp)); 397 break; 398 399 default: 400 /* 401 * There are no data fork flags set. 402 */ 403 ASSERT((fields & XFS_ILOG_DFORK) == 0); 404 break; 405 } 406 407 /* 408 * If we logged any attribute data, recover it. There may or 409 * may not have been any other non-core data logged in this 410 * transaction. 411 */ 412 if (in_f->ilf_fields & XFS_ILOG_AFORK) { 413 if (in_f->ilf_fields & XFS_ILOG_DFORK) { 414 attr_index = 3; 415 } else { 416 attr_index = 2; 417 } 418 len = item->ri_buf[attr_index].i_len; 419 src = item->ri_buf[attr_index].i_addr; 420 ASSERT(len == in_f->ilf_asize); 421 422 switch (in_f->ilf_fields & XFS_ILOG_AFORK) { 423 case XFS_ILOG_ADATA: 424 case XFS_ILOG_AEXT: 425 dest = XFS_DFORK_APTR(dip); 426 ASSERT(len <= XFS_DFORK_ASIZE(dip, mp)); 427 memcpy(dest, src, len); 428 break; 429 430 case XFS_ILOG_ABROOT: 431 dest = XFS_DFORK_APTR(dip); 432 xfs_bmbt_to_bmdr(mp, (struct xfs_btree_block *)src, 433 len, (struct xfs_bmdr_block *)dest, 434 XFS_DFORK_ASIZE(dip, mp)); 435 break; 436 437 default: 438 xfs_warn(log->l_mp, "%s: Invalid flag", __func__); 439 ASSERT(0); 440 error = -EFSCORRUPTED; 441 goto out_release; 442 } 443 } 444 445 out_owner_change: 446 /* Recover the swapext owner change unless inode has been deleted */ 447 if ((in_f->ilf_fields & (XFS_ILOG_DOWNER|XFS_ILOG_AOWNER)) && 448 (dip->di_mode != 0)) 449 error = xfs_recover_inode_owner_change(mp, dip, in_f, 450 buffer_list); 451 /* re-generate the checksum. */ 452 xfs_dinode_calc_crc(log->l_mp, dip); 453 454 ASSERT(bp->b_mount == mp); 455 bp->b_flags |= _XBF_LOGRECOVERY; 456 xfs_buf_delwri_queue(bp, buffer_list); 457 458 out_release: 459 xfs_buf_relse(bp); 460 error: 461 if (need_free) 462 kmem_free(in_f); 463 return error; 464 } 465 466 const struct xlog_recover_item_ops xlog_inode_item_ops = { 467 .item_type = XFS_LI_INODE, 468 .ra_pass2 = xlog_recover_inode_ra_pass2, 469 .commit_pass2 = xlog_recover_inode_commit_pass2, 470 }; 471