2 * Copyright (c) 2000-2006 Silicon Graphics, Inc.
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License as
7 * published by the Free Software Foundation.
9 * This program is distributed in the hope that it would be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write the Free Software Foundation,
16 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20 #include "xfs_types.h"
24 #include "xfs_trans.h"
28 #include "xfs_dmapi.h"
29 #include "xfs_mount.h"
30 #include "xfs_bmap_btree.h"
31 #include "xfs_alloc_btree.h"
32 #include "xfs_ialloc_btree.h"
33 #include "xfs_dir2_sf.h"
34 #include "xfs_attr_sf.h"
35 #include "xfs_dinode.h"
36 #include "xfs_inode.h"
37 #include "xfs_inode_item.h"
38 #include "xfs_itable.h"
39 #include "xfs_btree.h"
40 #include "xfs_alloc.h"
41 #include "xfs_ialloc.h"
45 #include "xfs_error.h"
46 #include "xfs_buf_item.h"
50 * This is a subroutine for xfs_write() and other writers (xfs_ioctl)
51 * which clears the setuid and setgid bits when a file is written.
54 xfs_write_clear_setuid(
62 tp
= xfs_trans_alloc(mp
, XFS_TRANS_WRITEID
);
63 if ((error
= xfs_trans_reserve(tp
, 0,
64 XFS_WRITEID_LOG_RES(mp
),
66 xfs_trans_cancel(tp
, 0);
69 xfs_ilock(ip
, XFS_ILOCK_EXCL
);
70 xfs_trans_ijoin(tp
, ip
, XFS_ILOCK_EXCL
);
71 xfs_trans_ihold(tp
, ip
);
72 ip
->i_d
.di_mode
&= ~S_ISUID
;
75 * Note that we don't have to worry about mandatory
76 * file locking being disabled here because we only
77 * clear the S_ISGID bit if the Group execute bit is
78 * on, but if it was on then mandatory locking wouldn't
81 if (ip
->i_d
.di_mode
& S_IXGRP
) {
82 ip
->i_d
.di_mode
&= ~S_ISGID
;
84 xfs_trans_log_inode(tp
, ip
, XFS_ILOG_CORE
);
85 xfs_trans_set_sync(tp
);
86 error
= xfs_trans_commit(tp
, 0, NULL
);
87 xfs_iunlock(ip
, XFS_ILOCK_EXCL
);
92 * Handle logging requirements of various synchronous types of write.
95 xfs_write_sync_logforce(
102 * If we're treating this as O_DSYNC and we have not updated the
103 * size, force the log.
105 if (!(mp
->m_flags
& XFS_MOUNT_OSYNCISOSYNC
) &&
106 !(ip
->i_update_size
)) {
107 xfs_inode_log_item_t
*iip
= ip
->i_itemp
;
110 * If an allocation transaction occurred
111 * without extending the size, then we have to force
112 * the log up the proper point to ensure that the
113 * allocation is permanent. We can't count on
114 * the fact that buffered writes lock out direct I/O
115 * writes - the direct I/O write could have extended
116 * the size nontransactionally, then finished before
117 * we started. xfs_write_file will think that the file
118 * didn't grow but the update isn't safe unless the
119 * size change is logged.
121 * Force the log if we've committed a transaction
122 * against the inode or if someone else has and
123 * the commit record hasn't gone to disk (e.g.
124 * the inode is pinned). This guarantees that
125 * all changes affecting the inode are permanent
128 if (iip
&& iip
->ili_last_lsn
) {
129 xfs_log_force(mp
, iip
->ili_last_lsn
,
130 XFS_LOG_FORCE
| XFS_LOG_SYNC
);
131 } else if (xfs_ipincount(ip
) > 0) {
132 xfs_log_force(mp
, (xfs_lsn_t
)0,
133 XFS_LOG_FORCE
| XFS_LOG_SYNC
);
140 * O_SYNC or O_DSYNC _with_ a size update are handled
143 * If the write was synchronous then we need to make
144 * sure that the inode modification time is permanent.
145 * We'll have updated the timestamp above, so here
146 * we use a synchronous transaction to log the inode.
147 * It's not fast, but it's necessary.
149 * If this a dsync write and the size got changed
150 * non-transactionally, then we need to ensure that
151 * the size change gets logged in a synchronous
154 tp
= xfs_trans_alloc(mp
, XFS_TRANS_WRITE_SYNC
);
155 if ((error
= xfs_trans_reserve(tp
, 0,
156 XFS_SWRITE_LOG_RES(mp
),
158 /* Transaction reserve failed */
159 xfs_trans_cancel(tp
, 0);
161 /* Transaction reserve successful */
162 xfs_ilock(ip
, XFS_ILOCK_EXCL
);
163 xfs_trans_ijoin(tp
, ip
, XFS_ILOCK_EXCL
);
164 xfs_trans_ihold(tp
, ip
);
165 xfs_trans_log_inode(tp
, ip
, XFS_ILOG_CORE
);
166 xfs_trans_set_sync(tp
);
167 error
= xfs_trans_commit(tp
, 0, NULL
);
168 xfs_iunlock(ip
, XFS_ILOCK_EXCL
);
176 * Force a shutdown of the filesystem instantly while keeping
177 * the filesystem consistent. We don't do an unmount here; just shutdown
178 * the shop, make sure that absolutely nothing persistent happens to
179 * this filesystem after this point.
183 xfs_do_force_shutdown(
192 mp
= XFS_BHVTOM(bdp
);
193 logerror
= flags
& SHUTDOWN_LOG_IO_ERROR
;
195 if (!(flags
& SHUTDOWN_FORCE_UMOUNT
)) {
196 cmn_err(CE_NOTE
, "xfs_force_shutdown(%s,0x%x) called from "
197 "line %d of file %s. Return address = 0x%p",
198 mp
->m_fsname
, flags
, lnnum
, fname
, __return_address
);
201 * No need to duplicate efforts.
203 if (XFS_FORCED_SHUTDOWN(mp
) && !logerror
)
207 * This flags XFS_MOUNT_FS_SHUTDOWN, makes sure that we don't
208 * queue up anybody new on the log reservations, and wakes up
209 * everybody who's sleeping on log reservations to tell them
212 if (xfs_log_force_umount(mp
, logerror
))
215 if (flags
& SHUTDOWN_CORRUPT_INCORE
) {
216 xfs_cmn_err(XFS_PTAG_SHUTDOWN_CORRUPT
, CE_ALERT
, mp
,
217 "Corruption of in-memory data detected. Shutting down filesystem: %s",
219 if (XFS_ERRLEVEL_HIGH
<= xfs_error_level
) {
222 } else if (!(flags
& SHUTDOWN_FORCE_UMOUNT
)) {
224 xfs_cmn_err(XFS_PTAG_SHUTDOWN_LOGERROR
, CE_ALERT
, mp
,
225 "Log I/O Error Detected. Shutting down filesystem: %s",
227 } else if (flags
& SHUTDOWN_DEVICE_REQ
) {
228 xfs_cmn_err(XFS_PTAG_SHUTDOWN_IOERROR
, CE_ALERT
, mp
,
229 "All device paths lost. Shutting down filesystem: %s",
231 } else if (!(flags
& SHUTDOWN_REMOTE_REQ
)) {
232 xfs_cmn_err(XFS_PTAG_SHUTDOWN_IOERROR
, CE_ALERT
, mp
,
233 "I/O Error Detected. Shutting down filesystem: %s",
237 if (!(flags
& SHUTDOWN_FORCE_UMOUNT
)) {
238 cmn_err(CE_ALERT
, "Please umount the filesystem, "
239 "and rectify the problem(s)");
245 * Called when we want to stop a buffer from getting written or read.
246 * We attach the EIO error, muck with its flags, and call biodone
247 * so that the proper iodone callbacks get called.
255 ASSERT(XFS_BUF_ISREAD(bp
) || bp
->b_iodone
);
259 * No need to wait until the buffer is unpinned.
260 * We aren't flushing it.
262 xfs_buftrace("XFS IOERROR", bp
);
263 XFS_BUF_ERROR(bp
, EIO
);
265 * We're calling biodone, so delete B_DONE flag. Either way
266 * we have to call the iodone callback, and calling biodone
267 * probably is the best way since it takes care of
271 XFS_BUF_UNDELAYWRITE(bp
);
275 XFS_BUF_CLR_BDSTRAT_FUNC(bp
);
282 * Same as xfs_bioerror, except that we are releasing the buffer
283 * here ourselves, and avoiding the biodone call.
284 * This is meant for userdata errors; metadata bufs come with
285 * iodone functions attached, so that we can track down errors.
293 ASSERT(XFS_BUF_IODONE_FUNC(bp
) != xfs_buf_iodone_callbacks
);
294 ASSERT(XFS_BUF_IODONE_FUNC(bp
) != xlog_iodone
);
296 xfs_buftrace("XFS IOERRELSE", bp
);
297 fl
= XFS_BUF_BFLAGS(bp
);
299 * No need to wait until the buffer is unpinned.
300 * We aren't flushing it.
302 * chunkhold expects B_DONE to be set, whether
303 * we actually finish the I/O or not. We don't want to
304 * change that interface.
307 XFS_BUF_UNDELAYWRITE(bp
);
310 XFS_BUF_CLR_IODONE_FUNC(bp
);
311 XFS_BUF_CLR_BDSTRAT_FUNC(bp
);
312 if (!(fl
& XFS_B_ASYNC
)) {
314 * Mark b_error and B_ERROR _both_.
315 * Lot's of chunkcache code assumes that.
316 * There's no reason to mark error for
319 XFS_BUF_ERROR(bp
, EIO
);
320 XFS_BUF_V_IODONESEMA(bp
);
328 * Prints out an ALERT message about I/O error.
333 struct xfs_mount
*mp
,
338 "I/O error in filesystem (\"%s\") meta-data dev %s block 0x%llx"
339 " (\"%s\") error %d buf count %zd",
340 (!mp
|| !mp
->m_fsname
) ? "(fs name not set)" : mp
->m_fsname
,
341 XFS_BUFTARG_NAME(XFS_BUF_TARGET(bp
)),
342 (__uint64_t
)blkno
, func
,
343 XFS_BUF_GETERROR(bp
), XFS_BUF_COUNT(bp
));
347 * This isn't an absolute requirement, but it is
348 * just a good idea to call xfs_read_buf instead of
349 * directly doing a read_buf call. For one, we shouldn't
350 * be doing this disk read if we are in SHUTDOWN state anyway,
351 * so this stops that from happening. Secondly, this does all
352 * the error checking stuff and the brelse if appropriate for
353 * the caller, so the code can be a little leaner.
358 struct xfs_mount
*mp
,
359 xfs_buftarg_t
*target
,
369 bp
= xfs_buf_read_flags(target
, blkno
, len
, flags
);
371 bp
= xfs_buf_read(target
, blkno
, len
, flags
);
373 return XFS_ERROR(EIO
);
374 error
= XFS_BUF_GETERROR(bp
);
375 if (bp
&& !error
&& !XFS_FORCED_SHUTDOWN(mp
)) {
380 xfs_ioerror_alert("xfs_read_buf", mp
, bp
, XFS_BUF_ADDR(bp
));
382 error
= XFS_ERROR(EIO
);
386 XFS_BUF_UNDELAYWRITE(bp
);
389 * brelse clears B_ERROR and b_error
398 * Wrapper around bwrite() so that we can trap
399 * write errors, and act accordingly.
403 struct xfs_mount
*mp
,
409 * XXXsup how does this work for quotas.
411 XFS_BUF_SET_BDSTRAT_FUNC(bp
, xfs_bdstrat_cb
);
412 XFS_BUF_SET_FSPRIVATE3(bp
, mp
);
415 if ((error
= XFS_bwrite(bp
))) {
418 * Cannot put a buftrace here since if the buffer is not
419 * B_HOLD then we will brelse() the buffer before returning
420 * from bwrite and we could be tracing a buffer that has
423 xfs_force_shutdown(mp
, SHUTDOWN_META_IO_ERROR
);