1 // SPDX-License-Identifier: GPL-2.0+ 2 /* 3 * Copyright (C) 2016 Oracle. All Rights Reserved. 4 * Author: Darrick J. Wong <darrick.wong@oracle.com> 5 */ 6 #include "xfs_platform.h" 7 #include "xfs_fs.h" 8 #include "xfs_format.h" 9 #include "xfs_log_format.h" 10 #include "xfs_trans_resv.h" 11 #include "xfs_bit.h" 12 #include "xfs_shared.h" 13 #include "xfs_mount.h" 14 #include "xfs_defer.h" 15 #include "xfs_inode.h" 16 #include "xfs_trans.h" 17 #include "xfs_trans_priv.h" 18 #include "xfs_bmap_item.h" 19 #include "xfs_log.h" 20 #include "xfs_bmap.h" 21 #include "xfs_icache.h" 22 #include "xfs_bmap_btree.h" 23 #include "xfs_trans_space.h" 24 #include "xfs_error.h" 25 #include "xfs_log_priv.h" 26 #include "xfs_log_recover.h" 27 #include "xfs_ag.h" 28 #include "xfs_trace.h" 29 30 struct kmem_cache *xfs_bui_cache; 31 struct kmem_cache *xfs_bud_cache; 32 33 static const struct xfs_item_ops xfs_bui_item_ops; 34 35 static inline struct xfs_bui_log_item *BUI_ITEM(struct xfs_log_item *lip) 36 { 37 return container_of(lip, struct xfs_bui_log_item, bui_item); 38 } 39 40 STATIC void 41 xfs_bui_item_free( 42 struct xfs_bui_log_item *buip) 43 { 44 kvfree(buip->bui_item.li_lv_shadow); 45 kmem_cache_free(xfs_bui_cache, buip); 46 } 47 48 /* 49 * Freeing the BUI requires that we remove it from the AIL if it has already 50 * been placed there. However, the BUI may not yet have been placed in the AIL 51 * when called by xfs_bui_release() from BUD processing due to the ordering of 52 * committed vs unpin operations in bulk insert operations. Hence the reference 53 * count to ensure only the last caller frees the BUI. 54 */ 55 STATIC void 56 xfs_bui_release( 57 struct xfs_bui_log_item *buip) 58 { 59 ASSERT(atomic_read(&buip->bui_refcount) > 0); 60 if (!atomic_dec_and_test(&buip->bui_refcount)) 61 return; 62 63 xfs_trans_ail_delete(&buip->bui_item, 0); 64 xfs_bui_item_free(buip); 65 } 66 67 68 STATIC void 69 xfs_bui_item_size( 70 struct xfs_log_item *lip, 71 int *nvecs, 72 int *nbytes) 73 { 74 struct xfs_bui_log_item *buip = BUI_ITEM(lip); 75 76 *nvecs += 1; 77 *nbytes += xfs_bui_log_format_sizeof(buip->bui_format.bui_nextents); 78 } 79 80 unsigned int xfs_bui_log_space(unsigned int nr) 81 { 82 return xlog_item_space(1, xfs_bui_log_format_sizeof(nr)); 83 } 84 85 /* 86 * This is called to fill in the vector of log iovecs for the 87 * given bui log item. We use only 1 iovec, and we point that 88 * at the bui_log_format structure embedded in the bui item. 89 * It is at this point that we assert that all of the extent 90 * slots in the bui item have been filled. 91 */ 92 STATIC void 93 xfs_bui_item_format( 94 struct xfs_log_item *lip, 95 struct xlog_format_buf *lfb) 96 { 97 struct xfs_bui_log_item *buip = BUI_ITEM(lip); 98 99 ASSERT(atomic_read(&buip->bui_next_extent) == 100 buip->bui_format.bui_nextents); 101 102 buip->bui_format.bui_type = XFS_LI_BUI; 103 buip->bui_format.bui_size = 1; 104 105 xlog_format_copy(lfb, XLOG_REG_TYPE_BUI_FORMAT, &buip->bui_format, 106 xfs_bui_log_format_sizeof(buip->bui_format.bui_nextents)); 107 } 108 109 /* 110 * The unpin operation is the last place an BUI is manipulated in the log. It is 111 * either inserted in the AIL or aborted in the event of a log I/O error. In 112 * either case, the BUI transaction has been successfully committed to make it 113 * this far. Therefore, we expect whoever committed the BUI to either construct 114 * and commit the BUD or drop the BUD's reference in the event of error. Simply 115 * drop the log's BUI reference now that the log is done with it. 116 */ 117 STATIC void 118 xfs_bui_item_unpin( 119 struct xfs_log_item *lip, 120 int remove) 121 { 122 struct xfs_bui_log_item *buip = BUI_ITEM(lip); 123 124 xfs_bui_release(buip); 125 } 126 127 /* 128 * The BUI has been either committed or aborted if the transaction has been 129 * cancelled. If the transaction was cancelled, an BUD isn't going to be 130 * constructed and thus we free the BUI here directly. 131 */ 132 STATIC void 133 xfs_bui_item_release( 134 struct xfs_log_item *lip) 135 { 136 xfs_bui_release(BUI_ITEM(lip)); 137 } 138 139 /* 140 * Allocate and initialize an bui item with the given number of extents. 141 */ 142 STATIC struct xfs_bui_log_item * 143 xfs_bui_init( 144 struct xfs_mount *mp) 145 146 { 147 struct xfs_bui_log_item *buip; 148 149 buip = kmem_cache_zalloc(xfs_bui_cache, GFP_KERNEL | __GFP_NOFAIL); 150 151 xfs_log_item_init(mp, &buip->bui_item, XFS_LI_BUI, &xfs_bui_item_ops); 152 buip->bui_format.bui_nextents = XFS_BUI_MAX_FAST_EXTENTS; 153 buip->bui_format.bui_id = (uintptr_t)(void *)buip; 154 atomic_set(&buip->bui_next_extent, 0); 155 atomic_set(&buip->bui_refcount, 2); 156 157 return buip; 158 } 159 160 static inline struct xfs_bud_log_item *BUD_ITEM(struct xfs_log_item *lip) 161 { 162 return container_of(lip, struct xfs_bud_log_item, bud_item); 163 } 164 165 STATIC void 166 xfs_bud_item_size( 167 struct xfs_log_item *lip, 168 int *nvecs, 169 int *nbytes) 170 { 171 *nvecs += 1; 172 *nbytes += sizeof(struct xfs_bud_log_format); 173 } 174 175 unsigned int xfs_bud_log_space(void) 176 { 177 return xlog_item_space(1, sizeof(struct xfs_bud_log_format)); 178 } 179 180 /* 181 * This is called to fill in the vector of log iovecs for the 182 * given bud log item. We use only 1 iovec, and we point that 183 * at the bud_log_format structure embedded in the bud item. 184 * It is at this point that we assert that all of the extent 185 * slots in the bud item have been filled. 186 */ 187 STATIC void 188 xfs_bud_item_format( 189 struct xfs_log_item *lip, 190 struct xlog_format_buf *lfb) 191 { 192 struct xfs_bud_log_item *budp = BUD_ITEM(lip); 193 194 budp->bud_format.bud_type = XFS_LI_BUD; 195 budp->bud_format.bud_size = 1; 196 197 xlog_format_copy(lfb, XLOG_REG_TYPE_BUD_FORMAT, &budp->bud_format, 198 sizeof(struct xfs_bud_log_format)); 199 } 200 201 /* 202 * The BUD is either committed or aborted if the transaction is cancelled. If 203 * the transaction is cancelled, drop our reference to the BUI and free the 204 * BUD. 205 */ 206 STATIC void 207 xfs_bud_item_release( 208 struct xfs_log_item *lip) 209 { 210 struct xfs_bud_log_item *budp = BUD_ITEM(lip); 211 212 xfs_bui_release(budp->bud_buip); 213 kvfree(budp->bud_item.li_lv_shadow); 214 kmem_cache_free(xfs_bud_cache, budp); 215 } 216 217 static struct xfs_log_item * 218 xfs_bud_item_intent( 219 struct xfs_log_item *lip) 220 { 221 return &BUD_ITEM(lip)->bud_buip->bui_item; 222 } 223 224 static const struct xfs_item_ops xfs_bud_item_ops = { 225 .flags = XFS_ITEM_RELEASE_WHEN_COMMITTED | 226 XFS_ITEM_INTENT_DONE, 227 .iop_size = xfs_bud_item_size, 228 .iop_format = xfs_bud_item_format, 229 .iop_release = xfs_bud_item_release, 230 .iop_intent = xfs_bud_item_intent, 231 }; 232 233 static inline struct xfs_bmap_intent *bi_entry(const struct list_head *e) 234 { 235 return list_entry(e, struct xfs_bmap_intent, bi_list); 236 } 237 238 /* Sort bmap intents by inode. */ 239 static int 240 xfs_bmap_update_diff_items( 241 void *priv, 242 const struct list_head *a, 243 const struct list_head *b) 244 { 245 struct xfs_bmap_intent *ba = bi_entry(a); 246 struct xfs_bmap_intent *bb = bi_entry(b); 247 248 return ba->bi_owner->i_ino - bb->bi_owner->i_ino; 249 } 250 251 /* Log bmap updates in the intent item. */ 252 STATIC void 253 xfs_bmap_update_log_item( 254 struct xfs_trans *tp, 255 struct xfs_bui_log_item *buip, 256 struct xfs_bmap_intent *bi) 257 { 258 uint next_extent; 259 struct xfs_map_extent *map; 260 261 /* 262 * atomic_inc_return gives us the value after the increment; 263 * we want to use it as an array index so we need to subtract 1 from 264 * it. 265 */ 266 next_extent = atomic_inc_return(&buip->bui_next_extent) - 1; 267 ASSERT(next_extent < buip->bui_format.bui_nextents); 268 map = &buip->bui_format.bui_extents[next_extent]; 269 map->me_owner = bi->bi_owner->i_ino; 270 map->me_startblock = bi->bi_bmap.br_startblock; 271 map->me_startoff = bi->bi_bmap.br_startoff; 272 map->me_len = bi->bi_bmap.br_blockcount; 273 274 switch (bi->bi_type) { 275 case XFS_BMAP_MAP: 276 case XFS_BMAP_UNMAP: 277 map->me_flags = bi->bi_type; 278 break; 279 default: 280 ASSERT(0); 281 } 282 if (bi->bi_bmap.br_state == XFS_EXT_UNWRITTEN) 283 map->me_flags |= XFS_BMAP_EXTENT_UNWRITTEN; 284 if (bi->bi_whichfork == XFS_ATTR_FORK) 285 map->me_flags |= XFS_BMAP_EXTENT_ATTR_FORK; 286 if (xfs_ifork_is_realtime(bi->bi_owner, bi->bi_whichfork)) 287 map->me_flags |= XFS_BMAP_EXTENT_REALTIME; 288 } 289 290 static struct xfs_log_item * 291 xfs_bmap_update_create_intent( 292 struct xfs_trans *tp, 293 struct list_head *items, 294 unsigned int count, 295 bool sort) 296 { 297 struct xfs_mount *mp = tp->t_mountp; 298 struct xfs_bui_log_item *buip = xfs_bui_init(mp); 299 struct xfs_bmap_intent *bi; 300 301 ASSERT(count == XFS_BUI_MAX_FAST_EXTENTS); 302 303 if (sort) 304 list_sort(mp, items, xfs_bmap_update_diff_items); 305 list_for_each_entry(bi, items, bi_list) 306 xfs_bmap_update_log_item(tp, buip, bi); 307 return &buip->bui_item; 308 } 309 310 /* Get an BUD so we can process all the deferred bmap updates. */ 311 static struct xfs_log_item * 312 xfs_bmap_update_create_done( 313 struct xfs_trans *tp, 314 struct xfs_log_item *intent, 315 unsigned int count) 316 { 317 struct xfs_bui_log_item *buip = BUI_ITEM(intent); 318 struct xfs_bud_log_item *budp; 319 320 budp = kmem_cache_zalloc(xfs_bud_cache, GFP_KERNEL | __GFP_NOFAIL); 321 xfs_log_item_init(tp->t_mountp, &budp->bud_item, XFS_LI_BUD, 322 &xfs_bud_item_ops); 323 budp->bud_buip = buip; 324 budp->bud_format.bud_bui_id = buip->bui_format.bui_id; 325 326 return &budp->bud_item; 327 } 328 329 /* Take a passive ref to the group containing the space we're mapping. */ 330 static inline void 331 xfs_bmap_update_get_group( 332 struct xfs_mount *mp, 333 struct xfs_bmap_intent *bi) 334 { 335 enum xfs_group_type type = XG_TYPE_AG; 336 337 if (xfs_ifork_is_realtime(bi->bi_owner, bi->bi_whichfork)) 338 type = XG_TYPE_RTG; 339 340 /* 341 * Bump the intent count on behalf of the deferred rmap and refcount 342 * intent items that that we can queue when we finish this bmap work. 343 * This new intent item will bump the intent count before the bmap 344 * intent drops the intent count, ensuring that the intent count 345 * remains nonzero across the transaction roll. 346 */ 347 bi->bi_group = xfs_group_intent_get(mp, bi->bi_bmap.br_startblock, 348 type); 349 } 350 351 /* Add this deferred BUI to the transaction. */ 352 void 353 xfs_bmap_defer_add( 354 struct xfs_trans *tp, 355 struct xfs_bmap_intent *bi) 356 { 357 xfs_bmap_update_get_group(tp->t_mountp, bi); 358 359 /* 360 * Ensure the deferred mapping is pre-recorded in i_delayed_blks. 361 * 362 * Otherwise stat can report zero blocks for an inode that actually has 363 * data when the entire mapping is in the process of being overwritten 364 * using the out of place write path. This is undone in xfs_bmapi_remap 365 * after it has incremented di_nblocks for a successful operation. 366 */ 367 if (bi->bi_type == XFS_BMAP_MAP) 368 bi->bi_owner->i_delayed_blks += bi->bi_bmap.br_blockcount; 369 370 trace_xfs_bmap_defer(bi); 371 xfs_defer_add(tp, &bi->bi_list, &xfs_bmap_update_defer_type); 372 } 373 374 /* Cancel a deferred bmap update. */ 375 STATIC void 376 xfs_bmap_update_cancel_item( 377 struct list_head *item) 378 { 379 struct xfs_bmap_intent *bi = bi_entry(item); 380 381 if (bi->bi_type == XFS_BMAP_MAP) 382 bi->bi_owner->i_delayed_blks -= bi->bi_bmap.br_blockcount; 383 384 xfs_group_intent_put(bi->bi_group); 385 kmem_cache_free(xfs_bmap_intent_cache, bi); 386 } 387 388 /* Process a deferred bmap update. */ 389 STATIC int 390 xfs_bmap_update_finish_item( 391 struct xfs_trans *tp, 392 struct xfs_log_item *done, 393 struct list_head *item, 394 struct xfs_btree_cur **state) 395 { 396 struct xfs_bmap_intent *bi = bi_entry(item); 397 int error; 398 399 error = xfs_bmap_finish_one(tp, bi); 400 if (!error && bi->bi_bmap.br_blockcount > 0) { 401 ASSERT(bi->bi_type == XFS_BMAP_UNMAP); 402 return -EAGAIN; 403 } 404 405 xfs_bmap_update_cancel_item(item); 406 return error; 407 } 408 409 /* Abort all pending BUIs. */ 410 STATIC void 411 xfs_bmap_update_abort_intent( 412 struct xfs_log_item *intent) 413 { 414 xfs_bui_release(BUI_ITEM(intent)); 415 } 416 417 /* Is this recovered BUI ok? */ 418 static inline bool 419 xfs_bui_validate( 420 struct xfs_mount *mp, 421 struct xfs_bui_log_item *buip) 422 { 423 struct xfs_map_extent *map; 424 425 /* Only one mapping operation per BUI... */ 426 if (buip->bui_format.bui_nextents != XFS_BUI_MAX_FAST_EXTENTS) 427 return false; 428 429 map = &buip->bui_format.bui_extents[0]; 430 431 if (map->me_flags & ~XFS_BMAP_EXTENT_FLAGS) 432 return false; 433 434 switch (map->me_flags & XFS_BMAP_EXTENT_TYPE_MASK) { 435 case XFS_BMAP_MAP: 436 case XFS_BMAP_UNMAP: 437 break; 438 default: 439 return false; 440 } 441 442 if (!xfs_verify_ino(mp, map->me_owner)) 443 return false; 444 445 if (!xfs_verify_fileext(mp, map->me_startoff, map->me_len)) 446 return false; 447 448 if (map->me_flags & XFS_BMAP_EXTENT_REALTIME) 449 return xfs_verify_rtbext(mp, map->me_startblock, map->me_len); 450 451 return xfs_verify_fsbext(mp, map->me_startblock, map->me_len); 452 } 453 454 static inline struct xfs_bmap_intent * 455 xfs_bui_recover_work( 456 struct xfs_mount *mp, 457 struct xfs_defer_pending *dfp, 458 struct xfs_inode **ipp, 459 struct xfs_map_extent *map) 460 { 461 struct xfs_bmap_intent *bi; 462 int error; 463 464 error = xlog_recover_iget(mp, map->me_owner, ipp); 465 if (error) 466 return ERR_PTR(error); 467 468 bi = kmem_cache_zalloc(xfs_bmap_intent_cache, 469 GFP_KERNEL | __GFP_NOFAIL); 470 bi->bi_whichfork = (map->me_flags & XFS_BMAP_EXTENT_ATTR_FORK) ? 471 XFS_ATTR_FORK : XFS_DATA_FORK; 472 bi->bi_type = map->me_flags & XFS_BMAP_EXTENT_TYPE_MASK; 473 bi->bi_bmap.br_startblock = map->me_startblock; 474 bi->bi_bmap.br_startoff = map->me_startoff; 475 bi->bi_bmap.br_blockcount = map->me_len; 476 bi->bi_bmap.br_state = (map->me_flags & XFS_BMAP_EXTENT_UNWRITTEN) ? 477 XFS_EXT_UNWRITTEN : XFS_EXT_NORM; 478 bi->bi_owner = *ipp; 479 xfs_bmap_update_get_group(mp, bi); 480 481 /* see xfs_bmap_defer_add for details */ 482 if (bi->bi_type == XFS_BMAP_MAP) 483 bi->bi_owner->i_delayed_blks += bi->bi_bmap.br_blockcount; 484 xfs_defer_add_item(dfp, &bi->bi_list); 485 return bi; 486 } 487 488 /* 489 * Process a bmap update intent item that was recovered from the log. 490 * We need to update some inode's bmbt. 491 */ 492 STATIC int 493 xfs_bmap_recover_work( 494 struct xfs_defer_pending *dfp, 495 struct list_head *capture_list) 496 { 497 struct xfs_trans_res resv; 498 struct xfs_log_item *lip = dfp->dfp_intent; 499 struct xfs_bui_log_item *buip = BUI_ITEM(lip); 500 struct xfs_trans *tp; 501 struct xfs_inode *ip = NULL; 502 struct xfs_mount *mp = lip->li_log->l_mp; 503 struct xfs_map_extent *map; 504 struct xfs_bmap_intent *work; 505 int iext_delta; 506 int error = 0; 507 508 if (!xfs_bui_validate(mp, buip)) { 509 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, 510 &buip->bui_format, sizeof(buip->bui_format)); 511 return -EFSCORRUPTED; 512 } 513 514 map = &buip->bui_format.bui_extents[0]; 515 work = xfs_bui_recover_work(mp, dfp, &ip, map); 516 if (IS_ERR(work)) 517 return PTR_ERR(work); 518 519 /* Allocate transaction and do the work. */ 520 resv = xlog_recover_resv(&M_RES(mp)->tr_itruncate); 521 error = xfs_trans_alloc(mp, &resv, 522 XFS_EXTENTADD_SPACE_RES(mp, XFS_DATA_FORK), 0, 0, &tp); 523 if (error) 524 goto err_rele; 525 526 xfs_ilock(ip, XFS_ILOCK_EXCL); 527 xfs_trans_ijoin(tp, ip, 0); 528 529 if (!!(map->me_flags & XFS_BMAP_EXTENT_REALTIME) != 530 xfs_ifork_is_realtime(ip, work->bi_whichfork)) { 531 error = -EFSCORRUPTED; 532 goto err_cancel; 533 } 534 535 if (work->bi_type == XFS_BMAP_MAP) 536 iext_delta = XFS_IEXT_ADD_NOSPLIT_CNT; 537 else 538 iext_delta = XFS_IEXT_PUNCH_HOLE_CNT; 539 540 error = xfs_iext_count_extend(tp, ip, work->bi_whichfork, iext_delta); 541 if (error) 542 goto err_cancel; 543 544 error = xlog_recover_finish_intent(tp, dfp); 545 if (error == -EFSCORRUPTED) 546 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, 547 &buip->bui_format, sizeof(buip->bui_format)); 548 if (error) 549 goto err_cancel; 550 551 /* 552 * Commit transaction, which frees the transaction and saves the inode 553 * for later replay activities. 554 */ 555 error = xfs_defer_ops_capture_and_commit(tp, capture_list); 556 if (error) 557 goto err_unlock; 558 559 xfs_iunlock(ip, XFS_ILOCK_EXCL); 560 xfs_irele(ip); 561 return 0; 562 563 err_cancel: 564 xfs_trans_cancel(tp); 565 err_unlock: 566 xfs_iunlock(ip, XFS_ILOCK_EXCL); 567 err_rele: 568 xfs_irele(ip); 569 return error; 570 } 571 572 /* Relog an intent item to push the log tail forward. */ 573 static struct xfs_log_item * 574 xfs_bmap_relog_intent( 575 struct xfs_trans *tp, 576 struct xfs_log_item *intent, 577 struct xfs_log_item *done_item) 578 { 579 struct xfs_bui_log_item *buip; 580 struct xfs_map_extent *map; 581 unsigned int count; 582 583 count = BUI_ITEM(intent)->bui_format.bui_nextents; 584 map = BUI_ITEM(intent)->bui_format.bui_extents; 585 586 buip = xfs_bui_init(tp->t_mountp); 587 memcpy(buip->bui_format.bui_extents, map, count * sizeof(*map)); 588 atomic_set(&buip->bui_next_extent, count); 589 590 return &buip->bui_item; 591 } 592 593 const struct xfs_defer_op_type xfs_bmap_update_defer_type = { 594 .name = "bmap", 595 .max_items = XFS_BUI_MAX_FAST_EXTENTS, 596 .create_intent = xfs_bmap_update_create_intent, 597 .abort_intent = xfs_bmap_update_abort_intent, 598 .create_done = xfs_bmap_update_create_done, 599 .finish_item = xfs_bmap_update_finish_item, 600 .cancel_item = xfs_bmap_update_cancel_item, 601 .recover_work = xfs_bmap_recover_work, 602 .relog_intent = xfs_bmap_relog_intent, 603 }; 604 605 STATIC bool 606 xfs_bui_item_match( 607 struct xfs_log_item *lip, 608 uint64_t intent_id) 609 { 610 return BUI_ITEM(lip)->bui_format.bui_id == intent_id; 611 } 612 613 static const struct xfs_item_ops xfs_bui_item_ops = { 614 .flags = XFS_ITEM_INTENT, 615 .iop_size = xfs_bui_item_size, 616 .iop_format = xfs_bui_item_format, 617 .iop_unpin = xfs_bui_item_unpin, 618 .iop_release = xfs_bui_item_release, 619 .iop_match = xfs_bui_item_match, 620 }; 621 622 static inline void 623 xfs_bui_copy_format( 624 struct xfs_bui_log_format *dst, 625 const struct xfs_bui_log_format *src) 626 { 627 unsigned int i; 628 629 memcpy(dst, src, offsetof(struct xfs_bui_log_format, bui_extents)); 630 631 for (i = 0; i < src->bui_nextents; i++) 632 memcpy(&dst->bui_extents[i], &src->bui_extents[i], 633 sizeof(struct xfs_map_extent)); 634 } 635 636 /* 637 * This routine is called to create an in-core extent bmap update 638 * item from the bui format structure which was logged on disk. 639 * It allocates an in-core bui, copies the extents from the format 640 * structure into it, and adds the bui to the AIL with the given 641 * LSN. 642 */ 643 STATIC int 644 xlog_recover_bui_commit_pass2( 645 struct xlog *log, 646 struct list_head *buffer_list, 647 struct xlog_recover_item *item, 648 xfs_lsn_t lsn) 649 { 650 struct xfs_mount *mp = log->l_mp; 651 struct xfs_bui_log_item *buip; 652 struct xfs_bui_log_format *bui_formatp; 653 size_t len; 654 655 bui_formatp = item->ri_buf[0].iov_base; 656 657 if (item->ri_buf[0].iov_len < xfs_bui_log_format_sizeof(0)) { 658 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, 659 item->ri_buf[0].iov_base, item->ri_buf[0].iov_len); 660 return -EFSCORRUPTED; 661 } 662 663 if (bui_formatp->bui_nextents != XFS_BUI_MAX_FAST_EXTENTS) { 664 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, 665 item->ri_buf[0].iov_base, item->ri_buf[0].iov_len); 666 return -EFSCORRUPTED; 667 } 668 669 len = xfs_bui_log_format_sizeof(bui_formatp->bui_nextents); 670 if (item->ri_buf[0].iov_len != len) { 671 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, mp, 672 item->ri_buf[0].iov_base, item->ri_buf[0].iov_len); 673 return -EFSCORRUPTED; 674 } 675 676 buip = xfs_bui_init(mp); 677 xfs_bui_copy_format(&buip->bui_format, bui_formatp); 678 atomic_set(&buip->bui_next_extent, bui_formatp->bui_nextents); 679 680 xlog_recover_intent_item(log, &buip->bui_item, lsn, 681 &xfs_bmap_update_defer_type); 682 return 0; 683 } 684 685 const struct xlog_recover_item_ops xlog_bui_item_ops = { 686 .item_type = XFS_LI_BUI, 687 .commit_pass2 = xlog_recover_bui_commit_pass2, 688 }; 689 690 /* 691 * This routine is called when an BUD format structure is found in a committed 692 * transaction in the log. Its purpose is to cancel the corresponding BUI if it 693 * was still in the log. To do this it searches the AIL for the BUI with an id 694 * equal to that in the BUD format structure. If we find it we drop the BUD 695 * reference, which removes the BUI from the AIL and frees it. 696 */ 697 STATIC int 698 xlog_recover_bud_commit_pass2( 699 struct xlog *log, 700 struct list_head *buffer_list, 701 struct xlog_recover_item *item, 702 xfs_lsn_t lsn) 703 { 704 struct xfs_bud_log_format *bud_formatp; 705 706 bud_formatp = item->ri_buf[0].iov_base; 707 if (item->ri_buf[0].iov_len != sizeof(struct xfs_bud_log_format)) { 708 XFS_CORRUPTION_ERROR(__func__, XFS_ERRLEVEL_LOW, log->l_mp, 709 item->ri_buf[0].iov_base, item->ri_buf[0].iov_len); 710 return -EFSCORRUPTED; 711 } 712 713 xlog_recover_release_intent(log, XFS_LI_BUI, bud_formatp->bud_bui_id); 714 return 0; 715 } 716 717 const struct xlog_recover_item_ops xlog_bud_item_ops = { 718 .item_type = XFS_LI_BUD, 719 .commit_pass2 = xlog_recover_bud_commit_pass2, 720 }; 721