1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #ifndef SQL_RECOVERY_H_
6 #define SQL_RECOVERY_H_
8 #include "base/basictypes.h"
10 #include "sql/connection.h"
18 // Recovery module for sql/. The basic idea is to create a fresh
19 // database and populate it with the recovered contents of the
20 // original database. If recovery is successful, the recovered
21 // database is backed up over the original database. If recovery is
22 // not successful, the original database is razed. In either case,
23 // the original handle is poisoned so that operations on the stack do
24 // not accidentally disrupt the restored data.
27 // scoped_ptr<sql::Recovery> r =
28 // sql::Recovery::Begin(orig_db, orig_db_path);
30 // if (r.db()->Execute(kCreateSchemaSql) &&
31 // r.db()->Execute(kCopyDataFromOrigSql)) {
32 // sql::Recovery::Recovered(r.Pass());
37 // If Recovered() is not called, then RazeAndClose() is called on
40 class SQL_EXPORT Recovery
{
44 // Begin the recovery process by opening a temporary database handle
45 // and attach the existing database to it at "corrupt". To prevent
46 // deadlock, all transactions on |connection| are rolled back.
48 // Returns NULL in case of failure, with no cleanup done on the
49 // original connection (except for breaking the transactions). The
50 // caller should Raze() or otherwise cleanup as appropriate.
52 // TODO(shess): Later versions of SQLite allow extracting the path
53 // from the connection.
54 // TODO(shess): Allow specifying the connection point?
55 static scoped_ptr
<Recovery
> Begin(
56 Connection
* connection
,
57 const base::FilePath
& db_path
) WARN_UNUSED_RESULT
;
59 // Mark recovery completed by replicating the recovery database over
60 // the original database, then closing the recovery database. The
61 // original database handle is poisoned, causing future calls
62 // against it to fail.
64 // If Recovered() is not called, the destructor will call
67 // TODO(shess): At this time, this function can fail while leaving
68 // the original database intact. Figure out which failure cases
69 // should go to RazeAndClose() instead.
70 static bool Recovered(scoped_ptr
<Recovery
> r
) WARN_UNUSED_RESULT
;
72 // Indicate that the database is unrecoverable. The original
73 // database is razed, and the handle poisoned.
74 static void Unrecoverable(scoped_ptr
<Recovery
> r
);
76 // When initially developing recovery code, sometimes the possible
77 // database states are not well-understood without further
78 // diagnostics. Abandon recovery but do not raze the original
80 // NOTE(shess): Only call this when adding recovery support. In the
81 // steady state, all databases should progress to recovered or razed.
82 static void Rollback(scoped_ptr
<Recovery
> r
);
84 // Handle to the temporary recovery database.
85 sql::Connection
* db() { return &recover_db_
; }
88 explicit Recovery(Connection
* connection
);
90 // Setup the recovery database handle for Begin(). Returns false in
91 // case anything failed.
92 bool Init(const base::FilePath
& db_path
) WARN_UNUSED_RESULT
;
94 // Copy the recovered database over the original database.
95 bool Backup() WARN_UNUSED_RESULT
;
97 // Close the recovery database, and poison the original handle.
98 // |raze| controls whether the original database is razed or just
104 void Shutdown(Disposition raze
);
106 Connection
* db_
; // Original database connection.
107 Connection recover_db_
; // Recovery connection.
109 DISALLOW_COPY_AND_ASSIGN(Recovery
);
114 #endif // SQL_RECOVERY_H_