2 * JFFS2 -- Journalling Flash File System, Version 2.
4 * Copyright © 2001-2007 Red Hat, Inc.
6 * Created by David Woodhouse <dwmw2@infradead.org>
8 * For licensing information, see the file 'LICENCE' in this directory.
12 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
14 #include <linux/kernel.h>
15 #include <linux/sched.h>
16 #include <linux/slab.h>
17 #include <linux/mtd/mtd.h>
18 #include <linux/pagemap.h>
19 #include <linux/crc32.h>
20 #include <linux/compiler.h>
25 #define DEFAULT_EMPTY_SCAN_SIZE 256
27 #define noisy_printk(noise, fmt, ...) \
30 pr_notice(fmt, ##__VA_ARGS__); \
33 pr_notice("Further such events for this erase block will not be printed\n"); \
37 static uint32_t pseudo_random
;
39 static int jffs2_scan_eraseblock (struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
40 unsigned char *buf
, uint32_t buf_size
, struct jffs2_summary
*s
);
42 /* These helper functions _must_ increase ofs and also do the dirty/used space accounting.
43 * Returning an error will abort the mount - bad checksums etc. should just mark the space
46 static int jffs2_scan_inode_node(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
47 struct jffs2_raw_inode
*ri
, uint32_t ofs
, struct jffs2_summary
*s
);
48 static int jffs2_scan_dirent_node(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
49 struct jffs2_raw_dirent
*rd
, uint32_t ofs
, struct jffs2_summary
*s
);
51 static inline int min_free(struct jffs2_sb_info
*c
)
53 uint32_t min
= 2 * sizeof(struct jffs2_raw_inode
);
54 #ifdef CONFIG_JFFS2_FS_WRITEBUFFER
55 if (!jffs2_can_mark_obsolete(c
) && min
< c
->wbuf_pagesize
)
56 return c
->wbuf_pagesize
;
62 static inline uint32_t EMPTY_SCAN_SIZE(uint32_t sector_size
) {
63 if (sector_size
< DEFAULT_EMPTY_SCAN_SIZE
)
66 return DEFAULT_EMPTY_SCAN_SIZE
;
69 static int file_dirty(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
)
73 if ((ret
= jffs2_prealloc_raw_node_refs(c
, jeb
, 1)))
75 if ((ret
= jffs2_scan_dirty_space(c
, jeb
, jeb
->free_size
)))
77 /* Turned wasted size into dirty, since we apparently
78 think it's recoverable now. */
79 jeb
->dirty_size
+= jeb
->wasted_size
;
80 c
->dirty_size
+= jeb
->wasted_size
;
81 c
->wasted_size
-= jeb
->wasted_size
;
83 if (VERYDIRTY(c
, jeb
->dirty_size
)) {
84 list_add(&jeb
->list
, &c
->very_dirty_list
);
86 list_add(&jeb
->list
, &c
->dirty_list
);
91 int jffs2_scan_medium(struct jffs2_sb_info
*c
)
94 uint32_t empty_blocks
= 0, bad_blocks
= 0;
95 unsigned char *flashbuf
= NULL
;
96 uint32_t buf_size
= 0;
97 struct jffs2_summary
*s
= NULL
; /* summary info collected by the scan process */
99 size_t pointlen
, try_size
;
101 ret
= mtd_point(c
->mtd
, 0, c
->mtd
->size
, &pointlen
,
102 (void **)&flashbuf
, NULL
);
103 if (!ret
&& pointlen
< c
->mtd
->size
) {
104 /* Don't muck about if it won't let us point to the whole flash */
105 jffs2_dbg(1, "MTD point returned len too short: 0x%zx\n",
107 mtd_unpoint(c
->mtd
, 0, pointlen
);
110 if (ret
&& ret
!= -EOPNOTSUPP
)
111 jffs2_dbg(1, "MTD point failed %d\n", ret
);
114 /* For NAND it's quicker to read a whole eraseblock at a time,
116 if (jffs2_cleanmarker_oob(c
))
117 try_size
= c
->sector_size
;
119 try_size
= PAGE_SIZE
;
121 jffs2_dbg(1, "Trying to allocate readbuf of %zu "
122 "bytes\n", try_size
);
124 flashbuf
= mtd_kmalloc_up_to(c
->mtd
, &try_size
);
128 jffs2_dbg(1, "Allocated readbuf of %zu bytes\n",
131 buf_size
= (uint32_t)try_size
;
134 if (jffs2_sum_active()) {
135 s
= kzalloc(sizeof(struct jffs2_summary
), GFP_KERNEL
);
137 JFFS2_WARNING("Can't allocate memory for summary\n");
143 for (i
=0; i
<c
->nr_blocks
; i
++) {
144 struct jffs2_eraseblock
*jeb
= &c
->blocks
[i
];
148 /* reset summary info for next eraseblock scan */
149 jffs2_sum_reset_collected(s
);
151 ret
= jffs2_scan_eraseblock(c
, jeb
, buf_size
?flashbuf
:(flashbuf
+jeb
->offset
),
157 jffs2_dbg_acct_paranoia_check_nolock(c
, jeb
);
159 /* Now decide which list to put it on */
161 case BLK_STATE_ALLFF
:
163 * Empty block. Since we can't be sure it
164 * was entirely erased, we just queue it for erase
165 * again. It will be marked as such when the erase
166 * is complete. Meanwhile we still count it as empty
170 list_add(&jeb
->list
, &c
->erase_pending_list
);
171 c
->nr_erasing_blocks
++;
174 case BLK_STATE_CLEANMARKER
:
175 /* Only a CLEANMARKER node is valid */
176 if (!jeb
->dirty_size
) {
177 /* It's actually free */
178 list_add(&jeb
->list
, &c
->free_list
);
182 jffs2_dbg(1, "Adding all-dirty block at 0x%08x to erase_pending_list\n",
184 list_add(&jeb
->list
, &c
->erase_pending_list
);
185 c
->nr_erasing_blocks
++;
189 case BLK_STATE_CLEAN
:
190 /* Full (or almost full) of clean data. Clean list */
191 list_add(&jeb
->list
, &c
->clean_list
);
194 case BLK_STATE_PARTDIRTY
:
195 /* Some data, but not full. Dirty list. */
196 /* We want to remember the block with most free space
197 and stick it in the 'nextblock' position to start writing to it. */
198 if (jeb
->free_size
> min_free(c
) &&
199 (!c
->nextblock
|| c
->nextblock
->free_size
< jeb
->free_size
)) {
200 /* Better candidate for the next writes to go to */
202 ret
= file_dirty(c
, c
->nextblock
);
205 /* deleting summary information of the old nextblock */
206 jffs2_sum_reset_collected(c
->summary
);
208 /* update collected summary information for the current nextblock */
209 jffs2_sum_move_collected(c
, s
);
210 jffs2_dbg(1, "%s(): new nextblock = 0x%08x\n",
211 __func__
, jeb
->offset
);
214 ret
= file_dirty(c
, jeb
);
220 case BLK_STATE_ALLDIRTY
:
221 /* Nothing valid - not even a clean marker. Needs erasing. */
222 /* For now we just put it on the erasing list. We'll start the erases later */
223 jffs2_dbg(1, "Erase block at 0x%08x is not formatted. It will be erased\n",
225 list_add(&jeb
->list
, &c
->erase_pending_list
);
226 c
->nr_erasing_blocks
++;
229 case BLK_STATE_BADBLOCK
:
230 jffs2_dbg(1, "Block at 0x%08x is bad\n", jeb
->offset
);
231 list_add(&jeb
->list
, &c
->bad_list
);
232 c
->bad_size
+= c
->sector_size
;
233 c
->free_size
-= c
->sector_size
;
237 pr_warn("%s(): unknown block state\n", __func__
);
242 /* Nextblock dirty is always seen as wasted, because we cannot recycle it now */
243 if (c
->nextblock
&& (c
->nextblock
->dirty_size
)) {
244 c
->nextblock
->wasted_size
+= c
->nextblock
->dirty_size
;
245 c
->wasted_size
+= c
->nextblock
->dirty_size
;
246 c
->dirty_size
-= c
->nextblock
->dirty_size
;
247 c
->nextblock
->dirty_size
= 0;
249 #ifdef CONFIG_JFFS2_FS_WRITEBUFFER
250 if (!jffs2_can_mark_obsolete(c
) && c
->wbuf_pagesize
&& c
->nextblock
&& (c
->nextblock
->free_size
% c
->wbuf_pagesize
)) {
251 /* If we're going to start writing into a block which already
252 contains data, and the end of the data isn't page-aligned,
253 skip a little and align it. */
255 uint32_t skip
= c
->nextblock
->free_size
% c
->wbuf_pagesize
;
257 jffs2_dbg(1, "%s(): Skipping %d bytes in nextblock to ensure page alignment\n",
259 jffs2_prealloc_raw_node_refs(c
, c
->nextblock
, 1);
260 jffs2_scan_dirty_space(c
, c
->nextblock
, skip
);
263 if (c
->nr_erasing_blocks
) {
264 if ( !c
->used_size
&& ((c
->nr_free_blocks
+empty_blocks
+bad_blocks
)!= c
->nr_blocks
|| bad_blocks
== c
->nr_blocks
) ) {
265 pr_notice("Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes\n");
266 pr_notice("empty_blocks %d, bad_blocks %d, c->nr_blocks %d\n",
267 empty_blocks
, bad_blocks
, c
->nr_blocks
);
271 spin_lock(&c
->erase_completion_lock
);
272 jffs2_garbage_collect_trigger(c
);
273 spin_unlock(&c
->erase_completion_lock
);
281 mtd_unpoint(c
->mtd
, 0, c
->mtd
->size
);
287 static int jffs2_fill_scan_buf(struct jffs2_sb_info
*c
, void *buf
,
288 uint32_t ofs
, uint32_t len
)
293 ret
= jffs2_flash_read(c
, ofs
, len
, &retlen
, buf
);
295 jffs2_dbg(1, "mtd->read(0x%x bytes from 0x%x) returned %d\n",
300 jffs2_dbg(1, "Read at 0x%x gave only 0x%zx bytes\n",
307 int jffs2_scan_classify_jeb(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
)
309 if ((jeb
->used_size
+ jeb
->unchecked_size
) == PAD(c
->cleanmarker_size
) && !jeb
->dirty_size
310 && (!jeb
->first_node
|| !ref_next(jeb
->first_node
)) )
311 return BLK_STATE_CLEANMARKER
;
313 /* move blocks with max 4 byte dirty space to cleanlist */
314 else if (!ISDIRTY(c
->sector_size
- (jeb
->used_size
+ jeb
->unchecked_size
))) {
315 c
->dirty_size
-= jeb
->dirty_size
;
316 c
->wasted_size
+= jeb
->dirty_size
;
317 jeb
->wasted_size
+= jeb
->dirty_size
;
319 return BLK_STATE_CLEAN
;
320 } else if (jeb
->used_size
|| jeb
->unchecked_size
)
321 return BLK_STATE_PARTDIRTY
;
323 return BLK_STATE_ALLDIRTY
;
326 #ifdef CONFIG_JFFS2_FS_XATTR
327 static int jffs2_scan_xattr_node(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
328 struct jffs2_raw_xattr
*rx
, uint32_t ofs
,
329 struct jffs2_summary
*s
)
331 struct jffs2_xattr_datum
*xd
;
332 uint32_t xid
, version
, totlen
, crc
;
335 crc
= crc32(0, rx
, sizeof(struct jffs2_raw_xattr
) - 4);
336 if (crc
!= je32_to_cpu(rx
->node_crc
)) {
337 JFFS2_WARNING("node CRC failed at %#08x, read=%#08x, calc=%#08x\n",
338 ofs
, je32_to_cpu(rx
->node_crc
), crc
);
339 if ((err
= jffs2_scan_dirty_space(c
, jeb
, je32_to_cpu(rx
->totlen
))))
344 xid
= je32_to_cpu(rx
->xid
);
345 version
= je32_to_cpu(rx
->version
);
347 totlen
= PAD(sizeof(struct jffs2_raw_xattr
)
348 + rx
->name_len
+ 1 + je16_to_cpu(rx
->value_len
));
349 if (totlen
!= je32_to_cpu(rx
->totlen
)) {
350 JFFS2_WARNING("node length mismatch at %#08x, read=%u, calc=%u\n",
351 ofs
, je32_to_cpu(rx
->totlen
), totlen
);
352 if ((err
= jffs2_scan_dirty_space(c
, jeb
, je32_to_cpu(rx
->totlen
))))
357 xd
= jffs2_setup_xattr_datum(c
, xid
, version
);
361 if (xd
->version
> version
) {
362 struct jffs2_raw_node_ref
*raw
363 = jffs2_link_node_ref(c
, jeb
, ofs
| REF_PRISTINE
, totlen
, NULL
);
364 raw
->next_in_ino
= xd
->node
->next_in_ino
;
365 xd
->node
->next_in_ino
= raw
;
367 xd
->version
= version
;
368 xd
->xprefix
= rx
->xprefix
;
369 xd
->name_len
= rx
->name_len
;
370 xd
->value_len
= je16_to_cpu(rx
->value_len
);
371 xd
->data_crc
= je32_to_cpu(rx
->data_crc
);
373 jffs2_link_node_ref(c
, jeb
, ofs
| REF_PRISTINE
, totlen
, (void *)xd
);
376 if (jffs2_sum_active())
377 jffs2_sum_add_xattr_mem(s
, rx
, ofs
- jeb
->offset
);
378 dbg_xattr("scanning xdatum at %#08x (xid=%u, version=%u)\n",
379 ofs
, xd
->xid
, xd
->version
);
383 static int jffs2_scan_xref_node(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
384 struct jffs2_raw_xref
*rr
, uint32_t ofs
,
385 struct jffs2_summary
*s
)
387 struct jffs2_xattr_ref
*ref
;
391 crc
= crc32(0, rr
, sizeof(*rr
) - 4);
392 if (crc
!= je32_to_cpu(rr
->node_crc
)) {
393 JFFS2_WARNING("node CRC failed at %#08x, read=%#08x, calc=%#08x\n",
394 ofs
, je32_to_cpu(rr
->node_crc
), crc
);
395 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(rr
->totlen
)))))
400 if (PAD(sizeof(struct jffs2_raw_xref
)) != je32_to_cpu(rr
->totlen
)) {
401 JFFS2_WARNING("node length mismatch at %#08x, read=%u, calc=%zd\n",
402 ofs
, je32_to_cpu(rr
->totlen
),
403 PAD(sizeof(struct jffs2_raw_xref
)));
404 if ((err
= jffs2_scan_dirty_space(c
, jeb
, je32_to_cpu(rr
->totlen
))))
409 ref
= jffs2_alloc_xattr_ref();
413 /* BEFORE jffs2_build_xattr_subsystem() called,
414 * and AFTER xattr_ref is marked as a dead xref,
415 * ref->xid is used to store 32bit xid, xd is not used
416 * ref->ino is used to store 32bit inode-number, ic is not used
417 * Thoes variables are declared as union, thus using those
418 * are exclusive. In a similar way, ref->next is temporarily
419 * used to chain all xattr_ref object. It's re-chained to
420 * jffs2_inode_cache in jffs2_build_xattr_subsystem() correctly.
422 ref
->ino
= je32_to_cpu(rr
->ino
);
423 ref
->xid
= je32_to_cpu(rr
->xid
);
424 ref
->xseqno
= je32_to_cpu(rr
->xseqno
);
425 if (ref
->xseqno
> c
->highest_xseqno
)
426 c
->highest_xseqno
= (ref
->xseqno
& ~XREF_DELETE_MARKER
);
427 ref
->next
= c
->xref_temp
;
430 jffs2_link_node_ref(c
, jeb
, ofs
| REF_PRISTINE
, PAD(je32_to_cpu(rr
->totlen
)), (void *)ref
);
432 if (jffs2_sum_active())
433 jffs2_sum_add_xref_mem(s
, rr
, ofs
- jeb
->offset
);
434 dbg_xattr("scan xref at %#08x (xid=%u, ino=%u)\n",
435 ofs
, ref
->xid
, ref
->ino
);
440 /* Called with 'buf_size == 0' if buf is in fact a pointer _directly_ into
441 the flash, XIP-style */
442 static int jffs2_scan_eraseblock (struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
443 unsigned char *buf
, uint32_t buf_size
, struct jffs2_summary
*s
) {
444 struct jffs2_unknown_node
*node
;
445 struct jffs2_unknown_node crcnode
;
446 uint32_t ofs
, prevofs
, max_ofs
;
447 uint32_t hdr_crc
, buf_ofs
, buf_len
;
452 #ifdef CONFIG_JFFS2_FS_WRITEBUFFER
453 int cleanmarkerfound
= 0;
457 prevofs
= jeb
->offset
- 1;
459 jffs2_dbg(1, "%s(): Scanning block at 0x%x\n", __func__
, ofs
);
461 #ifdef CONFIG_JFFS2_FS_WRITEBUFFER
462 if (jffs2_cleanmarker_oob(c
)) {
465 if (mtd_block_isbad(c
->mtd
, jeb
->offset
))
466 return BLK_STATE_BADBLOCK
;
468 ret
= jffs2_check_nand_cleanmarker(c
, jeb
);
469 jffs2_dbg(2, "jffs_check_nand_cleanmarker returned %d\n", ret
);
471 /* Even if it's not found, we still scan to see
472 if the block is empty. We use this information
473 to decide whether to erase it or not. */
475 case 0: cleanmarkerfound
= 1; break;
482 if (jffs2_sum_active()) {
483 struct jffs2_sum_marker
*sm
;
488 /* XIP case. Just look, point at the summary if it's there */
489 sm
= (void *)buf
+ c
->sector_size
- sizeof(*sm
);
490 if (je32_to_cpu(sm
->magic
) == JFFS2_SUM_MAGIC
) {
491 sumptr
= buf
+ je32_to_cpu(sm
->offset
);
492 sumlen
= c
->sector_size
- je32_to_cpu(sm
->offset
);
495 /* If NAND flash, read a whole page of it. Else just the end */
496 if (c
->wbuf_pagesize
)
497 buf_len
= c
->wbuf_pagesize
;
499 buf_len
= sizeof(*sm
);
501 /* Read as much as we want into the _end_ of the preallocated buffer */
502 err
= jffs2_fill_scan_buf(c
, buf
+ buf_size
- buf_len
,
503 jeb
->offset
+ c
->sector_size
- buf_len
,
508 sm
= (void *)buf
+ buf_size
- sizeof(*sm
);
509 if (je32_to_cpu(sm
->magic
) == JFFS2_SUM_MAGIC
) {
510 sumlen
= c
->sector_size
- je32_to_cpu(sm
->offset
);
511 sumptr
= buf
+ buf_size
- sumlen
;
513 /* sm->offset maybe wrong but MAGIC maybe right */
514 if (sumlen
> c
->sector_size
)
517 /* Now, make sure the summary itself is available */
518 if (sumlen
> buf_size
) {
519 /* Need to kmalloc for this. */
520 sumptr
= kmalloc(sumlen
, GFP_KERNEL
);
523 memcpy(sumptr
+ sumlen
- buf_len
, buf
+ buf_size
- buf_len
, buf_len
);
525 if (buf_len
< sumlen
) {
526 /* Need to read more so that the entire summary node is present */
527 err
= jffs2_fill_scan_buf(c
, sumptr
,
528 jeb
->offset
+ c
->sector_size
- sumlen
,
538 err
= jffs2_sum_scan_sumnode(c
, jeb
, sumptr
, sumlen
, &pseudo_random
);
540 if (buf_size
&& sumlen
> buf_size
)
542 /* If it returns with a real error, bail.
543 If it returns positive, that's a block classification
544 (i.e. BLK_STATE_xxx) so return that too.
545 If it returns zero, fall through to full scan. */
552 buf_ofs
= jeb
->offset
;
555 /* This is the XIP case -- we're reading _directly_ from the flash chip */
556 buf_len
= c
->sector_size
;
558 buf_len
= EMPTY_SCAN_SIZE(c
->sector_size
);
559 err
= jffs2_fill_scan_buf(c
, buf
, buf_ofs
, buf_len
);
564 /* We temporarily use 'ofs' as a pointer into the buffer/jeb */
566 max_ofs
= EMPTY_SCAN_SIZE(c
->sector_size
);
567 /* Scan only EMPTY_SCAN_SIZE of 0xFF before declaring it's empty */
568 while(ofs
< max_ofs
&& *(uint32_t *)(&buf
[ofs
]) == 0xFFFFFFFF)
571 if (ofs
== max_ofs
) {
572 #ifdef CONFIG_JFFS2_FS_WRITEBUFFER
573 if (jffs2_cleanmarker_oob(c
)) {
574 /* scan oob, take care of cleanmarker */
575 int ret
= jffs2_check_oob_empty(c
, jeb
, cleanmarkerfound
);
576 jffs2_dbg(2, "jffs2_check_oob_empty returned %d\n",
579 case 0: return cleanmarkerfound
? BLK_STATE_CLEANMARKER
: BLK_STATE_ALLFF
;
580 case 1: return BLK_STATE_ALLDIRTY
;
585 jffs2_dbg(1, "Block at 0x%08x is empty (erased)\n",
587 if (c
->cleanmarker_size
== 0)
588 return BLK_STATE_CLEANMARKER
; /* don't bother with re-erase */
590 return BLK_STATE_ALLFF
; /* OK to erase if all blocks are like this */
593 jffs2_dbg(1, "Free space at %08x ends at %08x\n", jeb
->offset
,
595 if ((err
= jffs2_prealloc_raw_node_refs(c
, jeb
, 1)))
597 if ((err
= jffs2_scan_dirty_space(c
, jeb
, ofs
)))
601 /* Now ofs is a complete physical flash offset as it always was... */
606 dbg_summary("no summary found in jeb 0x%08x. Apply original scan.\n",jeb
->offset
);
609 while(ofs
< jeb
->offset
+ c
->sector_size
) {
611 jffs2_dbg_acct_paranoia_check_nolock(c
, jeb
);
613 /* Make sure there are node refs available for use */
614 err
= jffs2_prealloc_raw_node_refs(c
, jeb
, 2);
621 pr_warn("Eep. ofs 0x%08x not word-aligned!\n", ofs
);
625 if (ofs
== prevofs
) {
626 pr_warn("ofs 0x%08x has already been seen. Skipping\n",
628 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
635 if (jeb
->offset
+ c
->sector_size
< ofs
+ sizeof(*node
)) {
636 jffs2_dbg(1, "Fewer than %zd bytes left to end of block. (%x+%x<%x+%zx) Not reading\n",
637 sizeof(struct jffs2_unknown_node
),
638 jeb
->offset
, c
->sector_size
, ofs
,
640 if ((err
= jffs2_scan_dirty_space(c
, jeb
, (jeb
->offset
+ c
->sector_size
)-ofs
)))
645 if (buf_ofs
+ buf_len
< ofs
+ sizeof(*node
)) {
646 buf_len
= min_t(uint32_t, buf_size
, jeb
->offset
+ c
->sector_size
- ofs
);
647 jffs2_dbg(1, "Fewer than %zd bytes (node header) left to end of buf. Reading 0x%x at 0x%08x\n",
648 sizeof(struct jffs2_unknown_node
),
650 err
= jffs2_fill_scan_buf(c
, buf
, ofs
, buf_len
);
656 node
= (struct jffs2_unknown_node
*)&buf
[ofs
-buf_ofs
];
658 if (*(uint32_t *)(&buf
[ofs
-buf_ofs
]) == 0xffffffff) {
660 uint32_t empty_start
, scan_end
;
664 scan_end
= min_t(uint32_t, EMPTY_SCAN_SIZE(c
->sector_size
)/8, buf_len
);
666 jffs2_dbg(1, "Found empty flash at 0x%08x\n", ofs
);
668 inbuf_ofs
= ofs
- buf_ofs
;
669 while (inbuf_ofs
< scan_end
) {
670 if (unlikely(*(uint32_t *)(&buf
[inbuf_ofs
]) != 0xffffffff)) {
671 pr_warn("Empty flash at 0x%08x ends at 0x%08x\n",
673 if ((err
= jffs2_scan_dirty_space(c
, jeb
, ofs
-empty_start
)))
682 jffs2_dbg(1, "Empty flash to end of buffer at 0x%08x\n",
685 /* If we're only checking the beginning of a block with a cleanmarker,
687 if (buf_ofs
== jeb
->offset
&& jeb
->used_size
== PAD(c
->cleanmarker_size
) &&
688 c
->cleanmarker_size
&& !jeb
->dirty_size
&& !ref_next(jeb
->first_node
)) {
689 jffs2_dbg(1, "%d bytes at start of block seems clean... assuming all clean\n",
690 EMPTY_SCAN_SIZE(c
->sector_size
));
691 return BLK_STATE_CLEANMARKER
;
693 if (!buf_size
&& (scan_end
!= buf_len
)) {/* XIP/point case */
698 /* See how much more there is to read in this eraseblock... */
699 buf_len
= min_t(uint32_t, buf_size
, jeb
->offset
+ c
->sector_size
- ofs
);
701 /* No more to read. Break out of main loop without marking
702 this range of empty space as dirty (because it's not) */
703 jffs2_dbg(1, "Empty flash at %08x runs to end of block. Treating as free_space\n",
707 /* point never reaches here */
709 jffs2_dbg(1, "Reading another 0x%x at 0x%08x\n",
711 err
= jffs2_fill_scan_buf(c
, buf
, ofs
, buf_len
);
718 if (ofs
== jeb
->offset
&& je16_to_cpu(node
->magic
) == KSAMTIB_CIGAM_2SFFJ
) {
719 pr_warn("Magic bitmask is backwards at offset 0x%08x. Wrong endian filesystem?\n",
721 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
726 if (je16_to_cpu(node
->magic
) == JFFS2_DIRTY_BITMASK
) {
727 jffs2_dbg(1, "Dirty bitmask at 0x%08x\n", ofs
);
728 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
733 if (je16_to_cpu(node
->magic
) == JFFS2_OLD_MAGIC_BITMASK
) {
734 pr_warn("Old JFFS2 bitmask found at 0x%08x\n", ofs
);
735 pr_warn("You cannot use older JFFS2 filesystems with newer kernels\n");
736 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
741 if (je16_to_cpu(node
->magic
) != JFFS2_MAGIC_BITMASK
) {
742 /* OK. We're out of possibilities. Whinge and move on */
743 noisy_printk(&noise
, "%s(): Magic bitmask 0x%04x not found at 0x%08x: 0x%04x instead\n",
745 JFFS2_MAGIC_BITMASK
, ofs
,
746 je16_to_cpu(node
->magic
));
747 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
752 /* We seem to have a node of sorts. Check the CRC */
753 crcnode
.magic
= node
->magic
;
754 crcnode
.nodetype
= cpu_to_je16( je16_to_cpu(node
->nodetype
) | JFFS2_NODE_ACCURATE
);
755 crcnode
.totlen
= node
->totlen
;
756 hdr_crc
= crc32(0, &crcnode
, sizeof(crcnode
)-4);
758 if (hdr_crc
!= je32_to_cpu(node
->hdr_crc
)) {
759 noisy_printk(&noise
, "%s(): Node at 0x%08x {0x%04x, 0x%04x, 0x%08x) has invalid CRC 0x%08x (calculated 0x%08x)\n",
761 ofs
, je16_to_cpu(node
->magic
),
762 je16_to_cpu(node
->nodetype
),
763 je32_to_cpu(node
->totlen
),
764 je32_to_cpu(node
->hdr_crc
),
766 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
772 if (ofs
+ je32_to_cpu(node
->totlen
) > jeb
->offset
+ c
->sector_size
) {
773 /* Eep. Node goes over the end of the erase block. */
774 pr_warn("Node at 0x%08x with length 0x%08x would run over the end of the erase block\n",
775 ofs
, je32_to_cpu(node
->totlen
));
776 pr_warn("Perhaps the file system was created with the wrong erase size?\n");
777 if ((err
= jffs2_scan_dirty_space(c
, jeb
, 4)))
783 if (!(je16_to_cpu(node
->nodetype
) & JFFS2_NODE_ACCURATE
)) {
784 /* Wheee. This is an obsoleted node */
785 jffs2_dbg(2, "Node at 0x%08x is obsolete. Skipping\n",
787 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(node
->totlen
)))))
789 ofs
+= PAD(je32_to_cpu(node
->totlen
));
793 switch(je16_to_cpu(node
->nodetype
)) {
794 case JFFS2_NODETYPE_INODE
:
795 if (buf_ofs
+ buf_len
< ofs
+ sizeof(struct jffs2_raw_inode
)) {
796 buf_len
= min_t(uint32_t, buf_size
, jeb
->offset
+ c
->sector_size
- ofs
);
797 jffs2_dbg(1, "Fewer than %zd bytes (inode node) left to end of buf. Reading 0x%x at 0x%08x\n",
798 sizeof(struct jffs2_raw_inode
),
800 err
= jffs2_fill_scan_buf(c
, buf
, ofs
, buf_len
);
806 err
= jffs2_scan_inode_node(c
, jeb
, (void *)node
, ofs
, s
);
808 ofs
+= PAD(je32_to_cpu(node
->totlen
));
811 case JFFS2_NODETYPE_DIRENT
:
812 if (buf_ofs
+ buf_len
< ofs
+ je32_to_cpu(node
->totlen
)) {
813 buf_len
= min_t(uint32_t, buf_size
, jeb
->offset
+ c
->sector_size
- ofs
);
814 jffs2_dbg(1, "Fewer than %d bytes (dirent node) left to end of buf. Reading 0x%x at 0x%08x\n",
815 je32_to_cpu(node
->totlen
), buf_len
,
817 err
= jffs2_fill_scan_buf(c
, buf
, ofs
, buf_len
);
823 err
= jffs2_scan_dirent_node(c
, jeb
, (void *)node
, ofs
, s
);
825 ofs
+= PAD(je32_to_cpu(node
->totlen
));
828 #ifdef CONFIG_JFFS2_FS_XATTR
829 case JFFS2_NODETYPE_XATTR
:
830 if (buf_ofs
+ buf_len
< ofs
+ je32_to_cpu(node
->totlen
)) {
831 buf_len
= min_t(uint32_t, buf_size
, jeb
->offset
+ c
->sector_size
- ofs
);
832 jffs2_dbg(1, "Fewer than %d bytes (xattr node) left to end of buf. Reading 0x%x at 0x%08x\n",
833 je32_to_cpu(node
->totlen
), buf_len
,
835 err
= jffs2_fill_scan_buf(c
, buf
, ofs
, buf_len
);
841 err
= jffs2_scan_xattr_node(c
, jeb
, (void *)node
, ofs
, s
);
844 ofs
+= PAD(je32_to_cpu(node
->totlen
));
846 case JFFS2_NODETYPE_XREF
:
847 if (buf_ofs
+ buf_len
< ofs
+ je32_to_cpu(node
->totlen
)) {
848 buf_len
= min_t(uint32_t, buf_size
, jeb
->offset
+ c
->sector_size
- ofs
);
849 jffs2_dbg(1, "Fewer than %d bytes (xref node) left to end of buf. Reading 0x%x at 0x%08x\n",
850 je32_to_cpu(node
->totlen
), buf_len
,
852 err
= jffs2_fill_scan_buf(c
, buf
, ofs
, buf_len
);
858 err
= jffs2_scan_xref_node(c
, jeb
, (void *)node
, ofs
, s
);
861 ofs
+= PAD(je32_to_cpu(node
->totlen
));
863 #endif /* CONFIG_JFFS2_FS_XATTR */
865 case JFFS2_NODETYPE_CLEANMARKER
:
866 jffs2_dbg(1, "CLEANMARKER node found at 0x%08x\n", ofs
);
867 if (je32_to_cpu(node
->totlen
) != c
->cleanmarker_size
) {
868 pr_notice("CLEANMARKER node found at 0x%08x has totlen 0x%x != normal 0x%x\n",
869 ofs
, je32_to_cpu(node
->totlen
),
870 c
->cleanmarker_size
);
871 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(sizeof(struct jffs2_unknown_node
)))))
873 ofs
+= PAD(sizeof(struct jffs2_unknown_node
));
874 } else if (jeb
->first_node
) {
875 pr_notice("CLEANMARKER node found at 0x%08x, not first node in block (0x%08x)\n",
877 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(sizeof(struct jffs2_unknown_node
)))))
879 ofs
+= PAD(sizeof(struct jffs2_unknown_node
));
881 jffs2_link_node_ref(c
, jeb
, ofs
| REF_NORMAL
, c
->cleanmarker_size
, NULL
);
883 ofs
+= PAD(c
->cleanmarker_size
);
887 case JFFS2_NODETYPE_PADDING
:
888 if (jffs2_sum_active())
889 jffs2_sum_add_padding_mem(s
, je32_to_cpu(node
->totlen
));
890 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(node
->totlen
)))))
892 ofs
+= PAD(je32_to_cpu(node
->totlen
));
896 switch (je16_to_cpu(node
->nodetype
) & JFFS2_COMPAT_MASK
) {
897 case JFFS2_FEATURE_ROCOMPAT
:
898 pr_notice("Read-only compatible feature node (0x%04x) found at offset 0x%08x\n",
899 je16_to_cpu(node
->nodetype
), ofs
);
900 c
->flags
|= JFFS2_SB_FLAG_RO
;
901 if (!(jffs2_is_readonly(c
)))
903 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(node
->totlen
)))))
905 ofs
+= PAD(je32_to_cpu(node
->totlen
));
908 case JFFS2_FEATURE_INCOMPAT
:
909 pr_notice("Incompatible feature node (0x%04x) found at offset 0x%08x\n",
910 je16_to_cpu(node
->nodetype
), ofs
);
913 case JFFS2_FEATURE_RWCOMPAT_DELETE
:
914 jffs2_dbg(1, "Unknown but compatible feature node (0x%04x) found at offset 0x%08x\n",
915 je16_to_cpu(node
->nodetype
), ofs
);
916 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(node
->totlen
)))))
918 ofs
+= PAD(je32_to_cpu(node
->totlen
));
921 case JFFS2_FEATURE_RWCOMPAT_COPY
: {
922 jffs2_dbg(1, "Unknown but compatible feature node (0x%04x) found at offset 0x%08x\n",
923 je16_to_cpu(node
->nodetype
), ofs
);
925 jffs2_link_node_ref(c
, jeb
, ofs
| REF_PRISTINE
, PAD(je32_to_cpu(node
->totlen
)), NULL
);
927 /* We can't summarise nodes we don't grok */
928 jffs2_sum_disable_collecting(s
);
929 ofs
+= PAD(je32_to_cpu(node
->totlen
));
936 if (jffs2_sum_active()) {
937 if (PAD(s
->sum_size
+ JFFS2_SUMMARY_FRAME_SIZE
) > jeb
->free_size
) {
938 dbg_summary("There is not enough space for "
939 "summary information, disabling for this jeb!\n");
940 jffs2_sum_disable_collecting(s
);
944 jffs2_dbg(1, "Block at 0x%08x: free 0x%08x, dirty 0x%08x, unchecked 0x%08x, used 0x%08x, wasted 0x%08x\n",
945 jeb
->offset
, jeb
->free_size
, jeb
->dirty_size
,
946 jeb
->unchecked_size
, jeb
->used_size
, jeb
->wasted_size
);
948 /* mark_node_obsolete can add to wasted !! */
949 if (jeb
->wasted_size
) {
950 jeb
->dirty_size
+= jeb
->wasted_size
;
951 c
->dirty_size
+= jeb
->wasted_size
;
952 c
->wasted_size
-= jeb
->wasted_size
;
953 jeb
->wasted_size
= 0;
956 return jffs2_scan_classify_jeb(c
, jeb
);
959 struct jffs2_inode_cache
*jffs2_scan_make_ino_cache(struct jffs2_sb_info
*c
, uint32_t ino
)
961 struct jffs2_inode_cache
*ic
;
963 ic
= jffs2_get_ino_cache(c
, ino
);
967 if (ino
> c
->highest_ino
)
968 c
->highest_ino
= ino
;
970 ic
= jffs2_alloc_inode_cache();
972 pr_notice("%s(): allocation of inode cache failed\n", __func__
);
975 memset(ic
, 0, sizeof(*ic
));
978 ic
->nodes
= (void *)ic
;
979 jffs2_add_ino_cache(c
, ic
);
985 static int jffs2_scan_inode_node(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
986 struct jffs2_raw_inode
*ri
, uint32_t ofs
, struct jffs2_summary
*s
)
988 struct jffs2_inode_cache
*ic
;
989 uint32_t crc
, ino
= je32_to_cpu(ri
->ino
);
991 jffs2_dbg(1, "%s(): Node at 0x%08x\n", __func__
, ofs
);
993 /* We do very little here now. Just check the ino# to which we should attribute
994 this node; we can do all the CRC checking etc. later. There's a tradeoff here --
995 we used to scan the flash once only, reading everything we want from it into
996 memory, then building all our in-core data structures and freeing the extra
997 information. Now we allow the first part of the mount to complete a lot quicker,
998 but we have to go _back_ to the flash in order to finish the CRC checking, etc.
999 Which means that the _full_ amount of time to get to proper write mode with GC
1000 operational may actually be _longer_ than before. Sucks to be me. */
1002 /* Check the node CRC in any case. */
1003 crc
= crc32(0, ri
, sizeof(*ri
)-8);
1004 if (crc
!= je32_to_cpu(ri
->node_crc
)) {
1005 pr_notice("%s(): CRC failed on node at 0x%08x: Read 0x%08x, calculated 0x%08x\n",
1006 __func__
, ofs
, je32_to_cpu(ri
->node_crc
), crc
);
1008 * We believe totlen because the CRC on the node
1009 * _header_ was OK, just the node itself failed.
1011 return jffs2_scan_dirty_space(c
, jeb
,
1012 PAD(je32_to_cpu(ri
->totlen
)));
1015 ic
= jffs2_get_ino_cache(c
, ino
);
1017 ic
= jffs2_scan_make_ino_cache(c
, ino
);
1022 /* Wheee. It worked */
1023 jffs2_link_node_ref(c
, jeb
, ofs
| REF_UNCHECKED
, PAD(je32_to_cpu(ri
->totlen
)), ic
);
1025 jffs2_dbg(1, "Node is ino #%u, version %d. Range 0x%x-0x%x\n",
1026 je32_to_cpu(ri
->ino
), je32_to_cpu(ri
->version
),
1027 je32_to_cpu(ri
->offset
),
1028 je32_to_cpu(ri
->offset
)+je32_to_cpu(ri
->dsize
));
1030 pseudo_random
+= je32_to_cpu(ri
->version
);
1032 if (jffs2_sum_active()) {
1033 jffs2_sum_add_inode_mem(s
, ri
, ofs
- jeb
->offset
);
1039 static int jffs2_scan_dirent_node(struct jffs2_sb_info
*c
, struct jffs2_eraseblock
*jeb
,
1040 struct jffs2_raw_dirent
*rd
, uint32_t ofs
, struct jffs2_summary
*s
)
1042 struct jffs2_full_dirent
*fd
;
1043 struct jffs2_inode_cache
*ic
;
1044 uint32_t checkedlen
;
1048 jffs2_dbg(1, "%s(): Node at 0x%08x\n", __func__
, ofs
);
1050 /* We don't get here unless the node is still valid, so we don't have to
1051 mask in the ACCURATE bit any more. */
1052 crc
= crc32(0, rd
, sizeof(*rd
)-8);
1054 if (crc
!= je32_to_cpu(rd
->node_crc
)) {
1055 pr_notice("%s(): Node CRC failed on node at 0x%08x: Read 0x%08x, calculated 0x%08x\n",
1056 __func__
, ofs
, je32_to_cpu(rd
->node_crc
), crc
);
1057 /* We believe totlen because the CRC on the node _header_ was OK, just the node itself failed. */
1058 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(rd
->totlen
)))))
1063 pseudo_random
+= je32_to_cpu(rd
->version
);
1065 /* Should never happen. Did. (OLPC trac #4184)*/
1066 checkedlen
= strnlen(rd
->name
, rd
->nsize
);
1067 if (checkedlen
< rd
->nsize
) {
1068 pr_err("Dirent at %08x has zeroes in name. Truncating to %d chars\n",
1071 fd
= jffs2_alloc_full_dirent(checkedlen
+1);
1075 memcpy(&fd
->name
, rd
->name
, checkedlen
);
1076 fd
->name
[checkedlen
] = 0;
1078 crc
= crc32(0, fd
->name
, rd
->nsize
);
1079 if (crc
!= je32_to_cpu(rd
->name_crc
)) {
1080 pr_notice("%s(): Name CRC failed on node at 0x%08x: Read 0x%08x, calculated 0x%08x\n",
1081 __func__
, ofs
, je32_to_cpu(rd
->name_crc
), crc
);
1082 jffs2_dbg(1, "Name for which CRC failed is (now) '%s', ino #%d\n",
1083 fd
->name
, je32_to_cpu(rd
->ino
));
1084 jffs2_free_full_dirent(fd
);
1085 /* FIXME: Why do we believe totlen? */
1086 /* We believe totlen because the CRC on the node _header_ was OK, just the name failed. */
1087 if ((err
= jffs2_scan_dirty_space(c
, jeb
, PAD(je32_to_cpu(rd
->totlen
)))))
1091 ic
= jffs2_scan_make_ino_cache(c
, je32_to_cpu(rd
->pino
));
1093 jffs2_free_full_dirent(fd
);
1097 fd
->raw
= jffs2_link_node_ref(c
, jeb
, ofs
| dirent_node_state(rd
),
1098 PAD(je32_to_cpu(rd
->totlen
)), ic
);
1101 fd
->version
= je32_to_cpu(rd
->version
);
1102 fd
->ino
= je32_to_cpu(rd
->ino
);
1103 fd
->nhash
= full_name_hash(NULL
, fd
->name
, checkedlen
);
1104 fd
->type
= rd
->type
;
1105 jffs2_add_fd_to_list(c
, fd
, &ic
->scan_dents
);
1107 if (jffs2_sum_active()) {
1108 jffs2_sum_add_dirent_mem(s
, rd
, ofs
- jeb
->offset
);
1114 static int count_list(struct list_head
*l
)
1117 struct list_head
*tmp
;
1119 list_for_each(tmp
, l
) {
1125 /* Note: This breaks if list_empty(head). I don't care. You
1126 might, if you copy this code and use it elsewhere :) */
1127 static void rotate_list(struct list_head
*head
, uint32_t count
)
1129 struct list_head
*n
= head
->next
;
1138 void jffs2_rotate_lists(struct jffs2_sb_info
*c
)
1143 x
= count_list(&c
->clean_list
);
1145 rotateby
= pseudo_random
% x
;
1146 rotate_list((&c
->clean_list
), rotateby
);
1149 x
= count_list(&c
->very_dirty_list
);
1151 rotateby
= pseudo_random
% x
;
1152 rotate_list((&c
->very_dirty_list
), rotateby
);
1155 x
= count_list(&c
->dirty_list
);
1157 rotateby
= pseudo_random
% x
;
1158 rotate_list((&c
->dirty_list
), rotateby
);
1161 x
= count_list(&c
->erasable_list
);
1163 rotateby
= pseudo_random
% x
;
1164 rotate_list((&c
->erasable_list
), rotateby
);
1167 if (c
->nr_erasing_blocks
) {
1168 rotateby
= pseudo_random
% c
->nr_erasing_blocks
;
1169 rotate_list((&c
->erase_pending_list
), rotateby
);
1172 if (c
->nr_free_blocks
) {
1173 rotateby
= pseudo_random
% c
->nr_free_blocks
;
1174 rotate_list((&c
->free_list
), rotateby
);