@@ -69,9 +69,53 @@ struct ext2_group_desc * ext2_get_group_desc(struct super_block * sb,
6969 return desc + offset ;
7070}
7171
72+ static int ext2_valid_block_bitmap (struct super_block * sb ,
73+ struct ext2_group_desc * desc ,
74+ unsigned int block_group ,
75+ struct buffer_head * bh )
76+ {
77+ ext2_grpblk_t offset ;
78+ ext2_grpblk_t next_zero_bit ;
79+ ext2_fsblk_t bitmap_blk ;
80+ ext2_fsblk_t group_first_block ;
81+
82+ group_first_block = ext2_group_first_block_no (sb , block_group );
83+
84+ /* check whether block bitmap block number is set */
85+ bitmap_blk = le32_to_cpu (desc -> bg_block_bitmap );
86+ offset = bitmap_blk - group_first_block ;
87+ if (!ext2_test_bit (offset , bh -> b_data ))
88+ /* bad block bitmap */
89+ goto err_out ;
90+
91+ /* check whether the inode bitmap block number is set */
92+ bitmap_blk = le32_to_cpu (desc -> bg_inode_bitmap );
93+ offset = bitmap_blk - group_first_block ;
94+ if (!ext2_test_bit (offset , bh -> b_data ))
95+ /* bad block bitmap */
96+ goto err_out ;
97+
98+ /* check whether the inode table block number is set */
99+ bitmap_blk = le32_to_cpu (desc -> bg_inode_table );
100+ offset = bitmap_blk - group_first_block ;
101+ next_zero_bit = ext2_find_next_zero_bit (bh -> b_data ,
102+ offset + EXT2_SB (sb )-> s_itb_per_group ,
103+ offset );
104+ if (next_zero_bit >= offset + EXT2_SB (sb )-> s_itb_per_group )
105+ /* good bitmap for inode tables */
106+ return 1 ;
107+
108+ err_out :
109+ ext2_error (sb , __FUNCTION__ ,
110+ "Invalid block bitmap - "
111+ "block_group = %d, block = %lu" ,
112+ block_group , bitmap_blk );
113+ return 0 ;
114+ }
115+
72116/*
73- * Read the bitmap for a given block_group, reading into the specified
74- * slot in the superblock's bitmap cache.
117+ * Read the bitmap for a given block_group,and validate the
118+ * bits for block/inode/inode tables are set in the bitmaps
75119 *
76120 * Return buffer_head on success or NULL in case of failure.
77121 */
@@ -80,17 +124,36 @@ read_block_bitmap(struct super_block *sb, unsigned int block_group)
80124{
81125 struct ext2_group_desc * desc ;
82126 struct buffer_head * bh = NULL ;
83-
84- desc = ext2_get_group_desc (sb , block_group , NULL );
127+ ext2_fsblk_t bitmap_blk ;
128+
129+ desc = ext2_get_group_desc (sb , block_group , NULL );
85130 if (!desc )
86- goto error_out ;
87- bh = sb_bread (sb , le32_to_cpu (desc -> bg_block_bitmap ));
88- if (!bh )
89- ext2_error (sb , "read_block_bitmap" ,
131+ return NULL ;
132+ bitmap_blk = le32_to_cpu (desc -> bg_block_bitmap );
133+ bh = sb_getblk (sb , bitmap_blk );
134+ if (unlikely (!bh )) {
135+ ext2_error (sb , __FUNCTION__ ,
90136 "Cannot read block bitmap - "
91137 "block_group = %d, block_bitmap = %u" ,
92138 block_group , le32_to_cpu (desc -> bg_block_bitmap ));
93- error_out :
139+ return NULL ;
140+ }
141+ if (likely (bh_uptodate_or_lock (bh )))
142+ return bh ;
143+
144+ if (bh_submit_read (bh ) < 0 ) {
145+ brelse (bh );
146+ ext2_error (sb , __FUNCTION__ ,
147+ "Cannot read block bitmap - "
148+ "block_group = %d, block_bitmap = %u" ,
149+ block_group , le32_to_cpu (desc -> bg_block_bitmap ));
150+ return NULL ;
151+ }
152+ if (!ext2_valid_block_bitmap (sb , desc , block_group , bh )) {
153+ brelse (bh );
154+ return NULL ;
155+ }
156+
94157 return bh ;
95158}
96159
0 commit comments