mirror of
https://github.com/reactos/reactos.git
synced 2024-08-20 02:13:29 +00:00
2033 lines
50 KiB
C
2033 lines
50 KiB
C
/*++
|
|
|
|
Copyright (c) 1989-2000 Microsoft Corporation
|
|
|
|
Module Name:
|
|
|
|
VerfySup.c
|
|
|
|
Abstract:
|
|
|
|
This module implements the Fat Verify volume and fcb/dcb support
|
|
routines
|
|
|
|
|
|
--*/
|
|
|
|
#include "fatprocs.h"
|
|
|
|
//
|
|
// The Bug check file id for this module
|
|
//
|
|
|
|
#define BugCheckFileId (FAT_BUG_CHECK_VERFYSUP)
|
|
|
|
//
|
|
// The Debug trace level for this module
|
|
//
|
|
|
|
#define Dbg (DEBUG_TRACE_VERFYSUP)
|
|
|
|
//
|
|
// Local procedure prototypes
|
|
//
|
|
|
|
VOID
|
|
FatResetFcb (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PFCB Fcb
|
|
);
|
|
|
|
BOOLEAN
|
|
FatMatchFileSize (
|
|
__in PIRP_CONTEXT IrpContext,
|
|
__in PDIRENT Dirent,
|
|
__in PFCB Fcb
|
|
);
|
|
|
|
_Requires_lock_held_(_Global_critical_region_)
|
|
VOID
|
|
FatDetermineAndMarkFcbCondition (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PFCB Fcb
|
|
);
|
|
|
|
WORKER_THREAD_ROUTINE FatDeferredCleanVolume;
|
|
|
|
VOID
|
|
NTAPI
|
|
FatDeferredCleanVolume (
|
|
_In_ PVOID Parameter
|
|
);
|
|
|
|
IO_COMPLETION_ROUTINE FatMarkVolumeCompletionRoutine;
|
|
|
|
NTSTATUS
|
|
NTAPI
|
|
FatMarkVolumeCompletionRoutine(
|
|
_In_ PDEVICE_OBJECT DeviceObject,
|
|
_In_ PIRP Irp,
|
|
_In_reads_opt_(_Inexpressible_("varies")) PVOID Contxt
|
|
);
|
|
|
|
#ifdef ALLOC_PRAGMA
|
|
#pragma alloc_text(PAGE, FatCheckDirtyBit)
|
|
#pragma alloc_text(PAGE, FatVerifyOperationIsLegal)
|
|
#pragma alloc_text(PAGE, FatDeferredCleanVolume)
|
|
#pragma alloc_text(PAGE, FatMatchFileSize)
|
|
#pragma alloc_text(PAGE, FatDetermineAndMarkFcbCondition)
|
|
#pragma alloc_text(PAGE, FatQuickVerifyVcb)
|
|
#pragma alloc_text(PAGE, FatPerformVerify)
|
|
#pragma alloc_text(PAGE, FatMarkFcbCondition)
|
|
#pragma alloc_text(PAGE, FatResetFcb)
|
|
#pragma alloc_text(PAGE, FatVerifyVcb)
|
|
#pragma alloc_text(PAGE, FatVerifyFcb)
|
|
#endif
|
|
|
|
|
|
VOID
|
|
FatMarkFcbCondition (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PFCB Fcb,
|
|
IN FCB_CONDITION FcbCondition,
|
|
IN BOOLEAN Recursive
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routines marks the entire Fcb/Dcb structure from Fcb down with
|
|
FcbCondition.
|
|
|
|
Arguments:
|
|
|
|
Fcb - Supplies the Fcb/Dcb being marked
|
|
|
|
FcbCondition - Supplies the setting to use for the Fcb Condition
|
|
|
|
Recursive - Specifies whether this condition should be applied to
|
|
all children (see the case where we are invalidating a live volume
|
|
for a case where this is now desireable).
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PAGED_CODE();
|
|
|
|
DebugTrace(+1, Dbg, "FatMarkFcbCondition, Fcb = %p\n", Fcb );
|
|
|
|
//
|
|
// If we are marking this Fcb something other than Good, we will need
|
|
// to have the Vcb exclusive.
|
|
//
|
|
|
|
NT_ASSERT( FcbCondition != FcbNeedsToBeVerified ? TRUE :
|
|
FatVcbAcquiredExclusive(IrpContext, Fcb->Vcb) );
|
|
|
|
//
|
|
// If this is a PagingFile it has to be good unless media underneath is
|
|
// removable. The "removable" check was added specifically for ReadyBoost,
|
|
// which opens its cache file on a removable device as a paging file and
|
|
// relies on the file system to validate its mapping information after a
|
|
// power transition.
|
|
//
|
|
|
|
if (!FlagOn(Fcb->Vcb->VcbState, VCB_STATE_FLAG_REMOVABLE_MEDIA) &&
|
|
FlagOn(Fcb->FcbState, FCB_STATE_PAGING_FILE)) {
|
|
|
|
Fcb->FcbCondition = FcbGood;
|
|
return;
|
|
}
|
|
|
|
//
|
|
// Update the condition of the Fcb.
|
|
//
|
|
|
|
Fcb->FcbCondition = FcbCondition;
|
|
|
|
DebugTrace(0, Dbg, "MarkFcb: %wZ\n", &Fcb->FullFileName);
|
|
|
|
//
|
|
// This FastIo flag is based on FcbCondition, so update it now. This only
|
|
// applies to regular FCBs, of course.
|
|
//
|
|
|
|
if (Fcb->Header.NodeTypeCode == FAT_NTC_FCB) {
|
|
|
|
Fcb->Header.IsFastIoPossible = FatIsFastIoPossible( Fcb );
|
|
}
|
|
|
|
if (FcbCondition == FcbNeedsToBeVerified) {
|
|
FatResetFcb( IrpContext, Fcb );
|
|
}
|
|
|
|
//
|
|
// Now if we marked NeedsVerify or Bad a directory then we also need to
|
|
// go and mark all of our children with the same condition.
|
|
//
|
|
|
|
if ( ((FcbCondition == FcbNeedsToBeVerified) ||
|
|
(FcbCondition == FcbBad)) &&
|
|
Recursive &&
|
|
((Fcb->Header.NodeTypeCode == FAT_NTC_DCB) ||
|
|
(Fcb->Header.NodeTypeCode == FAT_NTC_ROOT_DCB)) ) {
|
|
|
|
PFCB OriginalFcb = Fcb;
|
|
|
|
while ( (Fcb = FatGetNextFcbTopDown(IrpContext, Fcb, OriginalFcb)) != NULL ) {
|
|
|
|
DebugTrace(0, Dbg, "MarkFcb: %wZ\n", &Fcb->FullFileName);
|
|
|
|
Fcb->FcbCondition = FcbCondition;
|
|
|
|
//
|
|
// We already know that FastIo is not possible since we are propagating
|
|
// a parent's bad/verify flag down the tree - IO to the children must
|
|
// take the long route for now.
|
|
//
|
|
|
|
Fcb->Header.IsFastIoPossible = FastIoIsNotPossible;
|
|
|
|
//
|
|
// Leave all the Fcbs in a condition to be verified.
|
|
//
|
|
|
|
if (FcbCondition == FcbNeedsToBeVerified) {
|
|
FatResetFcb( IrpContext, Fcb );
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
DebugTrace(-1, Dbg, "FatMarkFcbCondition -> VOID\n", 0);
|
|
|
|
return;
|
|
}
|
|
|
|
BOOLEAN
|
|
FatMarkDevForVerifyIfVcbMounted(
|
|
IN PVCB Vcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine checks to see if the specified Vcb is currently mounted on
|
|
the device or not. If it is, it sets the verify flag on the device, if
|
|
not then the state is noted in the Vcb.
|
|
|
|
Arguments:
|
|
|
|
Vcb - This is the volume to check.
|
|
|
|
Return Value:
|
|
|
|
TRUE if the device has been marked for verify here, FALSE otherwise.
|
|
|
|
--*/
|
|
{
|
|
BOOLEAN Marked = FALSE;
|
|
KIRQL SavedIrql;
|
|
|
|
IoAcquireVpbSpinLock( &SavedIrql );
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( push )
|
|
#pragma prefast( disable: 28175, "touching Vpb is ok for a filesystem" )
|
|
#endif
|
|
|
|
if (Vcb->Vpb->RealDevice->Vpb == Vcb->Vpb) {
|
|
|
|
SetFlag( Vcb->Vpb->RealDevice->Flags, DO_VERIFY_VOLUME);
|
|
Marked = TRUE;
|
|
}
|
|
else {
|
|
|
|
//
|
|
// Flag this to avoid the VPB spinlock in future passes.
|
|
//
|
|
|
|
SetFlag( Vcb->VcbState, VCB_STATE_VPB_NOT_ON_DEVICE);
|
|
}
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( pop )
|
|
#endif
|
|
|
|
IoReleaseVpbSpinLock( SavedIrql );
|
|
|
|
return Marked;
|
|
}
|
|
|
|
|
|
VOID
|
|
FatVerifyVcb (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PVCB Vcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routines verifies that the Vcb still denotes a valid Volume
|
|
If the Vcb is bad it raises an error condition.
|
|
|
|
Arguments:
|
|
|
|
Vcb - Supplies the Vcb being verified
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
BOOLEAN DevMarkedForVerify;
|
|
|
|
PAGED_CODE();
|
|
|
|
DebugTrace(+1, Dbg, "FatVerifyVcb, Vcb = %p\n", Vcb );
|
|
|
|
//
|
|
// If the verify volume flag in the device object is set
|
|
// this means the media has potentially changed.
|
|
//
|
|
// Note that we only force this ping for create operations.
|
|
// For others we take a sporting chance. If in the end we
|
|
// have to physically access the disk, the right thing will happen.
|
|
//
|
|
|
|
DevMarkedForVerify = BooleanFlagOn(Vcb->Vpb->RealDevice->Flags, DO_VERIFY_VOLUME);
|
|
|
|
//
|
|
// We ALWAYS force CREATE requests on unmounted volumes through the
|
|
// verify path. These requests could have been in limbo between
|
|
// IoCheckMountedVpb and us, when a verify/mount took place and caused
|
|
// a completely different fs/volume to be mounted. In this case the
|
|
// checks above may not have caught the condition, since we may already
|
|
// have verified (wrong volume) and decided that we have nothing to do.
|
|
// We want the requests to be re routed to the currently mounted volume,
|
|
// since they were directed at the 'drive', not our volume. So we take
|
|
// the verify path for synchronisation, and the request will eventually
|
|
// be bounced back to IO with STATUS_REPARSE by our verify handler.
|
|
//
|
|
|
|
if (!DevMarkedForVerify &&
|
|
(IrpContext->MajorFunction == IRP_MJ_CREATE) &&
|
|
(IrpContext->OriginatingIrp != NULL)) {
|
|
|
|
PIO_STACK_LOCATION IrpSp = IoGetCurrentIrpStackLocation( IrpContext->OriginatingIrp);
|
|
|
|
if ((IrpSp->FileObject->RelatedFileObject == NULL) &&
|
|
(Vcb->VcbCondition == VcbNotMounted)) {
|
|
|
|
DevMarkedForVerify = TRUE;
|
|
}
|
|
}
|
|
|
|
//
|
|
// Raise any error condition otherwise.
|
|
//
|
|
|
|
if (DevMarkedForVerify) {
|
|
|
|
DebugTrace(0, Dbg, "The Vcb needs to be verified\n", 0);
|
|
|
|
IoSetHardErrorOrVerifyDevice( IrpContext->OriginatingIrp,
|
|
Vcb->Vpb->RealDevice );
|
|
|
|
FatNormalizeAndRaiseStatus( IrpContext, STATUS_VERIFY_REQUIRED );
|
|
}
|
|
|
|
//
|
|
// Check the operation is legal for current Vcb state.
|
|
//
|
|
|
|
FatQuickVerifyVcb( IrpContext, Vcb );
|
|
|
|
DebugTrace(-1, Dbg, "FatVerifyVcb -> VOID\n", 0);
|
|
}
|
|
|
|
|
|
_Requires_lock_held_(_Global_critical_region_)
|
|
VOID
|
|
FatVerifyFcb (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PFCB Fcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routines verifies that the Fcb still denotes the same file.
|
|
If the Fcb is bad it raises a error condition.
|
|
|
|
Arguments:
|
|
|
|
Fcb - Supplies the Fcb being verified
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PFCB CurrentFcb;
|
|
|
|
PAGED_CODE();
|
|
|
|
DebugTrace(+1, Dbg, "FatVerifyFcb, Vcb = %p\n", Fcb );
|
|
|
|
//
|
|
// Always refuse operations on dismounted volumes.
|
|
//
|
|
|
|
if (FlagOn( Fcb->Vcb->VcbState, VCB_STATE_FLAG_VOLUME_DISMOUNTED )) {
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_VOLUME_DISMOUNTED );
|
|
}
|
|
|
|
//
|
|
// If this is the Fcb of a deleted dirent or our parent is deleted,
|
|
// no-op this call with the hope that the caller will do the right thing.
|
|
// The only caller we really have to worry about is the AdvanceOnly
|
|
// callback for setting valid data length from Cc, this will happen after
|
|
// cleanup (and file deletion), just before the SCM is ripped down.
|
|
//
|
|
|
|
if (IsFileDeleted( IrpContext, Fcb ) ||
|
|
((NodeType(Fcb) != FAT_NTC_ROOT_DCB) &&
|
|
IsFileDeleted( IrpContext, Fcb->ParentDcb ))) {
|
|
|
|
return;
|
|
}
|
|
|
|
//
|
|
// If we are not in the process of doing a verify,
|
|
// first do a quick spot check on the Vcb.
|
|
//
|
|
|
|
if ( Fcb->Vcb->VerifyThread != KeGetCurrentThread() ) {
|
|
|
|
FatQuickVerifyVcb( IrpContext, Fcb->Vcb );
|
|
}
|
|
|
|
//
|
|
// Now based on the condition of the Fcb we'll either return
|
|
// immediately to the caller, raise a condition, or do some work
|
|
// to verify the Fcb.
|
|
//
|
|
|
|
switch (Fcb->FcbCondition) {
|
|
|
|
case FcbGood:
|
|
|
|
DebugTrace(0, Dbg, "The Fcb is good\n", 0);
|
|
break;
|
|
|
|
case FcbBad:
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_FILE_INVALID );
|
|
break;
|
|
|
|
case FcbNeedsToBeVerified:
|
|
|
|
//
|
|
// We loop here checking our ancestors until we hit an Fcb which
|
|
// is either good or bad.
|
|
//
|
|
|
|
CurrentFcb = Fcb;
|
|
|
|
while (CurrentFcb->FcbCondition == FcbNeedsToBeVerified) {
|
|
|
|
FatDetermineAndMarkFcbCondition(IrpContext, CurrentFcb);
|
|
|
|
//
|
|
// If this Fcb didn't make it, or it was the Root Dcb, exit
|
|
// the loop now, else continue with out parent.
|
|
//
|
|
|
|
if ( (CurrentFcb->FcbCondition != FcbGood) ||
|
|
(NodeType(CurrentFcb) == FAT_NTC_ROOT_DCB) ) {
|
|
|
|
break;
|
|
}
|
|
|
|
CurrentFcb = CurrentFcb->ParentDcb;
|
|
}
|
|
|
|
//
|
|
// Now we can just look at ourselves to see how we did.
|
|
//
|
|
|
|
if (Fcb->FcbCondition != FcbGood) {
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_FILE_INVALID );
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
DebugDump("Invalid FcbCondition\n", 0, Fcb);
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( suppress:28159, "things are seriously wrong if we get here" )
|
|
#endif
|
|
FatBugCheck( Fcb->FcbCondition, 0, 0 );
|
|
}
|
|
|
|
DebugTrace(-1, Dbg, "FatVerifyFcb -> VOID\n", 0);
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
VOID
|
|
NTAPI
|
|
FatDeferredCleanVolume (
|
|
_In_ PVOID Parameter
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This is the routine that performs the actual FatMarkVolumeClean call.
|
|
It assures that the target volume still exists as there ia a race
|
|
condition between queueing the ExWorker item and volumes going away.
|
|
|
|
Arguments:
|
|
|
|
Parameter - Points to a clean volume packet that was allocated from pool
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PCLEAN_AND_DIRTY_VOLUME_PACKET Packet;
|
|
PLIST_ENTRY Links;
|
|
PVCB Vcb;
|
|
IRP_CONTEXT IrpContext;
|
|
BOOLEAN VcbExists = FALSE;
|
|
|
|
PAGED_CODE();
|
|
|
|
DebugTrace(+1, Dbg, "FatDeferredCleanVolume\n", 0);
|
|
|
|
Packet = (PCLEAN_AND_DIRTY_VOLUME_PACKET)Parameter;
|
|
|
|
Vcb = Packet->Vcb;
|
|
|
|
//
|
|
// Make us appear as a top level FSP request so that we will
|
|
// receive any errors from the operation.
|
|
//
|
|
|
|
IoSetTopLevelIrp( (PIRP)FSRTL_FSP_TOP_LEVEL_IRP );
|
|
|
|
//
|
|
// Dummy up and Irp Context so we can call our worker routines
|
|
//
|
|
|
|
RtlZeroMemory( &IrpContext, sizeof(IRP_CONTEXT));
|
|
|
|
SetFlag(IrpContext.Flags, IRP_CONTEXT_FLAG_WAIT);
|
|
|
|
//
|
|
// Acquire shared access to the global lock and make sure this volume
|
|
// still exists.
|
|
//
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( push )
|
|
#pragma prefast( disable: 28193, "this will always wait" )
|
|
#endif
|
|
FatAcquireSharedGlobal( &IrpContext );
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( pop )
|
|
#endif
|
|
|
|
for (Links = FatData.VcbQueue.Flink;
|
|
Links != &FatData.VcbQueue;
|
|
Links = Links->Flink) {
|
|
|
|
PVCB ExistingVcb;
|
|
|
|
ExistingVcb = CONTAINING_RECORD(Links, VCB, VcbLinks);
|
|
|
|
if ( Vcb == ExistingVcb ) {
|
|
|
|
VcbExists = TRUE;
|
|
break;
|
|
}
|
|
}
|
|
|
|
//
|
|
// If the vcb is good then mark it clean. Ignore any problems.
|
|
//
|
|
|
|
if ( VcbExists &&
|
|
(Vcb->VcbCondition == VcbGood) &&
|
|
!FlagOn(Vcb->VcbState, VCB_STATE_FLAG_SHUTDOWN) ) {
|
|
|
|
_SEH2_TRY {
|
|
|
|
if (!FlagOn(Vcb->VcbState, VCB_STATE_FLAG_MOUNTED_DIRTY)) {
|
|
|
|
FatMarkVolume( &IrpContext, Vcb, VolumeClean );
|
|
}
|
|
|
|
//
|
|
// Check for a pathological race condition, and fix it.
|
|
//
|
|
|
|
if (FlagOn(Vcb->VcbState, VCB_STATE_FLAG_VOLUME_DIRTY)) {
|
|
|
|
FatMarkVolume( &IrpContext, Vcb, VolumeDirty );
|
|
|
|
} else {
|
|
|
|
//
|
|
// Unlock the volume if it is removable.
|
|
//
|
|
|
|
if (FlagOn(Vcb->VcbState, VCB_STATE_FLAG_REMOVABLE_MEDIA) &&
|
|
!FlagOn(Vcb->VcbState, VCB_STATE_FLAG_BOOT_OR_PAGING_FILE)) {
|
|
|
|
FatToggleMediaEjectDisable( &IrpContext, Vcb, FALSE );
|
|
}
|
|
}
|
|
|
|
} _SEH2_EXCEPT( FsRtlIsNtstatusExpected(_SEH2_GetExceptionCode()) ?
|
|
EXCEPTION_EXECUTE_HANDLER : EXCEPTION_CONTINUE_SEARCH ) {
|
|
|
|
NOTHING;
|
|
} _SEH2_END;
|
|
}
|
|
|
|
//
|
|
// Release the global resource, unpin and repinned Bcbs and return.
|
|
//
|
|
|
|
FatReleaseGlobal( &IrpContext );
|
|
|
|
_SEH2_TRY {
|
|
|
|
FatUnpinRepinnedBcbs( &IrpContext );
|
|
|
|
} _SEH2_EXCEPT( FsRtlIsNtstatusExpected(_SEH2_GetExceptionCode()) ?
|
|
EXCEPTION_EXECUTE_HANDLER : EXCEPTION_CONTINUE_SEARCH ) {
|
|
|
|
NOTHING;
|
|
} _SEH2_END;
|
|
|
|
IoSetTopLevelIrp( NULL );
|
|
|
|
//
|
|
// and finally free the packet.
|
|
//
|
|
|
|
ExFreePool( Packet );
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
|
|
VOID
|
|
NTAPI
|
|
FatCleanVolumeDpc (
|
|
_In_ PKDPC Dpc,
|
|
_In_opt_ PVOID DeferredContext,
|
|
_In_opt_ PVOID SystemArgument1,
|
|
_In_opt_ PVOID SystemArgument2
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine is dispatched 5 seconds after the last disk structure was
|
|
modified in a specific volume, and exqueues an execuative worker thread
|
|
to perform the actual task of marking the volume dirty.
|
|
|
|
Arguments:
|
|
|
|
DefferedContext - Contains the Vcb to process.
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PVCB Vcb;
|
|
PCLEAN_AND_DIRTY_VOLUME_PACKET Packet;
|
|
|
|
UNREFERENCED_PARAMETER( SystemArgument1 );
|
|
UNREFERENCED_PARAMETER( SystemArgument2 );
|
|
UNREFERENCED_PARAMETER( Dpc );
|
|
|
|
Vcb = (PVCB)DeferredContext;
|
|
|
|
|
|
//
|
|
// If there is still dirty data (highly unlikely), set the timer for a
|
|
// second in the future.
|
|
//
|
|
|
|
if (CcIsThereDirtyData(Vcb->Vpb)) {
|
|
|
|
LARGE_INTEGER TwoSecondsFromNow;
|
|
|
|
TwoSecondsFromNow.QuadPart = (LONG)-2*1000*1000*10;
|
|
|
|
KeSetTimer( &Vcb->CleanVolumeTimer,
|
|
TwoSecondsFromNow,
|
|
&Vcb->CleanVolumeDpc );
|
|
|
|
return;
|
|
}
|
|
|
|
//
|
|
// If we couldn't get pool, oh well....
|
|
//
|
|
|
|
Packet = ExAllocatePoolWithTag(NonPagedPoolNx, sizeof(CLEAN_AND_DIRTY_VOLUME_PACKET), ' taF');
|
|
|
|
if ( Packet ) {
|
|
|
|
Packet->Vcb = Vcb;
|
|
Packet->Irp = NULL;
|
|
|
|
//
|
|
// Clear the dirty flag now since we cannot synchronize after this point.
|
|
//
|
|
|
|
ClearFlag( Packet->Vcb->VcbState, VCB_STATE_FLAG_VOLUME_DIRTY );
|
|
|
|
ExInitializeWorkItem( &Packet->Item, &FatDeferredCleanVolume, Packet );
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( suppress:28159, "prefast indicates this is an obsolete API, but it is ok for fastfat to keep using it" )
|
|
#endif
|
|
ExQueueWorkItem( &Packet->Item, CriticalWorkQueue );
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
_Requires_lock_held_(_Global_critical_region_)
|
|
VOID
|
|
FatMarkVolume (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PVCB Vcb,
|
|
IN FAT_VOLUME_STATE VolumeState
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine moves the physically marked volume state between the clean
|
|
and dirty states. For compatibility with Win9x, we manipulate both the
|
|
historical DOS (on==clean in index 1 of the FAT) and NT (on==dirty in
|
|
the CurrentHead field of the BPB) dirty bits.
|
|
|
|
Arguments:
|
|
|
|
Vcb - Supplies the Vcb being modified
|
|
|
|
VolumeState - Supplies the state the volume is transitioning to
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PCHAR Sector;
|
|
PBCB Bcb = NULL;
|
|
KEVENT Event;
|
|
PIRP Irp = NULL;
|
|
NTSTATUS Status;
|
|
BOOLEAN FsInfoUpdate = FALSE;
|
|
ULONG FsInfoOffset = 0;
|
|
ULONG ThisPass;
|
|
LARGE_INTEGER Offset;
|
|
BOOLEAN abort = FALSE;
|
|
|
|
DebugTrace(+1, Dbg, "FatMarkVolume, Vcb = %p\n", Vcb);
|
|
|
|
//
|
|
// We had best not be trying to scribble dirty/clean bits if the
|
|
// volume is write protected. The responsibility lies with the
|
|
// callers to make sure that operations that could cause a state
|
|
// change cannot happen. There are a few, though, that show it
|
|
// just doesn't make sense to force everyone to do the dinky
|
|
// check.
|
|
//
|
|
|
|
//
|
|
// If we were called for FAT12 or readonly media, return immediately.
|
|
//
|
|
|
|
if (FlagOn(Vcb->VcbState, VCB_STATE_FLAG_WRITE_PROTECTED) ||
|
|
FatIsFat12( Vcb )) {
|
|
|
|
return;
|
|
}
|
|
|
|
//
|
|
// We have two possible additional tasks to do to mark a volume
|
|
//
|
|
// Pass 0) Flip the dirty bit in the Bpb
|
|
// Pass 1) Rewrite the FsInfo sector for FAT32 if needed
|
|
//
|
|
// In most cases we can collapse these two either because the volume
|
|
// is either not FAT32 or the FsInfo sector is adjacent to the boot sector.
|
|
//
|
|
|
|
for (ThisPass = 0; ThisPass < 2; ThisPass++) {
|
|
|
|
//
|
|
// If this volume is being dirtied, or isn't FAT32, or if it is and
|
|
// we were able to perform the fast update, or the bpb lied to us
|
|
// about where the FsInfo went, we're done - no FsInfo to update in
|
|
// a seperate write.
|
|
//
|
|
|
|
if (ThisPass == 1 && (!FatIsFat32( Vcb ) ||
|
|
VolumeState != VolumeClean ||
|
|
FsInfoUpdate ||
|
|
Vcb->Bpb.FsInfoSector == 0)) {
|
|
|
|
break;
|
|
}
|
|
|
|
//
|
|
// Bail if we get an IO error.
|
|
//
|
|
|
|
_SEH2_TRY {
|
|
|
|
ULONG PinLength;
|
|
ULONG WriteLength;
|
|
|
|
//
|
|
// If the FAT table is 12-bit then our strategy is to pin the entire
|
|
// thing when any of it is modified. Here we're going to pin the
|
|
// first page, so in the 12-bit case we also want to pin the rest
|
|
// of the FAT table.
|
|
//
|
|
|
|
Offset.QuadPart = 0;
|
|
|
|
if (Vcb->AllocationSupport.FatIndexBitSize == 12) {
|
|
|
|
//
|
|
// But we only write back the first sector.
|
|
//
|
|
|
|
PinLength = FatReservedBytes(&Vcb->Bpb) + FatBytesPerFat(&Vcb->Bpb);
|
|
WriteLength = Vcb->Bpb.BytesPerSector;
|
|
|
|
} else {
|
|
|
|
WriteLength = PinLength = Vcb->Bpb.BytesPerSector;
|
|
|
|
//
|
|
// If this is a FAT32 volume going into the clean state,
|
|
// see about doing the FsInfo sector.
|
|
//
|
|
|
|
if (FatIsFat32( Vcb ) && VolumeState == VolumeClean) {
|
|
|
|
//
|
|
// If the FsInfo sector immediately follows the boot sector,
|
|
// we can do this in a single operation by rewriting both
|
|
// sectors at once.
|
|
//
|
|
|
|
if (Vcb->Bpb.FsInfoSector == 1) {
|
|
|
|
NT_ASSERT( ThisPass == 0 );
|
|
|
|
FsInfoUpdate = TRUE;
|
|
FsInfoOffset = Vcb->Bpb.BytesPerSector;
|
|
WriteLength = PinLength = Vcb->Bpb.BytesPerSector * 2;
|
|
|
|
} else if (ThisPass == 1) {
|
|
|
|
//
|
|
// We are doing an explicit write to the FsInfo sector.
|
|
//
|
|
|
|
FsInfoUpdate = TRUE;
|
|
FsInfoOffset = 0;
|
|
|
|
Offset.QuadPart = Vcb->Bpb.BytesPerSector * Vcb->Bpb.FsInfoSector;
|
|
}
|
|
}
|
|
}
|
|
|
|
//
|
|
// Call Cc directly here so that we can avoid overhead and push this
|
|
// right down to the disk.
|
|
//
|
|
|
|
CcPinRead( Vcb->VirtualVolumeFile,
|
|
&Offset,
|
|
PinLength,
|
|
TRUE,
|
|
&Bcb,
|
|
(PVOID *)&Sector );
|
|
|
|
DbgDoit( IrpContext->PinCount += 1 )
|
|
|
|
//
|
|
// Set the Bpb on Pass 0 always
|
|
//
|
|
|
|
if (ThisPass == 0) {
|
|
|
|
PCHAR CurrentHead;
|
|
|
|
//
|
|
// Before we do anything, doublecheck that this still looks like a
|
|
// FAT bootsector. If it doesn't, something remarkable happened
|
|
// and we should avoid touching the volume.
|
|
//
|
|
// THIS IS TEMPORARY (but may last a while)
|
|
//
|
|
|
|
if (!FatIsBootSectorFat( (PPACKED_BOOT_SECTOR) Sector )) {
|
|
abort = TRUE;
|
|
_SEH2_LEAVE;
|
|
}
|
|
|
|
if (FatIsFat32( Vcb )) {
|
|
|
|
CurrentHead = (PCHAR)&((PPACKED_BOOT_SECTOR_EX) Sector)->CurrentHead;
|
|
|
|
} else {
|
|
|
|
CurrentHead = (PCHAR)&((PPACKED_BOOT_SECTOR) Sector)->CurrentHead;
|
|
}
|
|
|
|
if (VolumeState == VolumeClean) {
|
|
|
|
ClearFlag( *CurrentHead, FAT_BOOT_SECTOR_DIRTY );
|
|
|
|
} else {
|
|
|
|
SetFlag( *CurrentHead, FAT_BOOT_SECTOR_DIRTY );
|
|
|
|
//
|
|
// In addition, if this request received an error that may indicate
|
|
// media corruption, have autochk perform a surface test.
|
|
//
|
|
|
|
if ( VolumeState == VolumeDirtyWithSurfaceTest ) {
|
|
|
|
SetFlag( *CurrentHead, FAT_BOOT_SECTOR_TEST_SURFACE );
|
|
}
|
|
}
|
|
}
|
|
|
|
//
|
|
// Update the FsInfo as appropriate.
|
|
//
|
|
|
|
if (FsInfoUpdate) {
|
|
|
|
PFSINFO_SECTOR FsInfoSector = (PFSINFO_SECTOR) ((PCHAR)Sector + FsInfoOffset);
|
|
|
|
//
|
|
// We just rewrite all of the spec'd fields. Note that we don't
|
|
// care to synchronize with the allocation package - this will be
|
|
// quickly taken care of by a re-dirtying of the volume if a change
|
|
// is racing with us. Remember that this is all a compatibility
|
|
// deference for Win9x FAT32 - NT will never look at this information.
|
|
//
|
|
|
|
FsInfoSector->SectorBeginSignature = FSINFO_SECTOR_BEGIN_SIGNATURE;
|
|
FsInfoSector->FsInfoSignature = FSINFO_SIGNATURE;
|
|
FsInfoSector->FreeClusterCount = Vcb->AllocationSupport.NumberOfFreeClusters;
|
|
FsInfoSector->NextFreeCluster = Vcb->ClusterHint;
|
|
FsInfoSector->SectorEndSignature = FSINFO_SECTOR_END_SIGNATURE;
|
|
}
|
|
|
|
//
|
|
// Initialize the event we're going to use
|
|
//
|
|
|
|
KeInitializeEvent( &Event, NotificationEvent, FALSE );
|
|
|
|
//
|
|
// Build the irp for the operation and also set the override flag.
|
|
// Note that we may be at APC level, so do this asyncrhonously and
|
|
// use an event for synchronization as normal request completion
|
|
// cannot occur at APC level.
|
|
//
|
|
|
|
Irp = IoBuildAsynchronousFsdRequest( IRP_MJ_WRITE,
|
|
Vcb->TargetDeviceObject,
|
|
(PVOID)Sector,
|
|
WriteLength,
|
|
&Offset,
|
|
NULL );
|
|
|
|
if ( Irp == NULL ) {
|
|
|
|
try_return(NOTHING);
|
|
}
|
|
|
|
//
|
|
// Make this operation write-through. It never hurts to try to be
|
|
// safer about this, even though we aren't logged.
|
|
//
|
|
|
|
SetFlag( IoGetNextIrpStackLocation( Irp )->Flags, SL_WRITE_THROUGH );
|
|
|
|
//
|
|
// Set up the completion routine
|
|
//
|
|
|
|
IoSetCompletionRoutine( Irp,
|
|
FatMarkVolumeCompletionRoutine,
|
|
&Event,
|
|
TRUE,
|
|
TRUE,
|
|
TRUE );
|
|
|
|
//
|
|
// Call the device to do the write and wait for it to finish.
|
|
// Igmore any return status.
|
|
//
|
|
|
|
Status = IoCallDriver( Vcb->TargetDeviceObject, Irp );
|
|
|
|
if (Status == STATUS_PENDING) {
|
|
|
|
(VOID)KeWaitForSingleObject( &Event, Executive, KernelMode, FALSE, (PLARGE_INTEGER)NULL );
|
|
}
|
|
|
|
try_exit: NOTHING;
|
|
} _SEH2_FINALLY {
|
|
|
|
//
|
|
// Clean up the Irp and Mdl
|
|
//
|
|
|
|
|
|
if (Irp) {
|
|
|
|
//
|
|
// If there is an MDL (or MDLs) associated with this I/O
|
|
// request, Free it (them) here. This is accomplished by
|
|
// walking the MDL list hanging off of the IRP and deallocating
|
|
// each MDL encountered.
|
|
//
|
|
|
|
while (Irp->MdlAddress != NULL) {
|
|
|
|
PMDL NextMdl;
|
|
|
|
NextMdl = Irp->MdlAddress->Next;
|
|
|
|
MmUnlockPages( Irp->MdlAddress );
|
|
|
|
IoFreeMdl( Irp->MdlAddress );
|
|
|
|
Irp->MdlAddress = NextMdl;
|
|
}
|
|
|
|
IoFreeIrp( Irp );
|
|
}
|
|
|
|
if (Bcb != NULL) {
|
|
|
|
FatUnpinBcb( IrpContext, Bcb );
|
|
}
|
|
} _SEH2_END;
|
|
}
|
|
|
|
if (!abort) {
|
|
|
|
//
|
|
// Flip the dirty bit in the FAT
|
|
//
|
|
|
|
if (VolumeState == VolumeDirty) {
|
|
|
|
FatSetFatEntry( IrpContext, Vcb, FAT_DIRTY_BIT_INDEX, FAT_DIRTY_VOLUME);
|
|
|
|
} else {
|
|
|
|
FatSetFatEntry( IrpContext, Vcb, FAT_DIRTY_BIT_INDEX, FAT_CLEAN_VOLUME);
|
|
}
|
|
}
|
|
|
|
DebugTrace(-1, Dbg, "FatMarkVolume -> VOID\n", 0);
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
VOID
|
|
NTAPI
|
|
FatFspMarkVolumeDirtyWithRecover(
|
|
PVOID Parameter
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This is the routine that performs the actual FatMarkVolume Dirty call
|
|
on a paging file Io that encounters a media error. It is responsible
|
|
for completing the PagingIo Irp as soon as this is done.
|
|
|
|
Note: this routine (and thus FatMarkVolume()) must be resident as
|
|
the paging file might be damaged at this point.
|
|
|
|
Arguments:
|
|
|
|
Parameter - Points to a dirty volume packet that was allocated from pool
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PCLEAN_AND_DIRTY_VOLUME_PACKET Packet;
|
|
PVCB Vcb;
|
|
IRP_CONTEXT IrpContext;
|
|
PIRP Irp;
|
|
|
|
DebugTrace(+1, Dbg, "FatFspMarkVolumeDirtyWithRecover\n", 0);
|
|
|
|
Packet = (PCLEAN_AND_DIRTY_VOLUME_PACKET)Parameter;
|
|
|
|
Vcb = Packet->Vcb;
|
|
Irp = Packet->Irp;
|
|
|
|
//
|
|
// Dummy up the IrpContext so we can call our worker routines
|
|
//
|
|
|
|
RtlZeroMemory( &IrpContext, sizeof(IRP_CONTEXT));
|
|
|
|
SetFlag(IrpContext.Flags, IRP_CONTEXT_FLAG_WAIT);
|
|
IrpContext.OriginatingIrp = Irp;
|
|
|
|
//
|
|
// Make us appear as a top level FSP request so that we will
|
|
// receive any errors from the operation.
|
|
//
|
|
|
|
IoSetTopLevelIrp( (PIRP)FSRTL_FSP_TOP_LEVEL_IRP );
|
|
|
|
//
|
|
// Try to write out the dirty bit. If something goes wrong, we
|
|
// tried.
|
|
//
|
|
|
|
_SEH2_TRY {
|
|
|
|
SetFlag( Vcb->VcbState, VCB_STATE_FLAG_MOUNTED_DIRTY );
|
|
|
|
FatMarkVolume( &IrpContext, Vcb, VolumeDirtyWithSurfaceTest );
|
|
|
|
} _SEH2_EXCEPT(FatExceptionFilter( &IrpContext, _SEH2_GetExceptionInformation() )) {
|
|
|
|
NOTHING;
|
|
} _SEH2_END;
|
|
|
|
IoSetTopLevelIrp( NULL );
|
|
|
|
//
|
|
// Now complete the originating Irp or set the synchronous event.
|
|
//
|
|
|
|
if (Packet->Event) {
|
|
KeSetEvent( Packet->Event, 0, FALSE );
|
|
} else {
|
|
IoCompleteRequest( Irp, IO_DISK_INCREMENT );
|
|
}
|
|
|
|
DebugTrace(-1, Dbg, "FatFspMarkVolumeDirtyWithRecover -> VOID\n", 0);
|
|
}
|
|
|
|
|
|
VOID
|
|
FatCheckDirtyBit (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PVCB Vcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine looks at the volume dirty bit, and depending on the state of
|
|
VCB_STATE_FLAG_MOUNTED_DIRTY, the appropriate action is taken.
|
|
|
|
Arguments:
|
|
|
|
Vcb - Supplies the Vcb being queried.
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
BOOLEAN Dirty;
|
|
|
|
PPACKED_BOOT_SECTOR BootSector;
|
|
PBCB BootSectorBcb;
|
|
|
|
UNICODE_STRING VolumeLabel;
|
|
|
|
PAGED_CODE();
|
|
|
|
//
|
|
// Look in the boot sector
|
|
//
|
|
|
|
FatReadVolumeFile( IrpContext,
|
|
Vcb,
|
|
0,
|
|
sizeof(PACKED_BOOT_SECTOR),
|
|
&BootSectorBcb,
|
|
(PVOID *)&BootSector );
|
|
|
|
_SEH2_TRY {
|
|
|
|
//
|
|
// Check if the magic bit is set
|
|
//
|
|
|
|
if (IsBpbFat32(&BootSector->PackedBpb)) {
|
|
Dirty = BooleanFlagOn( ((PPACKED_BOOT_SECTOR_EX)BootSector)->CurrentHead,
|
|
FAT_BOOT_SECTOR_DIRTY );
|
|
} else {
|
|
Dirty = BooleanFlagOn( BootSector->CurrentHead, FAT_BOOT_SECTOR_DIRTY );
|
|
}
|
|
|
|
//
|
|
// Setup the VolumeLabel string
|
|
//
|
|
|
|
VolumeLabel.Length = Vcb->Vpb->VolumeLabelLength;
|
|
VolumeLabel.MaximumLength = MAXIMUM_VOLUME_LABEL_LENGTH;
|
|
VolumeLabel.Buffer = &Vcb->Vpb->VolumeLabel[0];
|
|
|
|
if ( Dirty ) {
|
|
|
|
//
|
|
// Do not trigger the mounted dirty bit if this is a verify
|
|
// and the volume is a boot or paging device. We know that
|
|
// a boot or paging device cannot leave the system, and thus
|
|
// that on its mount we will have figured this out correctly.
|
|
//
|
|
// This logic is a reasonable change. Why?
|
|
// 'cause setup cracked a non-exclusive DASD handle near the
|
|
// end of setup, wrote some data, closed the handle and we
|
|
// set the verify bit ... came back around and saw that other
|
|
// arbitrary activity had left the volume in a temporarily dirty
|
|
// state.
|
|
//
|
|
// Of course, the real problem is that we don't have a journal.
|
|
//
|
|
|
|
if (!(IrpContext->MajorFunction == IRP_MJ_FILE_SYSTEM_CONTROL &&
|
|
IrpContext->MinorFunction == IRP_MN_VERIFY_VOLUME &&
|
|
FlagOn( Vcb->VcbState, VCB_STATE_FLAG_BOOT_OR_PAGING_FILE))) {
|
|
|
|
KdPrintEx((DPFLTR_FASTFAT_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"FASTFAT: WARNING! Mounting Dirty Volume %Z\n",
|
|
&VolumeLabel));
|
|
|
|
SetFlag( Vcb->VcbState, VCB_STATE_FLAG_MOUNTED_DIRTY );
|
|
}
|
|
|
|
} else {
|
|
|
|
if (FlagOn(Vcb->VcbState, VCB_STATE_FLAG_MOUNTED_DIRTY)) {
|
|
|
|
KdPrintEx((DPFLTR_FASTFAT_ID,
|
|
DPFLTR_INFO_LEVEL,
|
|
"FASTFAT: Volume %Z has been cleaned.\n",
|
|
&VolumeLabel));
|
|
|
|
ClearFlag( Vcb->VcbState, VCB_STATE_FLAG_MOUNTED_DIRTY );
|
|
|
|
} else {
|
|
|
|
(VOID)FsRtlBalanceReads( Vcb->TargetDeviceObject );
|
|
}
|
|
}
|
|
|
|
} _SEH2_FINALLY {
|
|
|
|
FatUnpinBcb( IrpContext, BootSectorBcb );
|
|
} _SEH2_END;
|
|
}
|
|
|
|
|
|
VOID
|
|
FatVerifyOperationIsLegal (
|
|
IN PIRP_CONTEXT IrpContext
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine determines is the requested operation should be allowed to
|
|
continue. It either returns to the user if the request is Okay, or
|
|
raises an appropriate status.
|
|
|
|
Arguments:
|
|
|
|
Irp - Supplies the Irp to check
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PIRP Irp;
|
|
PFILE_OBJECT FileObject;
|
|
|
|
PAGED_CODE();
|
|
|
|
Irp = IrpContext->OriginatingIrp;
|
|
|
|
//
|
|
// If the Irp is not present, then we got here via close.
|
|
//
|
|
//
|
|
|
|
if ( Irp == NULL ) {
|
|
|
|
return;
|
|
}
|
|
|
|
FileObject = IoGetCurrentIrpStackLocation(Irp)->FileObject;
|
|
|
|
//
|
|
// If there is not a file object, we cannot continue.
|
|
//
|
|
|
|
if ( FileObject == NULL ) {
|
|
|
|
return;
|
|
}
|
|
|
|
//
|
|
// If the file object has already been cleaned up, and
|
|
//
|
|
// A) This request is a paging io read or write, or
|
|
// B) This request is a close operation, or
|
|
// C) This request is a set or query info call (for Lou)
|
|
// D) This is an MDL complete
|
|
//
|
|
// let it pass, otherwise return STATUS_FILE_CLOSED.
|
|
//
|
|
|
|
if ( FlagOn(FileObject->Flags, FO_CLEANUP_COMPLETE) ) {
|
|
|
|
PIO_STACK_LOCATION IrpSp = IoGetCurrentIrpStackLocation( Irp );
|
|
|
|
if ( (FlagOn(Irp->Flags, IRP_PAGING_IO)) ||
|
|
(IrpSp->MajorFunction == IRP_MJ_CLOSE ) ||
|
|
(IrpSp->MajorFunction == IRP_MJ_SET_INFORMATION) ||
|
|
(IrpSp->MajorFunction == IRP_MJ_QUERY_INFORMATION) ||
|
|
( ( (IrpSp->MajorFunction == IRP_MJ_READ) ||
|
|
(IrpSp->MajorFunction == IRP_MJ_WRITE) ) &&
|
|
FlagOn(IrpSp->MinorFunction, IRP_MN_COMPLETE) ) ) {
|
|
|
|
NOTHING;
|
|
|
|
} else {
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_FILE_CLOSED );
|
|
}
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
|
|
//
|
|
// Internal support routine
|
|
//
|
|
|
|
VOID
|
|
FatResetFcb (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PFCB Fcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine is called when an Fcb has been marked as needs to be verified.
|
|
|
|
It does the following tasks:
|
|
|
|
- Reset Mcb mapping information
|
|
- For directories, reset dirent hints
|
|
- Set allocation size to unknown
|
|
|
|
Arguments:
|
|
|
|
Fcb - Supplies the Fcb to reset
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
LOGICAL IsRealPagingFile;
|
|
|
|
PAGED_CODE();
|
|
UNREFERENCED_PARAMETER( IrpContext );
|
|
|
|
//
|
|
// Don't do the two following operations for the Root Dcb
|
|
// of a non FAT32 volume or paging files. Paging files!?
|
|
// Yes, if someone diddles a volume we try to reverify all
|
|
// of the Fcbs just in case; however, there is no safe way
|
|
// to chuck and retrieve the mapping pair information for
|
|
// a real paging file. Lose it and die.
|
|
//
|
|
// An exception is made for ReadyBoost cache files, which
|
|
// are created as paging files on removable devices and
|
|
// require validation after a power transition.
|
|
//
|
|
|
|
if (!FlagOn(Fcb->Vcb->VcbState, VCB_STATE_FLAG_REMOVABLE_MEDIA) &&
|
|
FlagOn(Fcb->FcbState, FCB_STATE_PAGING_FILE)) {
|
|
|
|
IsRealPagingFile = TRUE;
|
|
|
|
} else {
|
|
|
|
IsRealPagingFile = FALSE;
|
|
}
|
|
|
|
if ( (NodeType(Fcb) != FAT_NTC_ROOT_DCB ||
|
|
FatIsFat32( Fcb->Vcb )) &&
|
|
!IsRealPagingFile ) {
|
|
|
|
//
|
|
// Reset the mcb mapping.
|
|
//
|
|
|
|
FsRtlRemoveLargeMcbEntry( &Fcb->Mcb, 0, 0xFFFFFFFF );
|
|
|
|
//
|
|
// Reset the allocation size to 0 or unknown
|
|
//
|
|
|
|
if ( Fcb->FirstClusterOfFile == 0 ) {
|
|
|
|
Fcb->Header.AllocationSize.QuadPart = 0;
|
|
|
|
} else {
|
|
|
|
Fcb->Header.AllocationSize.QuadPart = FCB_LOOKUP_ALLOCATIONSIZE_HINT;
|
|
}
|
|
}
|
|
|
|
//
|
|
// If this is a directory, reset the hints.
|
|
//
|
|
|
|
if ( (NodeType(Fcb) == FAT_NTC_DCB) ||
|
|
(NodeType(Fcb) == FAT_NTC_ROOT_DCB) ) {
|
|
|
|
//
|
|
// Force a rescan of the directory
|
|
//
|
|
|
|
Fcb->Specific.Dcb.UnusedDirentVbo = 0xffffffff;
|
|
Fcb->Specific.Dcb.DeletedDirentHint = 0xffffffff;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
BOOLEAN
|
|
FatMatchFileSize (
|
|
__in PIRP_CONTEXT IrpContext,
|
|
__in PDIRENT Dirent,
|
|
__in PFCB Fcb
|
|
)
|
|
{
|
|
|
|
UNREFERENCED_PARAMETER(IrpContext);
|
|
|
|
if (NodeType(Fcb) != FAT_NTC_FCB) {
|
|
return TRUE;
|
|
}
|
|
|
|
|
|
if (Fcb->Header.FileSize.LowPart != Dirent->FileSize) {
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
//
|
|
// Internal support routine
|
|
//
|
|
|
|
_Requires_lock_held_(_Global_critical_region_)
|
|
VOID
|
|
FatDetermineAndMarkFcbCondition (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PFCB Fcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routine checks a specific Fcb to see if it is different from what's
|
|
on the disk. The following things are checked:
|
|
|
|
- File Name
|
|
- File Size (if not directory)
|
|
- First Cluster Of File
|
|
- Dirent Attributes
|
|
|
|
Arguments:
|
|
|
|
Fcb - Supplies the Fcb to examine
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PDIRENT Dirent;
|
|
PBCB DirentBcb;
|
|
ULONG FirstClusterOfFile;
|
|
|
|
OEM_STRING Name;
|
|
CHAR Buffer[16];
|
|
|
|
PAGED_CODE();
|
|
|
|
//
|
|
// If this is the Root Dcb, special case it. That is, we know
|
|
// by definition that it is good since it is fixed in the volume
|
|
// structure.
|
|
//
|
|
|
|
if ( NodeType(Fcb) == FAT_NTC_ROOT_DCB ) {
|
|
|
|
FatMarkFcbCondition( IrpContext, Fcb, FcbGood, FALSE );
|
|
|
|
return;
|
|
}
|
|
|
|
// The first thing we need to do to verify ourselves is
|
|
// locate the dirent on the disk.
|
|
//
|
|
|
|
FatGetDirentFromFcbOrDcb( IrpContext,
|
|
Fcb,
|
|
TRUE,
|
|
&Dirent,
|
|
&DirentBcb );
|
|
//
|
|
// If we couldn't get the dirent, this fcb must be bad (case of
|
|
// enclosing directory shrinking during the time it was ejected).
|
|
//
|
|
|
|
if (DirentBcb == NULL) {
|
|
|
|
FatMarkFcbCondition( IrpContext, Fcb, FcbBad, FALSE );
|
|
|
|
return;
|
|
}
|
|
|
|
//
|
|
// We located the dirent for ourselves now make sure it
|
|
// is really ours by comparing the Name and FatFlags.
|
|
// Then for a file we also check the file size.
|
|
//
|
|
// Note that we have to unpin the Bcb before calling FatResetFcb
|
|
// in order to avoid a deadlock in CcUninitializeCacheMap.
|
|
//
|
|
|
|
_SEH2_TRY {
|
|
|
|
Name.MaximumLength = 16;
|
|
Name.Buffer = &Buffer[0];
|
|
|
|
Fat8dot3ToString( IrpContext, Dirent, FALSE, &Name );
|
|
|
|
//
|
|
// We need to calculate the first cluster 'cause FAT32 splits
|
|
// this field across the dirent.
|
|
//
|
|
|
|
FirstClusterOfFile = Dirent->FirstClusterOfFile;
|
|
|
|
if (FatIsFat32( Fcb->Vcb )) {
|
|
|
|
FirstClusterOfFile += Dirent->FirstClusterOfFileHi << 16;
|
|
}
|
|
|
|
if (!RtlEqualString( &Name, &Fcb->ShortName.Name.Oem, TRUE )
|
|
|
|
||
|
|
|
|
!FatMatchFileSize(IrpContext, Dirent, Fcb )
|
|
|
|
||
|
|
|
|
(FirstClusterOfFile != Fcb->FirstClusterOfFile)
|
|
|
|
||
|
|
|
|
(Dirent->Attributes != Fcb->DirentFatFlags) ) {
|
|
|
|
FatMarkFcbCondition( IrpContext, Fcb, FcbBad, FALSE );
|
|
|
|
} else {
|
|
|
|
//
|
|
// We passed. Get the Fcb ready to use again.
|
|
//
|
|
|
|
FatMarkFcbCondition( IrpContext, Fcb, FcbGood, FALSE );
|
|
}
|
|
|
|
} _SEH2_FINALLY {
|
|
|
|
FatUnpinBcb( IrpContext, DirentBcb );
|
|
} _SEH2_END;
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
|
|
//
|
|
// Internal support routine
|
|
//
|
|
|
|
VOID
|
|
FatQuickVerifyVcb (
|
|
IN PIRP_CONTEXT IrpContext,
|
|
IN PVCB Vcb
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routines just checks the verify bit in the real device and the
|
|
Vcb condition and raises an appropriate exception if so warented.
|
|
It is called when verifying both Fcbs and Vcbs.
|
|
|
|
Arguments:
|
|
|
|
Vcb - Supplies the Vcb to check the condition of.
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PAGED_CODE();
|
|
|
|
//
|
|
// If the real device needs to be verified we'll set the
|
|
// DeviceToVerify to be our real device and raise VerifyRequired.
|
|
//
|
|
|
|
if (FlagOn(Vcb->Vpb->RealDevice->Flags, DO_VERIFY_VOLUME)) {
|
|
|
|
DebugTrace(0, Dbg, "The Vcb needs to be verified\n", 0);
|
|
|
|
IoSetHardErrorOrVerifyDevice( IrpContext->OriginatingIrp,
|
|
Vcb->Vpb->RealDevice );
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_VERIFY_REQUIRED );
|
|
}
|
|
|
|
//
|
|
// Based on the condition of the Vcb we'll either return to our
|
|
// caller or raise an error condition
|
|
//
|
|
|
|
switch (Vcb->VcbCondition) {
|
|
|
|
case VcbGood:
|
|
|
|
DebugTrace(0, Dbg, "The Vcb is good\n", 0);
|
|
|
|
//
|
|
// Do a check here of an operation that would try to modify a
|
|
// write protected media.
|
|
//
|
|
|
|
if (FlagOn(Vcb->VcbState, VCB_STATE_FLAG_WRITE_PROTECTED) &&
|
|
((IrpContext->MajorFunction == IRP_MJ_WRITE) ||
|
|
(IrpContext->MajorFunction == IRP_MJ_SET_INFORMATION) ||
|
|
(IrpContext->MajorFunction == IRP_MJ_SET_EA) ||
|
|
(IrpContext->MajorFunction == IRP_MJ_FLUSH_BUFFERS) ||
|
|
(IrpContext->MajorFunction == IRP_MJ_SET_VOLUME_INFORMATION) ||
|
|
(IrpContext->MajorFunction == IRP_MJ_FILE_SYSTEM_CONTROL &&
|
|
IrpContext->MinorFunction == IRP_MN_USER_FS_REQUEST &&
|
|
IoGetCurrentIrpStackLocation(IrpContext->OriginatingIrp)->Parameters.FileSystemControl.FsControlCode ==
|
|
FSCTL_MARK_VOLUME_DIRTY))) {
|
|
|
|
//
|
|
// Set the real device for the pop-up info, and set the verify
|
|
// bit in the device object, so that we will force a verify
|
|
// in case the user put the correct media back in.
|
|
//
|
|
|
|
|
|
IoSetHardErrorOrVerifyDevice( IrpContext->OriginatingIrp,
|
|
Vcb->Vpb->RealDevice );
|
|
|
|
FatMarkDevForVerifyIfVcbMounted(Vcb);
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_MEDIA_WRITE_PROTECTED );
|
|
}
|
|
|
|
break;
|
|
|
|
case VcbNotMounted:
|
|
|
|
DebugTrace(0, Dbg, "The Vcb is not mounted\n", 0);
|
|
|
|
//
|
|
// Set the real device for the pop-up info, and set the verify
|
|
// bit in the device object, so that we will force a verify
|
|
// in case the user put the correct media back in.
|
|
//
|
|
|
|
IoSetHardErrorOrVerifyDevice( IrpContext->OriginatingIrp,
|
|
Vcb->Vpb->RealDevice );
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_WRONG_VOLUME );
|
|
|
|
break;
|
|
|
|
case VcbBad:
|
|
|
|
DebugTrace(0, Dbg, "The Vcb is bad\n", 0);
|
|
|
|
if (FlagOn( Vcb->VcbState, VCB_STATE_FLAG_VOLUME_DISMOUNTED )) {
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_VOLUME_DISMOUNTED );
|
|
|
|
} else {
|
|
|
|
FatRaiseStatus( IrpContext, STATUS_FILE_INVALID );
|
|
}
|
|
break;
|
|
|
|
default:
|
|
|
|
DebugDump("Invalid VcbCondition\n", 0, Vcb);
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( suppress:28159, "things are seriously wrong if we get here" )
|
|
#endif
|
|
FatBugCheck( Vcb->VcbCondition, 0, 0 );
|
|
}
|
|
}
|
|
|
|
_Requires_lock_held_(_Global_critical_region_)
|
|
NTSTATUS
|
|
FatPerformVerify (
|
|
_In_ PIRP_CONTEXT IrpContext,
|
|
_In_ PIRP Irp,
|
|
_In_ PDEVICE_OBJECT Device
|
|
)
|
|
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
This routines performs an IoVerifyVolume operation and takes the
|
|
appropriate action. After the Verify is complete the originating
|
|
Irp is sent off to an Ex Worker Thread. This routine is called
|
|
from the exception handler.
|
|
|
|
Arguments:
|
|
|
|
Irp - The irp to send off after all is well and done.
|
|
|
|
Device - The real device needing verification.
|
|
|
|
Return Value:
|
|
|
|
None.
|
|
|
|
--*/
|
|
|
|
{
|
|
PVCB Vcb;
|
|
NTSTATUS Status = STATUS_SUCCESS;
|
|
PIO_STACK_LOCATION IrpSp;
|
|
PFILE_OBJECT FileObject = IoGetCurrentIrpStackLocation(Irp)->FileObject;
|
|
BOOLEAN AllowRawMount = FALSE;
|
|
BOOLEAN VcbDeleted = FALSE;
|
|
|
|
PAGED_CODE();
|
|
|
|
//
|
|
// Check if this Irp has a status of Verify required and if it does
|
|
// then call the I/O system to do a verify.
|
|
//
|
|
// Skip the IoVerifyVolume if this is a mount or verify request
|
|
// itself. Trying a recursive mount will cause a deadlock with
|
|
// the DeviceObject->DeviceLock.
|
|
//
|
|
|
|
if ( (IrpContext->MajorFunction == IRP_MJ_FILE_SYSTEM_CONTROL) &&
|
|
((IrpContext->MinorFunction == IRP_MN_MOUNT_VOLUME) ||
|
|
(IrpContext->MinorFunction == IRP_MN_VERIFY_VOLUME)) ) {
|
|
|
|
return FatFsdPostRequest( IrpContext, Irp );
|
|
}
|
|
|
|
DebugTrace(0, Dbg, "Verify Required, DeviceObject = %p\n", Device);
|
|
|
|
//
|
|
// Extract a pointer to the Vcb from the VolumeDeviceObject.
|
|
// Note that since we have specifically excluded mount,
|
|
// requests, we know that IrpSp->DeviceObject is indeed a
|
|
// volume device object.
|
|
//
|
|
|
|
IrpSp = IoGetCurrentIrpStackLocation(Irp);
|
|
|
|
Vcb = &CONTAINING_RECORD( IrpSp->DeviceObject,
|
|
VOLUME_DEVICE_OBJECT,
|
|
DeviceObject )->Vcb;
|
|
|
|
//
|
|
// Check if the volume still thinks it needs to be verified,
|
|
// if it doesn't then we can skip doing a verify because someone
|
|
// else beat us to it.
|
|
//
|
|
|
|
_SEH2_TRY {
|
|
|
|
//
|
|
// We will allow Raw to mount this volume if we were doing a
|
|
// a DASD open.
|
|
//
|
|
|
|
if ( (IrpContext->MajorFunction == IRP_MJ_CREATE) &&
|
|
(IrpSp->FileObject->FileName.Length == 0) &&
|
|
(IrpSp->FileObject->RelatedFileObject == NULL) ) {
|
|
|
|
AllowRawMount = TRUE;
|
|
}
|
|
|
|
//
|
|
// Send down the verify. This could be going to a different
|
|
// filesystem.
|
|
//
|
|
|
|
Status = IoVerifyVolume( Device, AllowRawMount );
|
|
|
|
//
|
|
// If the verify operation completed it will return
|
|
// either STATUS_SUCCESS or STATUS_WRONG_VOLUME, exactly.
|
|
//
|
|
// If FatVerifyVolume encountered an error during
|
|
// processing, it will return that error. If we got
|
|
// STATUS_WRONG_VOLUME from the verfy, and our volume
|
|
// is now mounted, commute the status to STATUS_SUCCESS.
|
|
//
|
|
// Acquire the Vcb so we're working with a stable Vcb condition.
|
|
//
|
|
|
|
FatAcquireSharedVcb(IrpContext, Vcb);
|
|
|
|
if ( (Status == STATUS_WRONG_VOLUME) &&
|
|
(Vcb->VcbCondition == VcbGood) ) {
|
|
|
|
Status = STATUS_SUCCESS;
|
|
}
|
|
else if ((STATUS_SUCCESS == Status) && (Vcb->VcbCondition != VcbGood)) {
|
|
|
|
Status = STATUS_WRONG_VOLUME;
|
|
}
|
|
|
|
//
|
|
// Do a quick unprotected check here. The routine will do
|
|
// a safe check. After here we can release the resource.
|
|
// Note that if the volume really went away, we will be taking
|
|
// the Reparse path.
|
|
//
|
|
|
|
if ((VcbGood != Vcb->VcbCondition) &&
|
|
(0 == Vcb->OpenFileCount) ) {
|
|
|
|
FatReleaseVcb( IrpContext, Vcb);
|
|
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( push )
|
|
#pragma prefast( disable: 28137, "prefast wants the wait to be a constant, but that isn't possible for the way fastfat is designed" )
|
|
#pragma prefast( disable: 28193 )
|
|
#endif
|
|
FatAcquireExclusiveGlobal( IrpContext );
|
|
#ifdef _MSC_VER
|
|
#pragma prefast( pop )
|
|
#endif
|
|
|
|
FatAcquireExclusiveVcb( IrpContext,
|
|
Vcb );
|
|
|
|
VcbDeleted = FatCheckForDismount( IrpContext,
|
|
Vcb,
|
|
FALSE );
|
|
|
|
if (!VcbDeleted) {
|
|
|
|
FatReleaseVcb( IrpContext,
|
|
Vcb );
|
|
}
|
|
|
|
FatReleaseGlobal( IrpContext );
|
|
}
|
|
else {
|
|
|
|
FatReleaseVcb( IrpContext, Vcb);
|
|
}
|
|
|
|
//
|
|
// If the IopMount in IoVerifyVolume did something, and
|
|
// this is an absolute open, force a reparse.
|
|
//
|
|
|
|
if ((IrpContext->MajorFunction == IRP_MJ_CREATE) &&
|
|
(FileObject->RelatedFileObject == NULL) &&
|
|
((Status == STATUS_SUCCESS) || (Status == STATUS_WRONG_VOLUME))) {
|
|
|
|
Irp->IoStatus.Information = IO_REMOUNT;
|
|
|
|
FatCompleteRequest( IrpContext, Irp, STATUS_REPARSE );
|
|
Status = STATUS_REPARSE;
|
|
Irp = NULL;
|
|
}
|
|
|
|
if ( (Irp != NULL) && !NT_SUCCESS(Status) ) {
|
|
|
|
//
|
|
// Fill in the device object if required.
|
|
//
|
|
|
|
if ( IoIsErrorUserInduced( Status ) ) {
|
|
|
|
IoSetHardErrorOrVerifyDevice( Irp, Device );
|
|
}
|
|
|
|
NT_ASSERT( STATUS_VERIFY_REQUIRED != Status);
|
|
|
|
FatNormalizeAndRaiseStatus( IrpContext, Status );
|
|
}
|
|
|
|
//
|
|
// If there is still an Irp, send it off to an Ex Worker thread.
|
|
//
|
|
|
|
if ( Irp != NULL ) {
|
|
|
|
Status = FatFsdPostRequest( IrpContext, Irp );
|
|
}
|
|
|
|
}
|
|
_SEH2_EXCEPT (FatExceptionFilter( IrpContext, _SEH2_GetExceptionInformation() )) {
|
|
|
|
//
|
|
// We had some trouble trying to perform the verify or raised
|
|
// an error ourselves. So we'll abort the I/O request with
|
|
// the error status that we get back from the execption code.
|
|
//
|
|
|
|
Status = FatProcessException( IrpContext, Irp, _SEH2_GetExceptionCode() );
|
|
} _SEH2_END;
|
|
|
|
return Status;
|
|
}
|
|
|
|
//
|
|
// Local support routine
|
|
//
|
|
|
|
NTSTATUS
|
|
NTAPI
|
|
FatMarkVolumeCompletionRoutine(
|
|
_In_ PDEVICE_OBJECT DeviceObject,
|
|
_In_ PIRP Irp,
|
|
_In_reads_opt_(_Inexpressible_("varies")) PVOID Contxt
|
|
)
|
|
|
|
{
|
|
//
|
|
// Set the event so that our call will wake up.
|
|
//
|
|
|
|
KeSetEvent( (PKEVENT)Contxt, 0, FALSE );
|
|
|
|
UNREFERENCED_PARAMETER( DeviceObject );
|
|
UNREFERENCED_PARAMETER( Irp );
|
|
|
|
return STATUS_MORE_PROCESSING_REQUIRED;
|
|
}
|
|
|
|
|