3 # Test case for image corruption (overlapping data structures) in qcow2
5 # Copyright (C) 2013 Red Hat, Inc.
7 # This program is free software; you can redistribute it and/or modify
8 # it under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 2 of the License, or
10 # (at your option) any later version.
12 # This program is distributed in the hope that it will be useful,
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with this program. If not, see <http://www.gnu.org/licenses/>.
25 echo "QA output created by $seq"
29 status=1 # failure is the default!
35 trap "_cleanup; exit \$status" 0 1 2 3 15
37 # get standard environment, filters and checks
41 # This tests qocw2-specific low-level functionality
43 _supported_proto generic
46 rt_offset=65536 # 0x10000 (XXX: just an assumption)
47 rb_offset=131072 # 0x20000 (XXX: just an assumption)
48 l1_offset=196608 # 0x30000 (XXX: just an assumption)
49 l2_offset=262144 # 0x40000 (XXX: just an assumption)
54 echo "=== Testing L2 reference into L1 ==="
57 # Link first L1 entry (first L2 table) onto itself
58 # (Note the MSb in the L1 entry is set, ensuring the refcount is one - else any
59 # later write will result in a COW operation, effectively ruining this attempt
60 # on image corruption)
61 poke_file "$TEST_IMG" "$l1_offset" "\x80\x00\x00\x00\x00\x03\x00\x00"
64 # The corrupt bit should not be set anyway
65 ./qcow2.py "$TEST_IMG" dump-header | grep incompatible_features
67 # Try to write something, thereby forcing the corrupt bit to be set
68 $QEMU_IO -c "write -P 0x2a 0 512" "$TEST_IMG" | _filter_qemu_io
70 # The corrupt bit must now be set
71 ./qcow2.py "$TEST_IMG" dump-header | grep incompatible_features
73 # Try to open the image R/W (which should fail)
74 $QEMU_IO -c "read 0 512" "$TEST_IMG" 2>&1 | _filter_qemu_io | _filter_testdir | _filter_imgfmt
76 # Try to open it RO (which should succeed)
77 $QEMU_IO -c "read 0 512" -r "$TEST_IMG" | _filter_qemu_io
79 # We could now try to fix the image, but this would probably fail (how should an
80 # L2 table linked onto the L1 table be fixed?)
83 echo "=== Testing cluster data reference into refcount block ==="
87 truncate -s "$(($l2_offset+65536))" "$TEST_IMG"
88 poke_file "$TEST_IMG" "$l1_offset" "\x80\x00\x00\x00\x00\x04\x00\x00"
89 # Mark cluster as used
90 poke_file "$TEST_IMG" "$(($rb_offset+8))" "\x00\x01"
91 # Redirect new data cluster onto refcount block
92 poke_file "$TEST_IMG" "$l2_offset" "\x80\x00\x00\x00\x00\x02\x00\x00"
94 ./qcow2.py "$TEST_IMG" dump-header | grep incompatible_features
95 $QEMU_IO -c "write -P 0x2a 0 512" "$TEST_IMG" | _filter_qemu_io
96 ./qcow2.py "$TEST_IMG" dump-header | grep incompatible_features
99 _check_test_img -r all
101 # The corrupt bit should be cleared
102 ./qcow2.py "$TEST_IMG" dump-header | grep incompatible_features
104 # Look if it's really really fixed
105 $QEMU_IO -c "write -P 0x2a 0 512" "$TEST_IMG" | _filter_qemu_io
106 ./qcow2.py "$TEST_IMG" dump-header | grep incompatible_features