As can be seen in the final patch of this series, there are certain cases where the current repair implementation of qcow2 actually damages the image further because it allocates new clusters for the refcount structure which overlap with existing but according to the on-disk refcounts (which are assumed to be wrong to begin with) unallocated clusters.
This series fixes this by completely recreating the refcount structure based on the in-memory information calculated during the check operation if the possibility of damaging the image while repairing the refcount structures in-place exists. v4: - Patch 5: (Thank you, Eric, for forcing me to write tests) - Catch numerical overflow for bdrv_truncate(bs, offs + cluster_size) - Increase in-memory refcount for the newly created refblock - Patch 7: Added comments [Benoît] - Patch 10: Added tests for patch 5 and brought up to date (2014) [Eric] git-backport-diff against v3: Key: [----] : patches are identical [####] : number of functional differences between upstream/downstream patch [down] : patch is downstream-only The flags [FC] indicate (F)unctional and (C)ontextual differences, respectively 001/10:[----] [--] 'qcow2: Fix leaks in dirty images' 002/10:[----] [--] 'qcow2: Split qcow2_check_refcounts()' 003/10:[----] [--] 'qcow2: Pull check_refblocks() up' 004/10:[----] [--] 'qcow2: Reuse refcount table in calculate_refcounts()' 005/10:[0012] [FC] 'qcow2: Fix refcount blocks beyond image end' 006/10:[----] [--] 'qcow2: Do not perform potentially damaging repairs' 007/10:[0046] [FC] 'qcow2: Rebuild refcount structure during check' 008/10:[----] [--] 'qcow2: Clean up after refcount rebuild' 009/10:[----] [--] 'iotests: Fix test outputs' 010/10:[0105] [FC] 'iotests: Add test for potentially damaging repairs' Max Reitz (10): qcow2: Fix leaks in dirty images qcow2: Split qcow2_check_refcounts() qcow2: Pull check_refblocks() up qcow2: Reuse refcount table in calculate_refcounts() qcow2: Fix refcount blocks beyond image end qcow2: Do not perform potentially damaging repairs qcow2: Rebuild refcount structure during check qcow2: Clean up after refcount rebuild iotests: Fix test outputs iotests: Add test for potentially damaging repairs block/qcow2-refcount.c | 678 ++++++++++++++++++++++++++++++++------------- block/qcow2.c | 2 +- tests/qemu-iotests/039.out | 10 +- tests/qemu-iotests/060.out | 10 +- tests/qemu-iotests/061.out | 18 +- tests/qemu-iotests/104 | 141 ++++++++++ tests/qemu-iotests/104.out | 110 ++++++++ tests/qemu-iotests/group | 1 + 8 files changed, 764 insertions(+), 206 deletions(-) create mode 100755 tests/qemu-iotests/104 create mode 100644 tests/qemu-iotests/104.out -- 2.1.0