static int check_refblocks(BlockDriverState *bs, BdrvCheckResult *res,

                           BdrvCheckMode fix, bool *rebuild,

                           uint16_t **refcount_table, int64_t *nb_clusters)

{

    BDRVQcowState *s = bs->opaque;

    int64_t i, size;

    int ret;



    for(i = 0; i < s->refcount_table_size; i++) {

        uint64_t offset, cluster;

        offset = s->refcount_table[i];

        cluster = offset >> s->cluster_bits;



        /* Refcount blocks are cluster aligned */

        if (offset_into_cluster(s, offset)) {

            fprintf(stderr, "ERROR refcount block %" PRId64 " is not "

                "cluster aligned; refcount table entry corrupted\n", i);

            res->corruptions++;

            *rebuild = true;

            continue;

        }



        if (cluster >= *nb_clusters) {

            fprintf(stderr, "%s refcount block %" PRId64 " is outside image\n",

                    fix & BDRV_FIX_ERRORS ? "Repairing" : "ERROR", i);



            if (fix & BDRV_FIX_ERRORS) {

                int64_t new_nb_clusters;



                if (offset > INT64_MAX - s->cluster_size) {

                    ret = -EINVAL;

                    goto resize_fail;

                }



                ret = bdrv_truncate(bs->file, offset + s->cluster_size);

                if (ret < 0) {

                    goto resize_fail;

                }

                size = bdrv_getlength(bs->file);

                if (size < 0) {

                    ret = size;

                    goto resize_fail;

                }



                new_nb_clusters = size_to_clusters(s, size);

                assert(new_nb_clusters >= *nb_clusters);



                ret = realloc_refcount_array(s, refcount_table,

                                             nb_clusters, new_nb_clusters);

                if (ret < 0) {

                    res->check_errors++;

                    return ret;

                }



                if (cluster >= *nb_clusters) {

                    ret = -EINVAL;

                    goto resize_fail;

                }



                res->corruptions_fixed++;

                ret = inc_refcounts(bs, res, refcount_table, nb_clusters,

                                    offset, s->cluster_size);

                if (ret < 0) {

                    return ret;

                }

                /* No need to check whether the refcount is now greater than 1:

                 * This area was just allocated and zeroed, so it can only be

                 * exactly 1 after inc_refcounts() */

                continue;



resize_fail:

                res->corruptions++;

                *rebuild = true;

                fprintf(stderr, "ERROR could not resize image: %s\n",

                        strerror(-ret));

            } else {

                res->corruptions++;

            }

            continue;

        }



        if (offset != 0) {

            ret = inc_refcounts(bs, res, refcount_table, nb_clusters,

                                offset, s->cluster_size);

            if (ret < 0) {

                return ret;

            }

            if ((*refcount_table)[cluster] != 1) {

                fprintf(stderr, "ERROR refcount block %" PRId64

                        " refcount=%d\n", i, (*refcount_table)[cluster]);

                res->corruptions++;

                *rebuild = true;

            }

        }

    }



    return 0;

}

static int check_refblocks(BlockDriverState *bs, BdrvCheckResult *res,

                           BdrvCheckMode fix, bool *rebuild,

                           uint16_t **refcount_table, int64_t *nb_clusters)

{

    BDRVQcowState *s = bs->opaque;

    int64_t i, size;

    int ret;



    for(i = 0; i < s->refcount_table_size; i++) {

        uint64_t offset, cluster;

        offset = s->refcount_table[i];

        cluster = offset >> s->cluster_bits;



        

        if (offset_into_cluster(s, offset)) {

            fprintf(stderr, "ERROR refcount block %" PRId64 " is not "

                "cluster aligned; refcount table entry corrupted\n", i);

            res->corruptions++;

            *rebuild = true;

            continue;

        }



        if (cluster >= *nb_clusters) {

            fprintf(stderr, "%s refcount block %" PRId64 " is outside image\n",

                    fix & BDRV_FIX_ERRORS ? "Repairing" : "ERROR", i);



            if (fix & BDRV_FIX_ERRORS) {

                int64_t new_nb_clusters;



                if (offset > INT64_MAX - s->cluster_size) {

                    ret = -EINVAL;

                    goto resize_fail;

                }



                ret = bdrv_truncate(bs->file, offset + s->cluster_size);

                if (ret < 0) {

                    goto resize_fail;

                }

                size = bdrv_getlength(bs->file);

                if (size < 0) {

                    ret = size;

                    goto resize_fail;

                }



                new_nb_clusters = size_to_clusters(s, size);

                assert(new_nb_clusters >= *nb_clusters);



                ret = realloc_refcount_array(s, refcount_table,

                                             nb_clusters, new_nb_clusters);

                if (ret < 0) {

                    res->check_errors++;

                    return ret;

                }



                if (cluster >= *nb_clusters) {

                    ret = -EINVAL;

                    goto resize_fail;

                }



                res->corruptions_fixed++;

                ret = inc_refcounts(bs, res, refcount_table, nb_clusters,

                                    offset, s->cluster_size);

                if (ret < 0) {

                    return ret;

                }

                





                continue;



resize_fail:

                res->corruptions++;

                *rebuild = true;

                fprintf(stderr, "ERROR could not resize image: %s\n",

                        strerror(-ret));

            } else {

                res->corruptions++;

            }

            continue;

        }



        if (offset != 0) {

            ret = inc_refcounts(bs, res, refcount_table, nb_clusters,

                                offset, s->cluster_size);

            if (ret < 0) {

                return ret;

            }

            if ((*refcount_table)[cluster] != 1) {

                fprintf(stderr, "ERROR refcount block %" PRId64

                        " refcount=%d\n", i, (*refcount_table)[cluster]);

                res->corruptions++;

                *rebuild = true;

            }

        }

    }



    return 0;

}

                           uint16_t **refcount_table, int64_t *nb_clusters)             if ((*refcount_table)[cluster] != 1) {                         " refcount=%d\n", i, (*refcount_table)[cluster]);
static int FUNC_0(BlockDriverState *VAR_0, BdrvCheckResult *VAR_1,

                           BdrvCheckMode VAR_2, bool *VAR_3,

                           uint16_t **VAR_4, int64_t *VAR_5)

{

    BDRVQcowState *s = VAR_0->opaque;

    int64_t i, size;

    int VAR_6;



    for(i = 0; i < s->refcount_table_size; i++) {

        uint64_t offset, cluster;

        offset = s->VAR_4[i];

        cluster = offset >> s->cluster_bits;



        

        if (offset_into_cluster(s, offset)) {

            fprintf(stderr, "ERROR refcount block %" PRId64 " is not "

                "cluster aligned; refcount table entry corrupted\n", i);

            VAR_1->corruptions++;

            *VAR_3 = true;

            continue;

        }



        if (cluster >= *VAR_5) {

            fprintf(stderr, "%s refcount block %" PRId64 " is outside image\n",

                    VAR_2 & BDRV_FIX_ERRORS ? "Repairing" : "ERROR", i);



            if (VAR_2 & BDRV_FIX_ERRORS) {

                int64_t new_nb_clusters;



                if (offset > INT64_MAX - s->cluster_size) {

                    VAR_6 = -EINVAL;

                    goto resize_fail;

                }



                VAR_6 = bdrv_truncate(VAR_0->file, offset + s->cluster_size);

                if (VAR_6 < 0) {

                    goto resize_fail;

                }

                size = bdrv_getlength(VAR_0->file);

                if (size < 0) {

                    VAR_6 = size;

                    goto resize_fail;

                }



                new_nb_clusters = size_to_clusters(s, size);

                assert(new_nb_clusters >= *VAR_5);



                VAR_6 = realloc_refcount_array(s, VAR_4,

                                             VAR_5, new_nb_clusters);

                if (VAR_6 < 0) {

                    VAR_1->check_errors++;

                    return VAR_6;

                }



                if (cluster >= *VAR_5) {

                    VAR_6 = -EINVAL;

                    goto resize_fail;

                }



                VAR_1->corruptions_fixed++;

                VAR_6 = inc_refcounts(VAR_0, VAR_1, VAR_4, VAR_5,

                                    offset, s->cluster_size);

                if (VAR_6 < 0) {

                    return VAR_6;

                }

                





                continue;



resize_fail:

                VAR_1->corruptions++;

                *VAR_3 = true;

                fprintf(stderr, "ERROR could not resize image: %s\n",

                        strerror(-VAR_6));

            } else {

                VAR_1->corruptions++;

            }

            continue;

        }



        if (offset != 0) {

            VAR_6 = inc_refcounts(VAR_0, VAR_1, VAR_4, VAR_5,

                                offset, s->cluster_size);

            if (VAR_6 < 0) {

                return VAR_6;

            }

            if ((*VAR_4)[cluster] != 1) {

                fprintf(stderr, "ERROR refcount block %" PRId64

                        " refcount=%d\n", i, (*VAR_4)[cluster]);

                VAR_1->corruptions++;

                *VAR_3 = true;

            }

        }

    }



    return 0;

}

static int FUNC_0(BlockDriverState *VAR_0, BdrvCheckResult *VAR_1,
BdrvCheckMode VAR_2, bool *VAR_3,
uint16_t **VAR_4, int64_t *VAR_5)
{ BDRVQcowState *s = VAR_0->opaque; int64_t i, size; int VAR_6; for(i = 0; i < s->refcount_table_size; i++) { uint64_t offset, cluster; offset = s->VAR_4[i]; cluster = offset >> s->cluster_bits; if (offset_into_cluster(s, offset)) { fprintf(stderr, "ERROR refcount block %" PRId64 " is not "
"cluster aligned; refcount table entry corrupted\n", i); VAR_1->corruptions++; *VAR_3 = true; continue; } if (cluster >= *VAR_5) { fprintf(stderr, "%s refcount block %" PRId64 " is outside image\n",
VAR_2 & BDRV_FIX_ERRORS ? "Repairing" : "ERROR", i); if (VAR_2 & BDRV_FIX_ERRORS) { int64_t new_nb_clusters; if (offset > INT64_MAX - s->cluster_size) { VAR_6 = -EINVAL; goto resize_fail; } VAR_6 = bdrv_truncate(VAR_0->file, offset + s->cluster_size); if (VAR_6 < 0) { goto resize_fail; } size = bdrv_getlength(VAR_0->file); if (size < 0) { VAR_6 = size; goto resize_fail; } new_nb_clusters = size_to_clusters(s, size); assert(new_nb_clusters >= *VAR_5); VAR_6 = realloc_refcount_array(s, VAR_4,
VAR_5, new_nb_clusters); if (VAR_6 < 0) { VAR_1->check_errors++; return VAR_6; } if (cluster >= *VAR_5) { VAR_6 = -EINVAL; goto resize_fail; } VAR_1->corruptions_fixed++; VAR_6 = inc_refcounts(VAR_0, VAR_1, VAR_4, VAR_5,
offset, s->cluster_size); if (VAR_6 < 0) { return VAR_6; } continue; resize_fail:
VAR_1->corruptions++; *VAR_3 = true; fprintf(stderr, "ERROR could not resize image: %s\n",
strerror(-VAR_6)); } else { VAR_1->corruptions++; } continue; } if (offset != 0) { VAR_6 = inc_refcounts(VAR_0, VAR_1, VAR_4, VAR_5,
offset, s->cluster_size); if (VAR_6 < 0) { return VAR_6; } if ((*VAR_4)[cluster] != 1) { fprintf(stderr, "ERROR refcount block %" PRId64
" refcount=%d\n", i, (*VAR_4)[cluster]); VAR_1->corruptions++; *VAR_3 = true; } } } return 0; }