mirror of
https://github.com/webmin/webmin.git
synced 2026-02-18 12:32:38 +00:00
b593501cff
All $err type error messages in HTML are safely escaped now.
URL-encoding in links:
I have implemented urlize() in all places where user input ($in{'device'}, $in{'slice'}, $in{'part'}) was included in the URL (footer/redirect/other link), e.g. edit_slice.cgi?device=...&slice=....
Affected files include: create_part.cgi, create_slice.cgi, delete_part.cgi, delete_slice.cgi, change_slice_label.cgi, part_form.cgi, slice_form.cgi, edit_slice.cgi, edit_part.cgi, fsck.cgi, newfs.cgi, newfs_form.cgi, save_part.cgi, save_slice.cgi, save_slice_label.cgi, zfs_create.cgi, zvol_create.cgi.
113 lines
3.6 KiB
Perl
Executable File
113 lines
3.6 KiB
Perl
Executable File
#!/usr/local/bin/perl
|
|
# Check the filesystem on a partition
|
|
|
|
use strict;
|
|
use warnings;
|
|
no warnings 'redefine';
|
|
no warnings 'uninitialized';
|
|
require './bsdfdisk-lib.pl';
|
|
our ( %in, %text, $module_name );
|
|
&ReadParse();
|
|
&error_setup( $text{'fsck_err'} );
|
|
|
|
# Get the disk and slice
|
|
my @disks = &list_disks_partitions();
|
|
$in{'device'} =~ /^[a-zA-Z0-9_\/.-]+$/
|
|
or &error( $text{'disk_edevice'} || 'Invalid device' );
|
|
$in{'device'} !~ /\.\./ or &error( $text{'disk_edevice'} || 'Invalid device' );
|
|
$in{'slice'} =~ /^\d+$/ or &error( $text{'slice_egone'} );
|
|
$in{'part'} =~ /^[a-z]$/ or &error( $text{'part_egone'} ) if $in{'part'};
|
|
my ($disk) = grep { $_->{'device'} eq $in{'device'} } @disks;
|
|
$disk || &error( $text{'disk_egone'} );
|
|
my ($slice) = grep { $_->{'number'} eq $in{'slice'} } @{ $disk->{'slices'} };
|
|
$slice || &error( $text{'slice_egone'} );
|
|
my ( $object, $part );
|
|
|
|
if ( $in{'part'} ne '' ) {
|
|
($part) = grep { $_->{'letter'} eq $in{'part'} } @{ $slice->{'parts'} };
|
|
$part || &error( $text{'part_egone'} );
|
|
$object = $part;
|
|
}
|
|
else {
|
|
$object = $slice;
|
|
}
|
|
|
|
# Safety checks: do not run fsck on boot partitions or in-use devices
|
|
if ( is_boot_partition($object) ) {
|
|
&error( $in{'part'} ne '' ? $text{'part_eboot'} : $text{'slice_eboot'} );
|
|
}
|
|
my @st_obj = &fdisk::device_status( $object->{'device'} );
|
|
my $use_obj = &fdisk::device_status_link(@st_obj);
|
|
if ( @st_obj && $st_obj[2] ) {
|
|
&error( &text( 'part_esave', &html_escape($use_obj) ) );
|
|
}
|
|
|
|
&ui_print_unbuffered_header( $object->{'desc'}, $text{'fsck_title'}, "" );
|
|
|
|
# If device is ZFS, do not run fsck; show zpool status instead
|
|
my $zmap = get_all_zfs_info();
|
|
if ( $zmap->{ $object->{'device'} } ) {
|
|
my $pool = $zmap->{ $object->{'device'} };
|
|
$pool =~ s/^.*?\b([A-Za-z0-9_\-]+)\b.*$/$1/;
|
|
print &text(
|
|
'fsck_checking', "<tt>" . &html_escape( $object->{'device'} ) . "</tt>"
|
|
),
|
|
"<br>\n";
|
|
print "<pre>\n";
|
|
my $cmd = "zpool status 2>&1";
|
|
&additional_log( 'exec', undef, $cmd );
|
|
print &html_escape( &backquote_command($cmd) );
|
|
print "</pre>";
|
|
print $text{'fsck_done'}, "<p>\n";
|
|
}
|
|
else {
|
|
# Do the creation
|
|
print &text(
|
|
'fsck_checking', "<tt>" . &html_escape( $object->{'device'} ) . "</tt>"
|
|
),
|
|
"<br>\n";
|
|
print "<pre>\n";
|
|
my $cmd = &get_check_filesystem_command( $disk, $slice, $part );
|
|
&additional_log( 'exec', undef, $cmd );
|
|
my $out = &backquote_command( $cmd . " 2>&1" );
|
|
foreach my $line ( split( /\n/, $out ) ) {
|
|
$line =~ s/[^\x09\x0A\x0D\x20-\x7E]//g;
|
|
print &html_escape($line) . "\n";
|
|
}
|
|
print "</pre>";
|
|
my $rc = $? >> 8;
|
|
if ( $rc == 0 ) {
|
|
print $text{'fsck_done'}, "<p>\n";
|
|
}
|
|
elsif ( $rc == 1 ) {
|
|
print $text{'fsck_done'}, "<p>\n";
|
|
print $text{'fsck_fixed'}, "<p>\n" if ( $text{'fsck_fixed'} );
|
|
}
|
|
elsif ( $rc == 2 ) {
|
|
print $text{'fsck_done'}, "<p>\n";
|
|
print $text{'fsck_reboot'}, "<p>\n" if ( $text{'fsck_reboot'} );
|
|
}
|
|
else {
|
|
print $text{'fsck_failed'}, "<p>\n";
|
|
}
|
|
}
|
|
&webmin_log( "fsck", $in{'part'} ne '' ? "part" : "object",
|
|
$object->{'device'}, $object );
|
|
|
|
if ( $in{'part'} ne '' ) {
|
|
my $url_device = &urlize( $in{'device'} );
|
|
my $url_slice = &urlize( $in{'slice'} );
|
|
my $url_part = &urlize( $in{'part'} );
|
|
&ui_print_footer(
|
|
"edit_part.cgi?device=$url_device&slice=$url_slice&part=$url_part",
|
|
$text{'part_return'}
|
|
);
|
|
}
|
|
else {
|
|
my $url_device = &urlize( $in{'device'} );
|
|
my $url_slice = &urlize( $in{'slice'} );
|
|
&ui_print_footer(
|
|
"edit_slice.cgi?device=$url_device&slice=$url_slice",
|
|
$text{'slice_return'} );
|
|
}
|