Package: fstransform
Version: 0.9.3-2
Severity: critical
Tags: upstream
Justification: causes serious data loss

Dear Maintainer,

approximately 1.5 years ago I have discovered a reproducible case
of filesystem corruption by fstransform, and reported it upstream:

https://github.com/cosmos72/fstransform/issues/13

I understand that the reproducer is with non-default options,
but it may also apply with the default options to systems with
huge storage and relatively small amount of RAM.

This is still unfixed and reproducible in Debian Buster. I
would like the package to be removed from Debian, for users'
safety.

Here is a copy-paste of the reproducer. I understand that the
"-m" option asks fstransform to use a ridiculously low amount
of RAM, but, on the other hand, the filesystem to be transformed
(in this case, from ext4 to xfs) is also very small.

wget 
https://downloads.lede-project.org/releases/17.01.2/targets/x86/64/lede-17.01.2-x86-64-rootfs-ext4.img.gz
zcat lede-17.01.2-x86-64-rootfs-ext4.img.gz > 
lede-17.01.2-x86-64-rootfs-ext4.img
losetup /dev/loop7 lede-17.01.2-x86-64-rootfs-ext4.img
fstransform --opts-fsremap="-m 262144" /dev/loop7 xfs
xfs_repair -n /dev/loop7
# Result: lots of corruption found

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages fstransform depends on:
ii  libc6       2.28-8
ii  libgcc1     1:8.3.0-2
ii  libstdc++6  8.3.0-2

fstransform recommends no packages.

fstransform suggests no packages.

-- no debconf information

Reply via email to