Package: fstransform Version: 0.9.3-2 Severity: critical Tags: upstream Justification: causes serious data loss
Dear Maintainer, approximately 1.5 years ago I have discovered a reproducible case of filesystem corruption by fstransform, and reported it upstream: https://github.com/cosmos72/fstransform/issues/13 I understand that the reproducer is with non-default options, but it may also apply with the default options to systems with huge storage and relatively small amount of RAM. This is still unfixed and reproducible in Debian Buster. I would like the package to be removed from Debian, for users' safety. Here is a copy-paste of the reproducer. I understand that the "-m" option asks fstransform to use a ridiculously low amount of RAM, but, on the other hand, the filesystem to be transformed (in this case, from ext4 to xfs) is also very small. wget https://downloads.lede-project.org/releases/17.01.2/targets/x86/64/lede-17.01.2-x86-64-rootfs-ext4.img.gz zcat lede-17.01.2-x86-64-rootfs-ext4.img.gz > lede-17.01.2-x86-64-rootfs-ext4.img losetup /dev/loop7 lede-17.01.2-x86-64-rootfs-ext4.img fstransform --opts-fsremap="-m 262144" /dev/loop7 xfs xfs_repair -n /dev/loop7 # Result: lots of corruption found -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages fstransform depends on: ii libc6 2.28-8 ii libgcc1 1:8.3.0-2 ii libstdc++6 8.3.0-2 fstransform recommends no packages. fstransform suggests no packages. -- no debconf information