Enum AnomalyKind 

#[non_exhaustive]
pub enum AnomalyKind {
    UberblockChecksumMismatch {
        txg: u64,
        slot: usize,
    },
    LabelDivergence {
        field: &'static str,
        label: usize,
        reason: String,
    },
    BlkptrChecksumMismatch {
        dva_offset: u64,
        object_type: u8,
    },
    ImpossibleGeometry {
        field: &'static str,
        value: u64,
        limit: u64,
    },
}

Classification of a ZFS structural-integrity anomaly (F-INTEGRITY). Each variant carries the evidence needed to reproduce the observation.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

UberblockChecksumMismatch

The active uberblock’s ub_rootbp checksum does not verify against the MOS objset block it points at — the top-of-tree Merkle check failing, consistent with corruption or post-write tampering of the pool root.

Fields

txg: u64

The transaction group of the active uberblock whose rootbp failed.

slot: usize

The uberblock ring slot the active uberblock was found in.

LabelDivergence

The vdev labels disagree on a pool-identity/geometry field (pool_guid/txg/ashift) — consistent with a torn or tampered label. A label whose config region cannot be parsed at all is reported here too.

Fields

field: &'static str

The config field that diverged (pool_guid, txg, ashift), or config when a label’s nvlist could not be parsed.

label: usize

The label index (0..4) that diverged from the others.

reason: String

Human-readable description of the divergence.

BlkptrChecksumMismatch

A reachable metadata block (from the active uberblock’s MOS/objset tree) whose blkptr checksum does not verify — a dead / corrupt / tampered block.

Fields

dva_offset: u64

The block’s DVA[0] physical byte offset in the image.

object_type: u8

The DMU object type carried by the block pointer.

ImpossibleGeometry

A size/count/offset field beyond what the image can hold — an allocation-bomb / corruption guard.

Fields

field: &'static str

The offending field name.

value: u64

The value read from the structure.

limit: u64

The sane upper bound derived from the image size / spec.

Implementations

impl AnomalyKind

pub fn severity(&self) -> Severity

Severity — the single source of truth for this kind.

pub fn code(&self) -> &'static str

Stable machine-readable, scheme-prefixed code.

pub fn note(&self) -> String

Human-readable, “consistent with” note.

Trait Implementations

impl Clone for AnomalyKind

fn clone(&self) -> AnomalyKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalyKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AnomalyKind

impl PartialEq for AnomalyKind

fn eq(&self, other: &AnomalyKind) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AnomalyKind