Enterprise Vault partition backups cause beremote.exe to crash on bedsev.dll
| Article:TECH181982 | | | Created: 2012-02-22 | | | Updated: 2012-06-18 | | | Article URL http://www.symantec.com/docs/TECH181982 |
Problem
When attempting a backup of an Enterprise Vault Partition, beremote on the Enterprise Vault server crashes on bedsev.dll.
Error
A beremote log from the Vault Server contains the following information:
BEREMOTE: [02/08/12 11:14:39] [8400] [fsys\ev] -
FS_FshEVBase::ModName - entering.
BEREMOTE: [02/08/12 11:14:39] [8400] [fsys\ev] -
FS_FshEVBase::ModName - EV_ModName: path delim \
BEREMOTE: [02/08/12 11:14:39] [8400] [fsys\ev] -
FS_FshEVBase::ModName - exiting.
BEREMOTE: [02/08/12 11:14:39] [8400] [fsys\ev] -
FS_FshEVBase::GetOSName - exiting.
BEREMOTE: [02/08/12 11:14:39] [8400] [fsys\ev] -
FS_FshEVBase::SpecExcludeObj - entering.
A mini dump of the crash reveals the following stack trace:
STACK_TEXT:
00000000`0b41c0a0 00000000`0ef092f1 : 00000000`00000001 00000000`0b7fcbd0
00000000`0b864490 00000000`04f47170 : bedsev!FS_FshEVBase::SpecExcludeObj+0xd9
[e:\nicobar\5204r\engine\fsys\ev\evcommon\fs_fshevbase.cpp @ 1947]
00000000`0b41c2a0 00000000`0ef0a78c : 00000000`0b864490 00000000`04f47100
00000000`00000001 00000000`00000001 : bebsdu!FS_SpecExcludeObj+0x61
[e:\nicobar\5204r\engine\inc\fstable.h @ 1247]
00000000`0b41c2e0 00000000`0ef0aa6a : 00000000`00000000 00000000`00000000
00000000`0b41c510 00000000`00000001 : bebsdu!BSD_MatchObj+0x4ac
[e:\nicobar\5204r\engine\bsdu\bsdmatch.cpp @ 636]
00000000`0b41c410 00000000`026185a0 : 00000000`00000007 0000ea0b`c5f6a1b7
00000000`00000000 00000000`0b864490 : bebsdu!BSD_MatchObj+0x5a
[e:\nicobar\5204r\engine\bsdu\bsdmatch.cpp @ 449]
00000000`0b41c460 00000000`02618512 : 00000000`00000016 00000000`03c78d14
00000000`04f47170 00000000`0b41c5b0 : ndmpsrvr!BsdMatcher::operator()+0x30
[e:\nicobar\5204r\engine\inc\bsdmatcher.h @ 101]
00000000`0b41c4a0 00000000`026508fb : 00000000`0b90afe0 00000000`00000001
00000000`00000000 00000000`024d0000 : ndmpsrvr!BsdMatcher::operator()+0x22
[e:\nicobar\5204r\engine\inc\bsdmatcher.h @ 73]
00000000`0b41c4e0 00000000`02657fbd : 00000000`0b7c01f0 00000000`00e52cd0
00000000`00000000 00000000`025057e0 : ndmpsrvr!DsVisitor::WalkTree+0x45b
[e:\nicobar\5204r\engine\inc\dsvisitor.h @ 463]
00000000`0b41e6b0 00000000`0265c36b : 00000000`00000000 00000000`00e52cd0
00000000`00e59b50 00000000`0b41ea90 : ndmpsrvr!
BackupDirector::PerformTraditionalBackup+0x12d
[e:\nicobar\5204r\engine\ndmp\loops\backupdirector.h @ 594]
00000000`0b41e770 00000000`0265d2dc : 00000000`0b41ea90 00000000`0b8cee80
00000000`0b91a960 00000000`00000000 : ndmpsrvr!BackupDirector::operator()+0x2db
[e:\nicobar\5204r\engine\ndmp\loops\backupdirector.h @ 503]
00000000`0b41e9e0 00000000`026362a9 : 00000000`00e52cd0 00000000`0b8cee80
00000000`0b8d2130 00000000`0b8cee80 : ndmpsrvr!LP_BackupDLE+0x83c
[e:\nicobar\5204r\engine\ndmp\loops\back_dle.cpp @ 1413]
00000000`0b41f040 00000000`02570076 : 00000000`00000000 00000000`00000000
00000000`0b9782b0 00000000`00000000 : ndmpsrvr!LP_DoBackup+0xe99
[e:\nicobar\5204r\engine\ndmp\loops\lpbackup.cpp @ 1239]
00000000`0b41f3b0 00000000`02570932 : 00000000`00a24cb0 00000000`024e4ca0
00000000`00000401 00000000`0d916d40 : ndmpsrvr!startBackup+0x7a6
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmp_data.cpp @ 12038]
00000000`0b41f6b0 00000000`00364bc4 : 00000000`04e17700 00000000`00346698
00000000`00000000 00000000`00000000 : ndmpsrvr!ndmpdDataStartBackup+0xc2
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmp_data.cpp @ 2428]
00000000`0b41f6e0 00000000`00365e07 : 00000000`04e17700 00000000`00000001
00000000`00000000 00000000`0b41fa08 : ndmpcomm!ndmp_process_messages+0x254
[e:\nicobar\5204r\engine\ndmp\ndmpcomm\ndmp_comm.cpp @ 5115]
00000000`0b41f760 00000000`02588858 : 00000000`00000000 00000000`00000000
00000000`ffffffff 00000000`0b9782b0 : ndmpcomm!ndmpProcessRequests+0x27
[e:\nicobar\5204r\engine\ndmp\ndmpcomm\ndmp_comm.cpp @ 3893]
00000000`0b41f790 00000000`02587c2d : 00000000`04f42800 00000000`000003e8
00000000`00000000 00000000`00000000 : ndmpsrvr!ndmpdConnectionFileHandler+0x18
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmpd.cpp @ 948]
00000000`0b41f7c0 00000000`0258a8c7 : 000003e8`00000000 00000000`00004788
00000000`00000000 00000000`00004788 : ndmpsrvr!ndmpdSelect+0x31d
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmp_util.cpp @ 495]
00000000`0b41fe50 00000000`740a35b7 : 00000000`04f6bf40 00000000`0b7d6a30
00000000`00000000 00000000`00000000 : ndmpsrvr!ndmpdConnectionHandler+0x277
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmpd.cpp @ 826]
00000000`0b41ff00 00000000`740a366a : 00000000`741595c0 00000000`04f6bf40
00000000`00000000 00000000`00000000 : msvcr80!endthread+0x57
00000000`0b41ff30 00000000`7758652d : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : msvcr80!endthread+0x10a
00000000`0b41ff60 00000000`77c7c521 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0b41ff90 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
Cause
This issue is a side effect of changes introduced in Backup Exec 2010 R3, which allowed for exclusions of certain file types within the partition folders. In certain environments, NTFS is passing a null value to the EV agents exclusion engine and causing the crash.
Solution
This issue has been resolved in Backup Exec 2010 R3 Hotfix 176937. Please see related documents.
|
|
| Source | ETrack |
| Value | 2697100 |
| Description | EV: beremote crash on bedsev.dll when null value is passed to realfsh during partition backup. |
Article URL http://www.symantec.com/docs/TECH181982
Terms of use for this information are found in Legal Notices









Thank you.