Enterprise Vault partition backups cause beremote.exe to crash on bedsev.dll

Article:TECH181982  |  Created: 2012-02-22  |  Updated: 2012-06-18  |  Article URL http://www.symantec.com/docs/TECH181982
Article Type
Technical Solution


Issue



When attempting a backup of an Enterprise Vault Partition, beremote on the Enterprise Vault server crashes on bedsev.dll.


Error



A beremote log from the Vault Server contains the following information:

BEREMOTE: [02/08/12 11:14:39] [8400]     [fsys\ev]            -
FS_FshEVBase::ModName - entering.
BEREMOTE: [02/08/12 11:14:39] [8400]     [fsys\ev]            -
FS_FshEVBase::ModName - EV_ModName: path delim \
BEREMOTE: [02/08/12 11:14:39] [8400]     [fsys\ev]            -
FS_FshEVBase::ModName - exiting.
BEREMOTE: [02/08/12 11:14:39] [8400]     [fsys\ev]            -
FS_FshEVBase::GetOSName - exiting.
BEREMOTE: [02/08/12 11:14:39] [8400]     [fsys\ev]            -
FS_FshEVBase::SpecExcludeObj - entering.
 

A mini dump of the crash reveals the following stack trace:

STACK_TEXT:
00000000`0b41c0a0 00000000`0ef092f1 : 00000000`00000001 00000000`0b7fcbd0
00000000`0b864490 00000000`04f47170 : bedsev!FS_FshEVBase::SpecExcludeObj+0xd9
[e:\nicobar\5204r\engine\fsys\ev\evcommon\fs_fshevbase.cpp @ 1947]
00000000`0b41c2a0 00000000`0ef0a78c : 00000000`0b864490 00000000`04f47100
00000000`00000001 00000000`00000001 : bebsdu!FS_SpecExcludeObj+0x61
[e:\nicobar\5204r\engine\inc\fstable.h @ 1247]
00000000`0b41c2e0 00000000`0ef0aa6a : 00000000`00000000 00000000`00000000
00000000`0b41c510 00000000`00000001 : bebsdu!BSD_MatchObj+0x4ac
[e:\nicobar\5204r\engine\bsdu\bsdmatch.cpp @ 636]
00000000`0b41c410 00000000`026185a0 : 00000000`00000007 0000ea0b`c5f6a1b7
00000000`00000000 00000000`0b864490 : bebsdu!BSD_MatchObj+0x5a
[e:\nicobar\5204r\engine\bsdu\bsdmatch.cpp @ 449]
00000000`0b41c460 00000000`02618512 : 00000000`00000016 00000000`03c78d14
00000000`04f47170 00000000`0b41c5b0 : ndmpsrvr!BsdMatcher::operator()+0x30
[e:\nicobar\5204r\engine\inc\bsdmatcher.h @ 101]
00000000`0b41c4a0 00000000`026508fb : 00000000`0b90afe0 00000000`00000001
00000000`00000000 00000000`024d0000 : ndmpsrvr!BsdMatcher::operator()+0x22
[e:\nicobar\5204r\engine\inc\bsdmatcher.h @ 73]
00000000`0b41c4e0 00000000`02657fbd : 00000000`0b7c01f0 00000000`00e52cd0
00000000`00000000 00000000`025057e0 : ndmpsrvr!DsVisitor::WalkTree+0x45b
[e:\nicobar\5204r\engine\inc\dsvisitor.h @ 463]
00000000`0b41e6b0 00000000`0265c36b : 00000000`00000000 00000000`00e52cd0
00000000`00e59b50 00000000`0b41ea90 : ndmpsrvr!
BackupDirector::PerformTraditionalBackup+0x12d
[e:\nicobar\5204r\engine\ndmp\loops\backupdirector.h @ 594]
00000000`0b41e770 00000000`0265d2dc : 00000000`0b41ea90 00000000`0b8cee80
00000000`0b91a960 00000000`00000000 : ndmpsrvr!BackupDirector::operator()+0x2db
[e:\nicobar\5204r\engine\ndmp\loops\backupdirector.h @ 503]
00000000`0b41e9e0 00000000`026362a9 : 00000000`00e52cd0 00000000`0b8cee80
00000000`0b8d2130 00000000`0b8cee80 : ndmpsrvr!LP_BackupDLE+0x83c
[e:\nicobar\5204r\engine\ndmp\loops\back_dle.cpp @ 1413]
00000000`0b41f040 00000000`02570076 : 00000000`00000000 00000000`00000000
00000000`0b9782b0 00000000`00000000 : ndmpsrvr!LP_DoBackup+0xe99
[e:\nicobar\5204r\engine\ndmp\loops\lpbackup.cpp @ 1239]
00000000`0b41f3b0 00000000`02570932 : 00000000`00a24cb0 00000000`024e4ca0
00000000`00000401 00000000`0d916d40 : ndmpsrvr!startBackup+0x7a6
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmp_data.cpp @ 12038]
00000000`0b41f6b0 00000000`00364bc4 : 00000000`04e17700 00000000`00346698
00000000`00000000 00000000`00000000 : ndmpsrvr!ndmpdDataStartBackup+0xc2
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmp_data.cpp @ 2428]
00000000`0b41f6e0 00000000`00365e07 : 00000000`04e17700 00000000`00000001
00000000`00000000 00000000`0b41fa08 : ndmpcomm!ndmp_process_messages+0x254
[e:\nicobar\5204r\engine\ndmp\ndmpcomm\ndmp_comm.cpp @ 5115]
00000000`0b41f760 00000000`02588858 : 00000000`00000000 00000000`00000000
00000000`ffffffff 00000000`0b9782b0 : ndmpcomm!ndmpProcessRequests+0x27
[e:\nicobar\5204r\engine\ndmp\ndmpcomm\ndmp_comm.cpp @ 3893]
00000000`0b41f790 00000000`02587c2d : 00000000`04f42800 00000000`000003e8
00000000`00000000 00000000`00000000 : ndmpsrvr!ndmpdConnectionFileHandler+0x18
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmpd.cpp @ 948]
00000000`0b41f7c0 00000000`0258a8c7 : 000003e8`00000000 00000000`00004788
00000000`00000000 00000000`00004788 : ndmpsrvr!ndmpdSelect+0x31d
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmp_util.cpp @ 495]
00000000`0b41fe50 00000000`740a35b7 : 00000000`04f6bf40 00000000`0b7d6a30
00000000`00000000 00000000`00000000 : ndmpsrvr!ndmpdConnectionHandler+0x277
[e:\nicobar\5204r\engine\ndmp\ndmpsrvr\ndmpd.cpp @ 826]
00000000`0b41ff00 00000000`740a366a : 00000000`741595c0 00000000`04f6bf40
00000000`00000000 00000000`00000000 : msvcr80!endthread+0x57
00000000`0b41ff30 00000000`7758652d : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : msvcr80!endthread+0x10a
00000000`0b41ff60 00000000`77c7c521 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0xd
00000000`0b41ff90 00000000`00000000 : 00000000`00000000 00000000`00000000
00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21
 

 


Cause



This issue is a side effect of changes introduced in Backup Exec 2010 R3, which allowed for exclusions of certain file types within the partition folders. In certain environments, NTFS is passing a null value to the EV agents exclusion engine and causing the crash.


Solution



 This issue has been resolved in Backup Exec 2010 R3 Hotfix 176937.  Please see related documents.


Supplemental Materials

SourceETrack
Value2697100
Description

EV: beremote crash on bedsev.dll when null value is passed to realfsh during partition backup.




Article URL http://www.symantec.com/docs/TECH181982


Terms of use for this information are found in Legal Notices