Problem with NTFS XATTRs seems to be back with Win7 SP1

Post here if you found a bug or something really not expected in the program
Post Reply
gladiac
Posts: 2
Joined: Mon Feb 21, 2011 9:31 am

Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by gladiac » Mon Feb 21, 2011 9:48 am

Hi,

I just created a new image of a Windows 7 Installation with the new SP1 already installed and that worked without any error. The problem now is that the restoration throws the following 2 errors:

Code: Select all

-[01][ 94%][HARDLINK] /Windows/winsxs/x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_e8de47170f0fa903/kerberos.dll
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Windows/winsxs/x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_e8de47170f0fa903/kerberos.dll,system.ntfs_dos_name) failed
-[01][ 99%][HARDLINK] /Windows/winsxs/x86_wvmbushid.inf_31bf3856ad364e35_6.1.7601.17514_none_f2bd94a80aa9bb69/vmbushid.sys
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/Windows/winsxs/x86_wvmbushid.inf_31bf3856ad364e35_6.1.7601.17514_none_f2bd94a80aa9bb69/vmbushid.sys,system.ntfs_dos_name) failed
The image was done with the current sysresccd 2.0.1 from a normal harddrive which has no bad blocks. Is this a bug in ntfs-3g?
This is the commandline: fsarchiver -v -j 2 restfs win7_v1.0.fsa id=0,dest=/dev/sda1,mkfs=ntfs id=1,dest=/dev/sda2,mkfs=ntfs

cheers
chris

EDIT: This archive has the complete logfile plus the deploy-script I wrote myself to automate the imaging-process.
DL: http://uploaded.to/file/4ahk7r

tuipveus
Posts: 44
Joined: Thu May 14, 2009 7:02 pm

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by tuipveus » Sat Apr 07, 2012 6:27 pm

I have also error with Win7 SP1:

oper_save.c#281,createar_item_xattr(): file [/filehere] has an xattr [user.somedata] with data too big (size 1048576, maxsize=64k)

None of the datas are even close to 64k, why this warning then?

If I understood right, data is 1 Megabyte in my example).

ps. Files were some files of AVG 2012 (antivirus) program, maybe nothing too valuable to loose.

pps. I got this error about 10 times, but at the end it says that only 3 files had errors during copying.

morgoth
Posts: 7
Joined: Mon Apr 18, 2011 11:10 am

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by morgoth » Fri Aug 31, 2012 1:12 pm

I have the same problem. Is there a solution for this?
Fsarchiver is so nice solution. Keep up good work.
Thanks for any help.

morgoth
Posts: 7
Joined: Mon Apr 18, 2011 11:10 am

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by morgoth » Mon Sep 03, 2012 11:41 am

I think I have solution.
I have downloaded the latest ntfs-3g and fuse, built it and installed it.
After this I have rebuilt fsarchiver and this error doesn't occur any more.

admin
Site Admin
Posts: 550
Joined: Sat Feb 21, 2004 12:12 pm

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by admin » Mon Sep 03, 2012 9:02 pm

fsarchiver does not have to be rebuilt after ntfs-3g is upgraded as it is not linked. Which ntfs-3g version are you using ?

morgoth
Posts: 7
Joined: Mon Apr 18, 2011 11:10 am

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by morgoth » Wed Sep 05, 2012 10:25 am

I'm using 2012.1.15. After upgrading ntfs-32 form 2010 to 2012 I was not able to reproduce this problem.
So may be the bug was in ntfs-3g?

morgoth
Posts: 7
Joined: Mon Apr 18, 2011 11:10 am

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by morgoth » Mon Sep 17, 2012 8:14 am

I was wrong, with the newest fsarchiver and ntfs-3g the problem sometimes appears, especially with Windows 7 64bits.
Here is info about this:

Code: Select all

[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys,system.ntfs_dos_name) failed

Code: Select all

-[00][ 34%][HARDLINK] /ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys
            winattr:lsetxattr(/ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys, system.ntfs_acl)=0
            winattr:lsetxattr(/ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys, system.ntfs_attrib)=0
            winattr:lsetxattr(/ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys, system.ntfs_times)=0
[errno=5, Input/output error]: oper_restore.c#255,extractar_restore_attr_windows(): winattr:lsetxattr(/ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys,system.ntfs_dos_name) failed
oper_restore.c#463,extractar_restore_obj_hardlink(): cannot restore file attributes for file [/ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys]

morgoth
Posts: 7
Joined: Mon Apr 18, 2011 11:10 am

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by morgoth » Wed Sep 19, 2012 12:19 pm

And ntfsinfo fom this file:

Code: Select all

ntfsinfo -vF /ProgramData/Norton/{0C55C096-0F1D-4F28-AAA2-85EF591126E7}/NIS_20.1.0.24/Definitions/VirusDefs/20120918.017/eraser64.sys /dev/sda1
Dumping Inode 165 (0xa5)
Upd. Seq. Array Off.:	 48 (0x30)
Upd. Seq. Array Count:	 3 (0x3)
Upd. Seq. Number:	 81 (0x51)
LogFile Seq. Number:	 0x0
MFT Record Seq. Numb.:	 1 (0x1)
Number of Hard Links:	 2 (0x2)
Attribute Offset:	 56 (0x38)
MFT Record Flags:	 IN_USE 
Bytes Used:		 488 (0x1e8) bytes
Bytes Allocated:	 1024 (0x400) bytes
Next Attribute Instance: 5 (0x5)
MFT Padding:	00 00 
Dumping attribute $STANDARD_INFORMATION (0x10) from mft record 165 (0xa5)
	Attribute length:	 96 (0x60)
	Resident: 		 Yes
	Name length:		 0 (0x0)
	Name offset:		 0 (0x0)
	Attribute flags:	 0x0000
	Attribute instance:	 0 (0x0)
	Data size:		 72 (0x48)
	Data offset:		 24 (0x18)
	Resident flags:		 0x00
	ReservedR:		 0 (0x0)
	File Creation Time:	 Wed Sep 19 01:12:03 2012 UTC
	File Altered Time:	 Sat Aug 18 01:00:00 2012 UTC
	MFT Changed Time:	 Wed Sep 19 11:28:15 2012 UTC
	Last Accessed Time:	 Wed Sep 19 01:12:03 2012 UTC
	File attributes:	 ARCHIVE NOT_CONTENT_INDEXED (0x00000000)
	Maximum versions:	 0 
	Version number:		 0 
	Class ID:		 0 
	User ID:		 0 (0x0)
	Security ID:		 265 (0x109)
	Quota charged:		 0 (0x0)
	Update Sequence Number:	 0 (0x0)
Dumping attribute $FILE_NAME (0x30) from mft record 165 (0xa5)
	Attribute length:	 120 (0x78)
	Resident: 		 Yes
	Name length:		 0 (0x0)
	Name offset:		 0 (0x0)
	Attribute flags:	 0x0000
	Attribute instance:	 4 (0x4)
	Data size:		 90 (0x5a)
	Data offset:		 24 (0x18)
	Resident flags:		 0x01
	ReservedR:		 0 (0x0)
	Parent directory:	 5260 (0x148c)
	File Creation Time:	 Wed Sep 19 01:12:03 2012 UTC
	File Altered Time:	 Sat Aug 18 01:00:00 2012 UTC
	MFT Changed Time:	 Wed Sep 19 11:28:15 2012 UTC
	Last Accessed Time:	 Wed Sep 19 01:12:03 2012 UTC
	Allocated Size:		 139264 (0x22000)
	Data Size:		 138912 (0x21ea0)
	Filename Length:	 12 (0xc)
	File attributes:	 ARCHIVE NOT_CONTENT_INDEXED (0x00000000)
	Namespace:		 Win32 & DOS
	Filename:		 'eraser64.sys'
Dumping attribute $FILE_NAME (0x30) from mft record 165 (0xa5)
	Attribute length:	 136 (0x88)
	Resident: 		 Yes
	Name length:		 0 (0x0)
	Name offset:		 0 (0x0)
	Attribute flags:	 0x0000
	Attribute instance:	 3 (0x3)
	Data size:		 112 (0x70)
	Data offset:		 24 (0x18)
	Resident flags:		 0x01
	ReservedR:		 0 (0x0)
	Parent directory:	 163 (0xa3)
	File Creation Time:	 Wed Sep 19 01:12:03 2012 UTC
	File Altered Time:	 Sat Aug 18 01:00:00 2012 UTC
	MFT Changed Time:	 Wed Sep 19 11:28:15 2012 UTC
	Last Accessed Time:	 Wed Sep 19 01:12:03 2012 UTC
	Allocated Size:		 139264 (0x22000)
	Data Size:		 0 (0x0)
	Filename Length:	 23 (0x17)
	File attributes:	 ARCHIVE (0x00000000)
	Namespace:		 POSIX
	Filename:		 'EraserUtilRebootDrv.sys'
Dumping attribute $DATA (0x80) from mft record 165 (0xa5)
	Attribute length:	 72 (0x48)
	Resident: 		 No
	Name length:		 0 (0x0)
	Name offset:		 64 (0x40)
	Attribute flags:	 0x0000
	Attribute instance:	 2 (0x2)
	Lowest VCN		 0 (0x0)
	Highest VCN:		 33 (0x21)
	Mapping pairs offset:	 64 (0x40)
	Compression unit:	 0 (0x0)
	Data size:		 138912 (0x21ea0)
	Allocated size:		 139264 (0x22000)
	Initialized size:	 138912 (0x21ea0)
	Runlist:	VCN		LCN		Length
			0x0		0x2cdaf8		0x22
End of inode reached
Is it bug in fsarchiver or ntfs-3g?

morgoth
Posts: 7
Joined: Mon Apr 18, 2011 11:10 am

Re: Problem with NTFS XATTRs seems to be back with Win7 SP1

Post by morgoth » Thu Sep 27, 2012 1:48 pm

More info about this can be found on tuxera forum: http://tuxera.com/forum/viewtopic.php?f ... 1ab77c6b1a
This is huge problem for fsarchiver, it is unusable for Windows backuping.

Post Reply