Bug#864602: Double free or corruption error/segfault when trying to restore files from a specific partition

[Andoru]

Package: extundelete
Version: 0.2.4-1
Severity: important
Tags: upstream


I've tried to restore files from a specific partition (ext4), which worked
previously (did this a couple of months ago), but now it seems that I can
only get it to exit with this:
> *** Error in `extundelete': double free or corruption (!prev):
0x0000000001a95000 ***

I've tried recovering from other partitions on the same system (also ext4),
and they work as expected...
At first, since I attempted this from a LMDE 2 Live CD session, I thought
it might be a bug in the specific package that was available, but then I
switched to Ubuntu and to Arch LiveCDs (here's the arch package page:
https://www.archlinux.org/packages/community/x86_64/extundelete/), and they
both gave me the same results, except that at times it segfaults instead of
returning the above error.
Here's the command I used:
> $ sudo extundelete --restore-directory /user/bin/storage /dev/sdb1

Also used the --restore-all and --restore-file, and both gave me the same
result.

So after all of this I gather that the problem is with the partition I'm
trying to recover specifically, and that this is a upstream issue.
Now I know that I should've written this to the package maintainers, but
their mailing list seems dead for quite a while, and I thought you as
maintainers might have a more direct way to contact the developers.
Regardless, I will try to post this bug on their mailing list too.

Here's the superblock info of the partition in case it helps:
Let me know if you need any additional info.

$ sudo extundelete /dev/sdb1
____________________________________________________________________
No action specified; implying --superblock.
NOTICE: Extended attributes are not restored.
Inodes count: 61054976
Blocks count: 244190208
Reserved blocks count: 0
Free blocks count: 31904860
Free inodes count: 60920436
First Data Block: 0
Block size: 4096
Fragment size: 4096
# Blocks per group: 32768
# Fragments per group: 1
# Inodes per group: 8192
Mount time: 1497147585
Write time: 1497147585
Mount count: 73
Maximal mount count: -1
Magic signature: 61267
File system state: 1
Behaviour when detecting errors: 1
minor revision level: 0
time of last check: 1475524694
max. time between checks: 0
OS: 0
Revision level: 1
Default uid for reserved blocks: 0
Default gid for reserved blocks: 0
First non-reserved inode: 11
size of inode structure: 256
block group # of this superblock: 0
compatible feature set: 60
incompatible feature set: 706
readonly-compatible feature set: 1131
128-bit uuid for volume: ad3c96f09c8346308a497f3f17d1f2f2
For compression: 0
Nr to preallocate for dirs: 0
Per group table for online growth: 1024
uuid of journal superblock: 00000000000000000000000000000000
inode number of journal file: 8
device number of journal file: 0
start of list of inodes to delete: 0
HTREE hash seed: 1423a337854ef9fc32efd09bbb4ea8ee
Default hash version to use: 1
Default type of journal backup: 1
First metablock group: 0
When the filesystem was created: 1470435884
Compatible feature set: HAS_JOURNAL EXT_ATTR RESIZE_INODE DIR_INDEX
Incompatible feature set: FILETYPE
Read only compatible feature set: SPARSE_SUPER LARGE_FILE
____________________________________________________________________


-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages extundelete depends on:
ii  e2fslibs    1.42.12-2+b1
ii  libc6       2.19-18+deb8u7
ii  libcomerr2  1.42.12-2+b1
ii  libgcc1     1:4.9.2-10
ii  libstdc++6  4.9.2-10

extundelete recommends no packages.

extundelete suggests no packages.

-- no debconf information
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/forensics-devel/attachments/20170611/5de00808/attachment.html>