Segmerntation fault when running extundelete on Ubuntu - what to do?

6,298

It turns out the ubuntu build has some problems. Building from source helps:

apt-get remove extundelete
apt-get install build-essentials e2fslibs-dev
tar -xjf extundelete-VERSION.tar.bz2
cd extundelete
./configure
make
src/extundelete --restore-all image.raw
Share:
6,298

Related videos on Youtube

Mel
Author by

Mel

Updated on September 18, 2022

Comments

  • Mel
    Mel almost 2 years

    I have a partition raw image on which I am trying to run extundelete to undelete some files from an ext4 filesystem. Unfortunately extundelete exits with a segmentation fault.

    Is there anything I can do?

    root@ubuntu-VirtualBox:~# extundelete --restore-all mmcblk0p7.raw 
    WARNING: EXT3_FEATURE_INCOMPAT_RECOVER is set.
    The partition should be unmounted to undelete any files without further data loss.
    If the partition is not currently mounted, this message indicates 
    it was improperly unmounted, and you should run fsck before continuing.
    If you decide to continue, extundelete may overwrite some of the deleted
    files and make recovering those files impossible.  You should unmount the
    file system and check it with fsck before using extundelete.
    Would you like to continue? (y/n) 
    y
    Loading filesystem metadata ... 218 groups loaded.
    Loading journal descriptors ... 27292 descriptors loaded.
    Writing output to directory RECOVERED_FILES/
    Searching for recoverable inodes in directory / ... 
    398 recoverable inodes found.
    Looking through the directory structure for deleted files ... 
    Unable to restore inode 1548814 (lost+found/.Skybox.Cache): No data found.
    Segmentation fault (core dumped)
    root@ubuntu-VirtualBox:~# 
    

    dmesg gives only:

    [90218.617232] extundelete[3924]: segfault at 178255 ip b76cd374 sp bfda0d30 error 4 in libext2fs.so.2.4[b76b6000+43000]
    
    • Nullpointer42
      Nullpointer42 over 10 years
      Does it do the same thing if you do extundelete --restore-file path/to/deleted/file? Though if the file system really is still mounted, your odds of recovering the file are decreasing with each passing minute (e.g. swap, temp, etc, could easily be overwriting the space where the file is . . . )
    • einpoklum
      einpoklum about 10 years
      Seeing this with Kubuntu 12.04. @emie: Not sure about the OP but I saw this with a specific path (not necessarily a specific file).
  • einpoklum
    einpoklum about 10 years
    Thank you, for the question and the answer! You just saved me a lot of anguish...