search

strozfriedberg / sidr

Search Index Database Reporter
Other
89 stars 6 forks source link

Error: failed to fill whole buffer #1

Closed AndrewRathbun closed 1 year ago

AndrewRathbun commented 1 year ago

Hello, I'm testing this tool out and I immediately came across this error when pointing it at a directory that contained a Windows.edb file. 

PS C:\temp> .\sidr.exe .\SanitizedPath\ProgramData -f csv
Processing ESE db: .\SanitizedPath\Windows.edb
ese_generate_report(.\SanitizedPath\Windows.edb) failed with error: read_exact failed: Error { kind: UnexpectedEof, message: "failed to fill whole buffer" }
Found 1 Windows Search database(s)

I don't have anything else to provide but just passing along this error.

sf-jonstewart commented 1 year ago

Thanks, Andrew. Can you share which version of Windows the EDB came from? Any reason to suspect it may be corrupt, etc?

AndrewRathbun commented 1 year ago

Thanks, Andrew. Can you share which version of Windows the EDB came from? Any reason to suspect it may be corrupt, etc?

Ah, the issue was the ESE DB was dirty. I just repaired it and tried again. Looks like the tool is working now.

sf-jonstewart commented 1 year ago

Good to hear! Ideally this should be resilient to dirtiness, but it's early days. I'll start with seeing whether we can log more info to help with troubleshooting and then go from there. Let us know what you think of output!

AndrewRathbun commented 1 year ago

I will report back when it's done! It's 4GB in size!