Roll-up update KB 2775511. Report of data truncation when utilized with SMB 2.0 connections for multiple data read and writes to network share (New update has released KB 2732673)


UPDATE: The update for the issue documented here has released as of 8/13/2013.  The update is available under KB article 2732673   http://support.microsoft.com/kb/2732673

 

For those who have installed the prior 2775511 update already, the update released under KB 2732673 should be installed after the 2775511 update.

 

=========================================================================================

 

Hi,

 

Writing today to provide a support update to the community on an issue that we are seeing in developer support on an optional Windows update. Specifically, we have a report were data is being truncated from an application utilizing network shares from a client Windows 7 that making requests for data storage to a Windows Vista, Windows 7, Windows Server 2008/2008 R2, or Windows 2012 machine.

 

The report is that data truncation issue occurs only after installation of optional update under KB 2775511 on Windows 7 SP1 client machines. To date, this is the report that we have on the issue. We are working closely with the reporting customer to resolve the report with progress being provided by the customer here:

     http://support.esri.com/en/knowledgebase/techarticles/detail/41119

 

In addition, we have reports that the following additional two updates can cause the data truncation issue under the same scenario:

    http://support.microsoft.com/kb/2732673

    http://support.microsoft.com/kb/2824408

 

The specific component has been identified to be in the RDBSS.SYS component. The updated RDBSS.SYS component has to be on the client machine only for the issue reported. In addition, the remote machine has to be able to support SMB 2.0 communication in order for the issue to surface.

 

For more background on these Microsoft updates, the above updates are released as hotfix releases to address specific issues. The KB 2775511 update is an cumulative hotfix update that is exclusively available via the http://catalog.update.microsoft.com site. By being available only through the windows update catalog, the KB 2775511 update is not considered a security update and is not being deployed broadly.  

 

In terms of workarounds, the following options are potential options while further investigation continues between Microsoft and the reporting customer:

 

  •  Not installing the KB 2775511 update and updates since release of the KB 2775511 update that has a newer RDBSS.sys component (KB 2732673, KB 2824408)
  •  Hosting the remote data on a machine running a lower version of SMB such as Windows 2003
  •  Disabling SMB 2.0 on the remote machine hosting the data being truncated.   Please note this is not recommended unless absolutely necessary as detailed in the following article by Microsoft on disabling SMB 2.0:

             http://support.microsoft.com/kb/2696547

      

 

UPDATE: The hotfix is currently still under development with the update being in testing.  The update is on track to be released within the next 60 days (August 2013).  

UPDATE: The update for the issue documented here has released.   The update is available as of today at under KB article 2732673:    http://support.microsoft.com/kb/2732673

 

 

  

Comments (24)

  1. We also experienced issues with this Hotfix 2775511 and the application Endnote 4.0.2. Symptoms were crashing application resulting in corrupt library data files. Removal of the hotfix resolved the problem. If the Endnote data files were stored on a local drive the problems did not occur.

  2. NManis says:

    @RCRNZ, can you send over where you received Endnote 4.0.2  (vendor & location)?  We will investigate here further.

  3. In our 2008R2 Citrix terminal server farm I often see these crashes since KB2775511 has been applied:

    rdbss!RxOrphanSrvOpensForThisFcb+0xdc

    rdbss!RxOrphanSrvOpens+0x8d

    rdbss!RxUpperFinalizeVNetRoot+0x8e

    rdbss!RxFinalizeVNetRoot+0xf1

    rdbss!RxFinalizeConnection+0x380

    mrxsmb!SmbShellDeleteConnection+0xf8

    mrxsmb!MRxSmbDevFcbXXXControlFile+0x274

    mrxsmb!SmbShellDevFcbXXXControlFile+0xe

    rdbss!RxXXXControlFileCallthru+0xcd

    rdbss!RxCommonDevFCBFsCtl+0x11b

    rdbss!RxFsdCommonDispatch+0x870

    rdbss!RxFsdDispatch+0x224

    mrxsmb!MRxSmbFsdDispatch+0xc0

    mup!MupiCallUncProvider+0x161

    mup!MupStateMachine+0x128

    mup!MupFsControl+0x7f

    fltmgr!FltpFsControl+0xae

    CtxSbx+0x7427

    CtxAltStr+0x56c7

    nt!IopXxxControlFile+0x607

    nt!NtFsControlFile+0x56

    nt!KiSystemServiceCopyEnd+0x13

    Beside the data corruption bug in this version of rdbss.sys, possibly there's a crash issue too.

    Daniel

  4. NManis says:

    @Daniel:  Thank you for the feedback.   The stack below is under investigation as of today now.

    At this time for the stack below, we would advise to uninstall the 2775511 update on the servers in question.   More information will be forthcoming on resolution.

    Thanks,

    nathan

  5. Kevin says:

    Is this fix still being released next month? If so when will this be available? The 1 August for us is tomorrow so curious as to when we could get a working update. Thanks.

  6. NManis says:

    @Kevin.  Thanks for the note on status.  We did a check today earlier on status with the release.  So far, so good on a release mid-August.  I will have an update here in two weeks on the release.

    thanks!

  7. Sandra says:

    And today two weeks has passed. Any news about the fix? 🙂

  8. NManis says:

    @Sandra, fix should be live this week.  Will post here once it is public

  9. NManis says:

    The update for the issue documented here has released.   The update is available as of today at under KB article 273673:      

    support.microsoft.com/…/2732673

  10. Althornin says:

    Great, so we have a hotfix.  Does this need to be installed on the servers, the clients, or both, to resolve this issue?  Will the hotfix be put into the Microsoft update catalog so we can deploy it via WSUS, the way we deployed KB2775511?

  11. NManis says:

    @Althornin, for the hotfix, it should be installed after the 275511 update on all machines that have 275511 update installed.  

    The hotfix is not in the WSUS catalog

  12. Althornin says:

    @Nathan

    I know the hotfix isn't currently in the catalog – I asked if it will be placed in the catalog (at some point).  Otherwise, deployment of this hotfix is going to be much harder than deploying KB2775511 was.  I'm just asking that you consider it…

  13. NManis says:

    @Althornin, it is not int the catalog with no plans to be in the catalog. I have passed the feedback along.

  14. Tenrac says:

    It would be great if this could be added to the catalog. Especially considering that KB2775511 was such a substantial update and this is a fix for that update.

  15. Nathan says:

    There are two hotfixes listed for each platform.  I think this is incorrect.

    For example, you can download Windows6.1-KB2732673-v3-x64.msu as well as Windows6.1-KB2732673-v4-x64.msu.  

    Do we need to install both or only V4?

  16. NManis says:

    Hi,

    Thanks for the feedback on the 2732673 article versions. For the hotfix release, use the hotfix that is the v4 release  (Fix465709):

       Windows6.1-KB2732673-v4-x64.msu

    If the v3 of the update under 2732673 was installed already, the v4 fix can be installed over it.  We are working to get the v3 of the release taken down as downloadable option.

    Thanks again for the feedback!

    Best regards,

    Nathan

  17. Torsten Döring says:

    Thank you for KB2775511 and KB2732673-v4. They solve so many Win7 client problems when using ConfigMgr 2012 that I can't recommend running it without these hotfixes.

    And I want to add that it would be really easier to distribute KB2732673-v4 with Update Catalaog and WSUS instead of logon-script as I do it at the moment for sites which are going to be managed by ConfigMgr soon.

  18. Thank you for bringing the crash stack to the dev team, Nathan!

    No further crashes with KB2732673-v4 yet!

    Daniel

  19. NManis says:

    Update:  The hotfix (KB 2732673) is now also available on WSUS.  Thanks everyone for the feedback on getting to WSUS too, it is up there now.

  20. Torsten Döring says:

    Well it installed KB2775511 at last, not as advised by the ticket at first:

    1) KB2728738

    2) KB2732673

    3) KB2775511

    But I checked at least the file version from KB2732673 and Rdbss.sys has 6.1.7601.22377 so all is ok.

  21. Marshal says:

    Hi Nathan,

    We are seeing issues with one of the DMS App, occassional Zero Byte documents wondering if KB2775511 will cause this on Windows 2008R2 servers? Any pointers will be helpful.

    Thanks.

  22. NManis says:

    Hi Marshal,

    Thanks for the comment.   For the affected server, would check the version of Rdbss.sys.  Ensure that it is at least 6.1.7601.22377 or higher.

    If it is higher, probably something else since this fix has been deployed now for almost a year without any re-calls.  Microsoft Support can look further at the server too via support call 1-800-936-5800.

    Thanks,

    Nathan

  23. Marshal says:

    Hi Nathan,

    Appreciate your response, I have got RDBSS.sys version at 6.1.7601.22210 will update with this patch.One question I believe this has to be on both client and DFS Server?

    Sure I will get in touch with MS.

    Many Thanks and Regards.

  24. NManis says:

    Hi Marshal,

    For this update, it has been mostly installed on client side of the communication.  That said, if the connections are initiating from server side too, may have to install on server as well.  

    This update is broadly released at this point, so, it can be installed across enterprise.

    Thanks again,

    Nathan