<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>惜分飞 &#187; oracle tab$恢复</title>
	<atom:link href="https://www.xifenfei.com/tag/oracle-tab%e6%81%a2%e5%a4%8d/feed" rel="self" type="application/rss+xml" />
	<link>https://www.xifenfei.com</link>
	<description>提供7*24专业数据库(Oracle,SQL Server,MySQL,PostgreSQL等)恢复和技术支持@Tel:17813235971</description>
	<lastBuildDate>Thu, 29 Oct 2026 15:31:46 +0000</lastBuildDate>
	<language>zh-CN</language>
		<sy:updatePeriod>hourly</sy:updatePeriod>
		<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>ORA-600 kzrini:!uprofile处理</title>
		<link>https://www.xifenfei.com/2023/04/ora-600-kzriniuprofile.html</link>
		<comments>https://www.xifenfei.com/2023/04/ora-600-kzriniuprofile.html#comments</comments>
		<pubDate>Thu, 27 Apr 2023 13:31:39 +0000</pubDate>
		<dc:creator><![CDATA[惜分飞]]></dc:creator>
				<category><![CDATA[Oracle备份恢复]]></category>
		<category><![CDATA[kzrini:!uprofile]]></category>
		<category><![CDATA[ORA-600 kzrini:!uprofile]]></category>
		<category><![CDATA[oracle tab$恢复]]></category>
		<category><![CDATA[tab$ 删除]]></category>
		<category><![CDATA[tab$ 恢复]]></category>

		<guid isPermaLink="false">https://www.xifenfei.com/?p=10262</guid>
		<description><![CDATA[联系：手机/微信(+86 17813235971) QQ(107644445)  &#8230; <a href="https://www.xifenfei.com/2023/04/ora-600-kzriniuprofile.html">继续阅读 <span class="meta-nav">&#8594;</span></a>]]></description>
				<content:encoded><![CDATA[<div id="xifenfeicopyright">
<p>联系：<a href="https://www.xifenfei.com/about_xifenfei" target="_blank">手机/微信(+86 17813235971)   QQ(107644445)</a><a target="_blank" href="http://wpa.qq.com/msgrd?v=3&#038;uin=107644445&#038;site=qq&#038;menu=yes"><img src="https://www.xifenfei.com/wp-content/themes/img/site_qq.jpg" alt="QQ咨询惜分飞" title="QQ咨询惜分飞"/></a></p>
<p>标题：<a href="https://www.xifenfei.com/2023/04/ora-600-kzriniuprofile.html" target="_blank">ORA-600 kzrini:!uprofile处理</a></p>
<p>作者：<a href="https://www.xifenfei.com" target="_blank">惜分飞</a>©版权所有[未经本人同意,不得以任何形式转载,否则有进一步追究法律责任的权利.]</p>
</div>
<p>朋友反馈,oracle expdp导出数据hang住,然后重启数据库,启动成功,但是执行导出的时候报ORA-600 kzrini:!uprofile错误<br />
<a href="https://www.xifenfei.com/wp-content/uploads/2023/04/kzrini-uprofile.png"><img src="https://www.xifenfei.com/wp-content/uploads/2023/04/kzrini-uprofile.png" alt="kzrini uprofile" width="965" height="411" class="alignnone size-full wp-image-10263" /></a><br />
<hr />
因为有过大量类似故障的恢复case,所以第一反应这种故障很可能就是tab$被清空的故障,参见:<a href="https://www.xifenfei.com/2017/07/oracle-software-malicious-injection.html" title="警告：互联网中有oracle介质被注入恶意程序导致—ORA-600 16703">警告：互联网中有oracle介质被注入恶意程序导致—ORA-600 16703</a>,对于这类故障,我们是国内第一个发现并且进行预警(在blog,qq/微信群,oracle技术大会等),但是还有很多朋友中招.今天这个发现故障之后没有重启,比较顺利，进行反删除插入即可,参考以前的处理:<a href="https://www.xifenfei.com/2021/03/ora-600-16703-orachk-insert-tab.html" title="ORA-600 16703直接把orachk备份表插入到tab$恢复" rel="noopener" target="_blank">ORA-600 16703直接把orachk备份表插入到tab$恢复</a></p>
<div id="crp_related"><ul><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/03/ora-600-16703-202403.html" rel="bookmark" class="crp_title">最近遇到几起ORA-600 16703故障(tab$被清空),请引起重视</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/09/ora-600-16703.html" rel="bookmark" class="crp_title">ORA-600 16703故障再现</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/01/ora-600-16703-ora-702.html" rel="bookmark" class="crp_title">近期又遇到ORA-600 16703和ORA-702故障</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2025/02/ora-600-16703-2025-year.html" rel="bookmark" class="crp_title">2025年第一起ORA-600 16703故障恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/05/ora-600-16703-vandalism-ora-00704-ora-00922.html" rel="bookmark" class="crp_title">ORA-600 16703故障,客户找人恢复数据库,数据库被进一步恶意破坏&#8212;ORA-00704 ORA-00922</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2020/04/aix-tab-ora-600-16703-1403-28.html" rel="bookmark" class="crp_title">aix平台tab$被删除可能出现ORA-600  [16703], [1403], [28]错误</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/02/asm-disk-add-vg-extend-lv.html" rel="bookmark" class="crp_title">再一例asm disk被误加入vg并且扩容lv恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/03/ora-00600-kokasgi1-rename-sys.html" rel="bookmark" class="crp_title">等保修改oracle SYS用户名要求的请注意&#8212;ORA-00600 kokasgi1</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/06/asm-add-vg.html" rel="bookmark" class="crp_title">asm磁盘加入vg恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2026/03/win-rm-datafile-recovery.html" rel="bookmark" class="crp_title">记录一次win删除数据文件完美恢复案例</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/04/orarecovery-202304.html" rel="bookmark" class="crp_title">Oracle Recovery Tools更新&#8212;202304</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2023/07/ora-01122-ora-01200.html" rel="bookmark" class="crp_title">ORA-01122 ORA-01200故障处理</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>https://www.xifenfei.com/2023/04/ora-600-kzriniuprofile.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ORA-00600: internal error code, arguments: [16703], [1403], [4] 故障处理</title>
		<link>https://www.xifenfei.com/2021/05/ora-600-16703-1403-4.html</link>
		<comments>https://www.xifenfei.com/2021/05/ora-600-16703-1403-4.html#comments</comments>
		<pubDate>Fri, 14 May 2021 18:04:07 +0000</pubDate>
		<dc:creator><![CDATA[惜分飞]]></dc:creator>
				<category><![CDATA[非常规恢复]]></category>
		<category><![CDATA[arguments: [16703]]]></category>
		<category><![CDATA[ORA-00600: internal error code]]></category>
		<category><![CDATA[ORA-600 16703]]></category>
		<category><![CDATA[oracle tab$恢复]]></category>
		<category><![CDATA[tab$恢复]]></category>
		<category><![CDATA[[1403]]]></category>
		<category><![CDATA[[4]]]></category>

		<guid isPermaLink="false">https://www.xifenfei.com/?p=9261</guid>
		<description><![CDATA[联系：手机/微信(+86 17813235971) QQ(107644445)  &#8230; <a href="https://www.xifenfei.com/2021/05/ora-600-16703-1403-4.html">继续阅读 <span class="meta-nav">&#8594;</span></a>]]></description>
				<content:encoded><![CDATA[<div id="xifenfeicopyright">
<p>联系：<a href="https://www.xifenfei.com/about_xifenfei" target="_blank">手机/微信(+86 17813235971)   QQ(107644445)</a><a target="_blank" href="http://wpa.qq.com/msgrd?v=3&#038;uin=107644445&#038;site=qq&#038;menu=yes"><img src="https://www.xifenfei.com/wp-content/themes/img/site_qq.jpg" alt="QQ咨询惜分飞" title="QQ咨询惜分飞"/></a></p>
<p>标题：<a href="https://www.xifenfei.com/2021/05/ora-600-16703-1403-4.html" target="_blank">ORA-00600: internal error code, arguments: [16703], [1403], [4] 故障处理</a></p>
<p>作者：<a href="https://www.xifenfei.com" target="_blank">惜分飞</a>©版权所有[未经本人同意,不得以任何形式转载,否则有进一步追究法律责任的权利.]</p>
</div>
<p>有一个客户数据库遭遇ORA-600 16703错误,故障原因见:<a href="https://www.xifenfei.com/2017/07/oracle-software-malicious-injection.html" title="警告：互联网中有oracle介质被注入恶意程序导致—ORA-600 16703">警告：互联网中有oracle介质被注入恶意程序导致—ORA-600 16703</a>,这种故障已经恢复比较多,在这次的恢复中遇到一个新错误,进行记录<br />
<strong>接手给客户报错情况ORA-00600: internal error code, arguments: [16703], [1403], [20]</strong><br />
<a href="https://www.xifenfei.com/wp-content/uploads/2021/05/20210515011736.png"><img src="https://www.xifenfei.com/wp-content/uploads/2021/05/20210515011736.png" alt="20210515011736" width="791" height="164" class="alignnone size-full wp-image-9262" /></a><br />
<hr />
<pre class="brush: bash; title: ; notranslate">
Thu May 13 22:36:11 2021
SMON: enabling cache recovery
Thu May 13 22:36:11 2021
NSA2 started with pid=61, OS id=6261 
Archived Log entry 90224 added for thread 1 sequence 50454 ID 0x19ae1c6c dest 1:
Errors in file /oracle/diag/rdbms/xff/xff/trace/xff_ora_5931.trc  (incident=741052):
ORA-00600: internal error code, arguments: [16703], [1403], [20], [], [], [], [], [], [], [], [], []
Incident details in: /oracle/diag/rdbms/xff/xff/incident/incdir_741052/xff_ora_5931_i741052.trc
Use ADRCI or Support Workbench to package the incident.
See Note 411.1 at My Oracle Support for error and packaging details.
Errors in file /oracle/diag/rdbms/xff/xff/trace/xff_ora_5931.trc:
ORA-00704: bootstrap process failure
ORA-00704: bootstrap process failure
ORA-00600: internal error code, arguments: [16703], [1403], [20], [], [], [], [], [], [], [], [], []
Errors in file /oracle/diag/rdbms/xff/xff/trace/xff_ora_5931.trc:
ORA-00704: bootstrap process failure
ORA-00704: bootstrap process failure
ORA-00600: internal error code, arguments: [16703], [1403], [20], [], [], [], [], [], [], [], [], []
Error 704 happened during db open, shutting down database
USER (ospid: 5931): terminating the instance due to error 704
Instance terminated by USER, pid = 5931
ORA-1092 signalled during: alter database open...
opiodr aborting process unknown ospid (5931) as a result of ORA-1092
Thu May 13 22:36:13 2021
ORA-1092 : opitsk aborting process
</pre>
<p>这种故障,由于是恶意脚本在数据库启动的时候清空tab$所致,使用bbed对tab$进行反向删除操作,实现数据库打开.<br />
<strong>在这次的恢复过程中遇到ORA-600 16703 1403 4的错误</strong></p>
<pre class="brush: sql; title: ; notranslate">
SQL&gt; startup mount pfile='/tmp/pfile';
ORACLE instance started.

Total System Global Area 7.0818E+10 bytes
Fixed Size                  2260448 bytes
Variable Size            1.3422E+10 bytes
Database Buffers         5.7177E+10 bytes
Redo Buffers              217030656 bytes
Database mounted.
SQL&gt; alter database open ;
alter database open
*
ERROR at line 1:
ORA-01092: ORACLE instance terminated. Disconnection forced
ORA-00704: bootstrap process failure
ORA-00704: bootstrap process failure
ORA-00600: internal error code, arguments: [16703], [1403], [4], [], [], [],
[], [], [], [], [], []
Process ID: 51886
Session ID: 3497 Serial number: 3
</pre>
<p>根据ora-600 16703 1403 4基本上可以判断是由于tab$这个表中缺少obj#=4的对象导致,通过查询正常库,确认是该对象为tab$,也就是说由于tab$对象中少了tab$记录.<strong>通过bbed分析确认</strong></p>
<pre class="brush: bash; title: ; notranslate">
SQL&gt; SELECT a.OBJ#
  2        ,TAB#
  3        ,a.DATAOBJ#
  4        ,BOBJ#
  5        ,NAME
  6        ,DBMS_ROWID.ROWID_RELATIVE_FNO (a.ROWID) FILE_ID
  7        ,DBMS_ROWID.ROWID_BLOCK_NUMBER (a.ROWID) BLOCK_ID
  8    FROM TAB$ a, obj$ b
  9   WHERE     a.obj# = b.obj#
 10         AND A.OBJ# IN (4);

      OBJ#       TAB#   DATAOBJ#      BOBJ# NAME
---------- ---------- ---------- ---------- ------------------------------
   FILE_ID   BLOCK_ID
---------- ----------
         4          1          2          2 TAB$
         1        147

BBED&gt; set dba 1,147
        DBA             0x00400093 (4194451 1,147)

BBED&gt; x /rnnnnnnnnnnnnncnnnnnnnntnnnnnnnnnncct  *kdbr[14]
rowdata[6848]                               @7349
-------------
flag@7349: 0x20 (KDRHFH)
lock@7350: 0x02
cols@7351:    0
nrid@7352:0x00407b09.1
BBED&gt; set dba 0x00407b09
        DBA             0x00407b09 (4225801 1,31497)

BBED&gt; p kdbt[1]
struct kdbt[1], 4 bytes                     @110
   sb2 kdbtoffs                             @110      10
   sb2 kdbtnrow                             @112      2

BBED&gt; x /rnnnnnnnnnnnnncnnnnnnnntnnnnnnnnnncct  *kdbr[11]
rowdata[815]                                @4436
------------
flag@4436: 0x5c (KDRHFL, KDRHFF, KDRHFD, KDRHFC)
lock@4437: 0x02
cols@4438:    0
ckix@4439:    8

BBED&gt; x /rn  *kdbr[8]
rowdata[950]                                @4571
------------
flag@4571: 0xac (KDRHFL, KDRHFF, KDRHFH, KDRHFK)
lock@4572: 0x00
cols@4573:    1
kref@4574:    1
hrid@4576:0x00400093.8
nrid@4582:0x00400094.0
col    0[2] @4590: 4
</pre>
<p>确认该记录发生了行迁移导致该问题,对其对应的block进行修复,数据库正常打开.</p>
<div id="crp_related"><ul><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/03/ora-00600-16703-1403-4.html" rel="bookmark" class="crp_title">ORA-00600: internal error code, arguments: [16703], [1403], [4] 原因</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2025/02/ora-600-16703-2025-year.html" rel="bookmark" class="crp_title">2025年第一起ORA-600 16703故障恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2021/06/tab-recovery-ora-600-13304.html" rel="bookmark" class="crp_title">tab$异常被处理之后报ORA-600 13304故障处理</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/09/ora-600-16703.html" rel="bookmark" class="crp_title">ORA-600 16703故障再现</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2019/03/oracle-12c-ora-600-16703.html" rel="bookmark" class="crp_title">12C数据库遭遇ORA-600 16703</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2020/04/aix-tab-ora-600-16703-1403-28.html" rel="bookmark" class="crp_title">aix平台tab$被删除可能出现ORA-600  [16703], [1403], [28]错误</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2019/06/ora-01092-ora-00704-ora-00600-16703.html" rel="bookmark" class="crp_title">ORA-00600: internal error code, arguments: [16703], [1403], [32]</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2019/01/tab-recovery-error.html" rel="bookmark" class="crp_title">tab$恢复错误汇总</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2021/04/ora-600-2662-ora-600-kclchkblk_4.html" rel="bookmark" class="crp_title">ora-600 2662和ora-600 kclchkblk_4恢复</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2024/03/ora-600-16703-202403.html" rel="bookmark" class="crp_title">最近遇到几起ORA-600 16703故障(tab$被清空),请引起重视</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2019/01/ora-600-16703-1403-28.html" rel="bookmark" class="crp_title">10g数据库遭遇ORA-600 16703</a></li><li style="list-style-type:decimal;font-size:11px;" ><a href="https://www.xifenfei.com/2019/05/ora-600-kcratr_scan_rc.html" rel="bookmark" class="crp_title">ORA-00600  kcratr_scan_rc</a></li></ul></div>]]></content:encoded>
			<wfw:commentRss>https://www.xifenfei.com/2021/05/ora-600-16703-1403-4.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
