| Previous | Next |
| hrBFNotSynchronous | hrRemainingVersions |
hrBFPageNotFound
The exact boundary reported here
For hrBFPageNotFound, treat the value as part of a state machine: it says what remained valid and what did not. The decisive boundary is the requested page was not present in the buffer-manager context used by the operation.
The stored Value is 0x880000C9 (positive JET status 201; 201). The HRESULT carries a warning, so the call may have useful output or a valid cursor state that must be inspected. The legacy this result name comes from the Windows Directory Service backup/restore message header.
The first useful distinction is that a cache miss must not be promoted automatically to hrReadVerifyFailure or hrDatabaseCorrupted. Start by record the page number, database identity, cache operation, and whether the lookup was expected to find only resident pages. That separates a reproducible incident from a later generic cleanup or service error.
Objects and state involved
| Diagnostic layer | ESE buffer-cache residency, page ownership, and latch lifetime |
|---|---|
| Relevant API surface | internal page acquisition and buffer-manager paths beneath normal Jet table operations |
| Code-specific boundary | the requested page was not present in the buffer-manager context used by the operation |
| Narrow corrective direction | let the normal page-acquisition path read or reconstruct the page instead of relying on a stale buffer reference |
Buffer-cache observations can become stale without implying on-disk corruption., a supported caller should use Jet handles and cursor operations rather than retain internal page assumptions.
Adjacent conditions
This result specifically means that a cache miss must not be promoted automatically to hrReadVerifyFailure or hrDatabaseCorrupted. Related values below can appear in the same workflow but require a different response:
hrBFNotSynchronous | a buffer-manager observation became stale because the page was evicted before the synchronous check could complete |
|---|---|
hrBadLogVersion | the transaction log format is incompatible with the ESE version attempting to read it |
hrLogDiskFull | the volume hosting transaction logs cannot allocate the next required log write or generation |
Keep the original constant and hexadecimal value in telemetry. Replacing this result with “backup failed” or “database warning” removes the state information needed to select the next legal API call.
Diagnostic record
Preserve the first result before retries, cleanup, service restart, or file replacement changes the evidence. The diagnostic record should identify the exact API phase and the owner of every handle or artifact involved.
- Code-specific observation: record the page number, database identity, cache operation, and whether the lookup was expected to find only resident pages.
- Thread and cursor that made the observation: record it together with this result and the timestamp of the first occurrence.
- Underlying disk-read result if one occurred: record it together with it and the timestamp of the first occurrence.
- Database and page identity: record it together with it and the timestamp of the first occurrence.
- Cache residency and ownership state: record it together with it and the timestamp of the first occurrence.
Use hashes, lengths, IDs, generation numbers, and redacted samples instead of copying directory contents or sensitive database values into routine logs. For this it investigation, a complete provenance chain is often more useful than a second automatic retry.
Actions that can make diagnosis worse
- do not delete database or log files based on a buffer warning.
- do not spin while holding stale page or latch state.
- do not discard the first lower-level Win32, RPC, or JET result merely because a later cleanup call returned a more familiar error.
Corrective path
- Record it,
0x880000C9, the API name, the current phase, and all live context or file owners. - Verify the decisive condition by record the page number, database identity, cache operation, and whether the lookup was expected to find only resident pages.
- Apply only the narrow correction: let the normal page-acquisition path read or reconstruct the page instead of relying on a stale buffer reference.
- After it, recreate any context invalidated by the failure; do not carry stale HBC, cursor, file, or restore-map state into the retry.
- repeat the smallest non-destructive test that reaches the same boundary, then verify both the return value and the resulting file, cursor, backup, or database state.
Acceptance criteria for a fix
A useful regression test for this HRESULT should force the condition “the requested page was not present in the buffer-manager context used by the operation”, call one documented API transition, and assert the exact HRESULT. The corrected the case should change only the decisive precondition and should verify cleanup as well as the primary output. For the result backup or restore path, also prove that the resulting set can be enumerated and that no file handle or context remains active after finalization.
Technical references
- ESE error-code table — API ordering, file semantics, warning/error interpretation, or recovery behavior relevant to it.
- ESE architecture and transactions
- Open-source ESE implementation
Looking for a different code? Search another status or error code.