dovecot - Jul 2008 - 1.1.1 (maildir_uidlist_sync_update): assertion failed: (uidlist->initial_hdr_read)

Version: 1.1.1
OS: FreeBSD 7.0-STABLE amd64

I have only seen this happen twice so far.  I do not know what the two 
users were doing to cause it.

Jun 26 17:23:26 hill dovecot: IMAP(userA): Invalid transaction log size 
(32812 vs 32920): /home/userA/Maildir/dovecot/private/indexes/.Deleted 
Messages/dovecot.index.log
Jun 26 17:23:26 hill dovecot: IMAP(userA): Invalid transaction log size 
(32812 vs 32920): /home/userA/Maildir/dovecot/private/indexes/.Deleted 
Messages/dovecot.index.log
Jun 26 17:23:26 hill dovecot: Panic: IMAP(userA): file 
maildir-uidlist.c: line 1207 (maildir_uidlist_sync_update): assertion 
failed: (uidlist->initial_hdr_read)
Jun 26 17:23:26 hill dovecot: child 28120 (imap) killed with signal 6

Jul 11 13:41:46 hill dovecot: IMAP(userB): Invalid transaction log size 
(92984 vs 93076): /home/userB/Maildir/dovecot/private/indexes/.Old 
Backup.Personal/dovecot.index.log
Jul 11 13:41:46 hill dovecot: IMAP(userB): Invalid transaction log size 
(92984 vs 93076): /home/userB/Maildir/dovecot/private/indexes/.Old 
Backup.Personal/dovecot.index.log
Jul 11 13:41:46 hill dovecot: Panic: IMAP(userB): file 
maildir-uidlist.c: line 1207 (maildir_uidlist_sync_update): assertion 
failed: (uidlist->initial_hdr_read)
Jul 11 13:41:46 hill kernel: pid 85434 (imap), uid 20128: exited on 
signal 6 (core dumped)

hill# gdb /usr/local/libexec/dovecot/imap imap.core
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "amd64-marcel-freebsd"...
Core was generated by `imap'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/local/lib/libiconv.so.3...done.
Loaded symbols for /usr/local/lib/libiconv.so.3
Reading symbols from /lib/libc.so.7...done.
Loaded symbols for /lib/libc.so.7
Reading symbols from /usr/local/lib/dovecot/imap/lib01_acl_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib01_acl_plugin.so
Reading symbols from 
/usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so
Reading symbols from /usr/lib/librpcsvc.so.4...done.
Loaded symbols for /usr/lib/librpcsvc.so.4
Reading symbols from 
/usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so
Reading symbols from 
/usr/local/lib/dovecot/imap/lib20_listescape_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_listescape_plugin.so
Reading symbols from 
/usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so
Reading symbols from /libexec/ld-elf.so.1...done.
Loaded symbols for /libexec/ld-elf.so.1
#0  0x00000000409d7e7c in kill () from /lib/libc.so.7
(gdb) bt full
#0  0x00000000409d7e7c in kill () from /lib/libc.so.7
No symbol table info available.
#1  0x00000000409d6ceb in abort () from /lib/libc.so.7
No symbol table info available.
#2  0x00000000004b5385 in default_fatal_finish (type=LOG_TYPE_PANIC, 
status=0) at failures.c:152
        backtrace = 0x3 <Address 0x3 out of bounds>
#3  0x00000000004b610e in i_internal_fatal_handler (type=Could not find 
the frame base for "i_internal_fatal_handler".
) at failures.c:418
No locals.
#4  0x00000000004b564a in i_panic (format=Could not find the frame base 
for "i_panic".
) at failures.c:193
        args = Could not find the frame base for "i_panic".
(gdb) hill# file /usr/local/libexec/dovecot/imap
/usr/local/libexec/dovecot/imap: ELF 64-bit LSB executable, x86-64, 
version 1 (FreeBSD), for FreeBSD 7.0 (700101), dynamically linked (uses 
shared libs), FreeBSD-style, not stripped

On Wed, 2008-07-16 at 16:43 -0400, Adam McDougall wrote:
> Jun 26 17:23:26 hill dovecot: Panic: IMAP(userA): file 
> maildir-uidlist.c: line 1207 (maildir_uidlist_sync_update): assertion 
> failed: (uidlist->initial_hdr_read)
Perhaps this fixes it?
http://hg.dovecot.org/dovecot-1.1/rev/1edff123dd8f

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080720/fdd79819/attachment-0002.bin>

Timo Sirainen wrote:
> On Wed, 2008-07-16 at 16:43 -0400, Adam McDougall wrote:
>   
>> Jun 26 17:23:26 hill dovecot: Panic: IMAP(userA): file 
>> maildir-uidlist.c: line 1207 (maildir_uidlist_sync_update): assertion 
>> failed: (uidlist->initial_hdr_read)
>>     
>
> Perhaps this fixes it?
> http://hg.dovecot.org/dovecot-1.1/rev/1edff123dd8f
>
>   
I am now running 1.1.2 in production, but I got a similar backtrace but 
different log message.
The file mentioned has a later timestamp than the core, so it may have 
been modified since the Panic.

-rw-------  1 userC  3001  980088 Aug  4 19:30 
/home/userC/Maildir/dovecot/private/indexes/.INBOX/dovecot.index.search.uids

Aug  4 11:15:20 boomhauer dovecot: imap-login: Login: user=<userC>, 
method=PLAIN, rip=35.9.37.164, lip=35.9.37.190, TLS
Aug  4 11:15:20 boomhauer dovecot: IMAP(userC): 
fchown(/home/userC/Maildir/temp.boomhauer.34901.6594f6f24f978311, -1, 
3000) failed: Operation not permitted
Aug  4 11:15:20 boomhauer dovecot: IMAP(userC): dovecot-acl-list 
creation failed: 
safe_mkstemp(/home/userC/Maildir/temp.boomhauer.34901.6594f6f24f978311) 
failed: Operation not permitted
Aug  4 11:15:21 boomhauer dovecot: IMAP(userC): Corrupted squat uidlist 
file 
/home/userC/Maildir/dovecot/private/indexes/.INBOX/dovecot.index.search.uids: 
missing/broken uidlist
Aug  4 11:15:22 boomhauer dovecot: Panic: IMAP(userC): file 
squat-uidlist.c: line 153 (uidlist_write_array): assertion failed: ((uid 
& ~UID_LIST_MASK_RANGE) >= base_uid)
Aug  4 11:15:22 boomhauer dovecot: child 34901 (imap) killed with signal 6

# gdb /usr/local/libexec/dovecot/imap imap.core
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain 
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for
details.
This GDB was configured as "amd64-marcel-freebsd"...
Core was generated by `imap'.
Program terminated with signal 6, Aborted.
Reading symbols from /usr/local/lib/libiconv.so.3...done.
Loaded symbols for /usr/local/lib/libiconv.so.3
Reading symbols from /lib/libc.so.7...done.
Loaded symbols for /lib/libc.so.7
Reading symbols from /usr/local/lib/dovecot/imap/lib01_acl_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib01_acl_plugin.so
Reading symbols from 
/usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so
Reading symbols from /usr/lib/librpcsvc.so.4...done.
Loaded symbols for /usr/lib/librpcsvc.so.4
Reading symbols from 
/usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so
Reading symbols from 
/usr/local/lib/dovecot/imap/lib20_listescape_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_listescape_plugin.so
Reading symbols from 
/usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so
Reading symbols from /libexec/ld-elf.so.1...done.
Loaded symbols for /libexec/ld-elf.so.1
#0  0x00000000409de12c in kill () from /lib/libc.so.7
(gdb) bt full
#0  0x00000000409de12c in kill () from /lib/libc.so.7
No symbol table info available.
#1  0x00000000409dcf9b in abort () from /lib/libc.so.7
No symbol table info available.
#2  0x00000000004b5be5 in default_fatal_finish (type=LOG_TYPE_PANIC, 
status=0) at failures.c:149
        backtrace = 0x0
#3  0x00000000004b699e in i_internal_fatal_handler (type=Could not find 
the frame base for "i_internal_fatal_handler".
) at failures.c:423
No locals.
#4  0x00000000004b5eaa in i_panic (format=Could not find the frame base 
for "i_panic".
) at failures.c:190
        args = Could not find the frame base for "i_panic".
(gdb) q