dovecot - Nov 2007 - crash with fts_squat on an identified email

I have some folders with a good amount of spam.  While demonstrating full text
search to a user,
we found a folder that would crash dovecot while doing a fts.  While splitting
up the mailbox to
narrow it down, I found there are a good number of messages in that folder that
all made it crash
in the same manner.  I figured I'd narrow down a single one, get that fixed,
then retest the rest.
I also added to my todo list to try a full text search on as much email as I can
find, to try to
weed out any other problems (and see if fts is realistic to use in production).

Nov 17 09:03:26 boomhauer dovecot: IMAP(mcdouga9): file message-decoder.c: line
201 (translation_buf_decode):
assertion failed: (*size >= skip)
Nov 17 09:03:26 boomhauer dovecot: child 14668 (imap) killed with signal 6

Let me know if this is not reproducable with the attached tgz containing a
maildir with one message,
I could do a local gdb if needed.  
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fts-bad-email.tgz
Type: application/x-gtar
Size: 1934 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20071117/fc71d636/attachment-0002.gtar>

On Sat, 2007-11-17 at 09:08 -0500, Adam McDougall wrote:
> I have some folders with a good amount of spam.  While demonstrating full
text search to a user,
> we found a folder that would crash dovecot while doing a fts.  While
splitting up the mailbox to
> narrow it down, I found there are a good number of messages in that folder
that all made it crash
> in the same manner.  I figured I'd narrow down a single one, get that
fixed, then retest the rest.
> I also added to my todo list to try a full text search on as much email as
I can find, to try to
> weed out any other problems (and see if fts is realistic to use in
production).
> 
> Nov 17 09:03:26 boomhauer dovecot: IMAP(mcdouga9): file message-decoder.c:
line 201 (translation_buf_decode):
> assertion failed: (*size >= skip)
> Nov 17 09:03:26 boomhauer dovecot: child 14668 (imap) killed with signal 6
> 
> Let me know if this is not reproducable with the attached tgz containing a
maildir with one message,
> I could do a local gdb if needed.  
Fixed. The function was pretty much completely broken.
http://hg.dovecot.org/dovecot/rev/ea4d3778c99b
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20071118/12c49e29/attachment-0002.bin>