dovecot - Mar 2008 - Consecutive crashes of serveral imapd processes

This is 1.0.13, the processes crashed a few seconds apart from each
other:

GNU gdb 6.7.1-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show
copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from
/usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done.
done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from
/usr/lib/debug/lib/i686/cmov/libc-2.7.so...done.
done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...Reading symbols from
/usr/lib/debug/lib/ld-2.7.so...done.
done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so
Reading symbols from
/usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so
Reading symbols from
/usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so
Core was generated by `/usr/local/libexec/dovecot/imap'.
Program terminated with signal 11, Segmentation fault.
#0  0x080a2754 in imap_bodystructure_write (part=0x80fc7b0, dest=0x80fcb60, 
    extended=true) at imap-bodystructure.c:344
344			text = data->content_type == NULL ||
#0  0x080a2754 in imap_bodystructure_write (part=0x80fc7b0, dest=0x80fcb60, 
    extended=true) at imap-bodystructure.c:344
#1  0x08081b74 in index_mail_parse_bodystructure (mail=0x80f8538, 
    field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:601
#2  0x08081f4f in index_mail_get_special (_mail=0x80f8538, 
    field=MAIL_FETCH_IMAP_BODYSTRUCTURE) at index-mail.c:728
#3  0x0806f3c7 in maildir_mail_get_special (_mail=0x80f8538, field=72)
    at maildir-mail.c:192
#4  0x0805ecfe in fetch_bodystructure (ctx=0x80dcfc8, mail=0x80f8538, 
    context=0x0) at imap-fetch.c:416
#5  0x0805f85c in imap_fetch (ctx=0x80dcfc8) at imap-fetch.c:290
#6  0x08059bee in cmd_fetch (cmd=0x80da334) at cmd-fetch.c:163
#7  0x0805d12f in client_handle_input (cmd=0x80da334) at client.c:344
#8  0x0805d1bc in client_handle_input (cmd=0x80da334) at client.c:398
#9  0x0805d85f in _client_input (context=0x80da2f0) at client.c:441
#10 0x080b49f7 in io_loop_handler_run (ioloop=0x80d79b0) at ioloop-epoll.c:203
#11 0x080b3c6c in io_loop_run (ioloop=0x80d79b0) at ioloop.c:329
#12 0x080658ac in main (argc=) at main.c:290

----- End forwarded message -----
----- Forwarded message from root <root at postamt.charite.de> -----

From: root <root at postamt.charite.de>
Date: Mon, 10 Mar 2008 22:57:41 +0100 (CET)
To: ralf.hildebrandt at charite.de
Subject: Backtrace:/usr/local/libexec/dovecot/imap

GNU gdb 6.7.1-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show
copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from
/usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done.
done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from
/usr/lib/debug/lib/i686/cmov/libc-2.7.so...done.
done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...Reading symbols from
/usr/lib/debug/lib/ld-2.7.so...done.
done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so
Reading symbols from
/usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so
Reading symbols from
/usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so
Core was generated by `/usr/local/libexec/dovecot/imap'.
Program terminated with signal 11, Segmentation fault.
#0  0x080a2754 in imap_bodystructure_write (part=0x80fc2a0, dest=0x80fc650, 
    extended=true) at imap-bodystructure.c:344
344			text = data->content_type == NULL ||
#0  0x080a2754 in imap_bodystructure_write (part=0x80fc2a0, dest=0x80fc650, 
    extended=true) at imap-bodystructure.c:344
#1  0x08081b74 in index_mail_parse_bodystructure (mail=0x80e85a8, 
    field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:601
#2  0x08081f4f in index_mail_get_special (_mail=0x80e85a8, 
    field=MAIL_FETCH_IMAP_BODYSTRUCTURE) at index-mail.c:728
#3  0x0806f3c7 in maildir_mail_get_special (_mail=0x80e85a8, field=72)
    at maildir-mail.c:192
#4  0x0805ecfe in fetch_bodystructure (ctx=0x80dcfc8, mail=0x80e85a8, 
    context=0x0) at imap-fetch.c:416
#5  0x0805f85c in imap_fetch (ctx=0x80dcfc8) at imap-fetch.c:290
#6  0x08059bee in cmd_fetch (cmd=0x80da334) at cmd-fetch.c:163
#7  0x0805d12f in client_handle_input (cmd=0x80da334) at client.c:344
#8  0x0805d1bc in client_handle_input (cmd=0x80da334) at client.c:398
#9  0x0805d85f in _client_input (context=0x80da2f0) at client.c:441
#10 0x080b49f7 in io_loop_handler_run (ioloop=0x80d79b0) at ioloop-epoll.c:203
#11 0x080b3c6c in io_loop_run (ioloop=0x80d79b0) at ioloop.c:329
#12 0x080658ac in main (argc=) at main.c:290

----- End forwarded message -----
----- Forwarded message from root <root at postamt.charite.de> -----

From: root <root at postamt.charite.de>
Date: Mon, 10 Mar 2008 23:05:42 +0100 (CET)
To: ralf.hildebrandt at charite.de
Subject: Backtrace:/usr/local/libexec/dovecot/imap

GNU gdb 6.7.1-debian
Copyright (C) 2007 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show
copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu"...
Using host libthread_db library "/lib/i686/cmov/libthread_db.so.1".
Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from
/usr/lib/debug/lib/i686/cmov/libdl-2.7.so...done.
done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from
/usr/lib/debug/lib/i686/cmov/libc-2.7.so...done.
done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...Reading symbols from
/usr/lib/debug/lib/ld-2.7.so...done.
done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so
Reading symbols from
/usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so
Reading symbols from
/usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so
Core was generated by `/usr/local/libexec/dovecot/imap'.
Program terminated with signal 11, Segmentation fault.
#0  0x080a2754 in imap_bodystructure_write (part=0x80f8b90, dest=0x80f8f40, 
    extended=true) at imap-bodystructure.c:344
344			text = data->content_type == NULL ||
#0  0x080a2754 in imap_bodystructure_write (part=0x80f8b90, dest=0x80f8f40, 
    extended=true) at imap-bodystructure.c:344
#1  0x08081b74 in index_mail_parse_bodystructure (mail=0x80f8760, 
    field=MAIL_CACHE_IMAP_BODYSTRUCTURE) at index-mail.c:601
#2  0x08081f4f in index_mail_get_special (_mail=0x80f8760, 
    field=MAIL_FETCH_IMAP_BODYSTRUCTURE) at index-mail.c:728
#3  0x0806f3c7 in maildir_mail_get_special (_mail=0x80f8760, field=72)
    at maildir-mail.c:192
#4  0x0805ecfe in fetch_bodystructure (ctx=0x80dcfc8, mail=0x80f8760, 
    context=0x0) at imap-fetch.c:416
#5  0x0805f85c in imap_fetch (ctx=0x80dcfc8) at imap-fetch.c:290
#6  0x08059bee in cmd_fetch (cmd=0x80da334) at cmd-fetch.c:163
#7  0x0805d12f in client_handle_input (cmd=0x80da334) at client.c:344
#8  0x0805d1bc in client_handle_input (cmd=0x80da334) at client.c:398
#9  0x0805d85f in _client_input (context=0x80da2f0) at client.c:441
#10 0x080b49f7 in io_loop_handler_run (ioloop=0x80d79b0) at ioloop-epoll.c:203
#11 0x080b3c6c in io_loop_run (ioloop=0x80d79b0) at ioloop.c:329
#12 0x080658ac in main (argc=) at main.c:290

----- End forwarded message -----

-- 
Ralf Hildebrandt (Ralf.Hildebrandt at charite.de)          snickebo at
charite.de
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
Make something idiot-proof and the universe will create a better idiot.

On Mon, 2008-03-10 at 23:10 +0100, Ralf Hildebrandt
wrote:
> #0  0x080a2754 in imap_bodystructure_write (part=0x80fc7b0, dest=0x80fcb60,
>     extended=true) at imap-bodystructure.c:344
> 344			text = data->content_type == NULL ||
> #0  0x080a2754 in imap_bodystructure_write (part=0x80fc7b0, dest=0x80fcb60,
>     extended=true) at imap-bodystructure.c:344
Thanks, fixed: http://hg.dovecot.org/dovecot-1.0/rev/538f8892a2f1

(Not an optimal fix, but a few wasted CPU cycles shouldn't matter, v1.1
handles this better)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080311/712362ba/attachment-0002.bin>

* Timo Sirainen <tss at iki.fi>:
> Thanks, fixed: http://hg.dovecot.org/dovecot-1.0/rev/538f8892a2f1
> 
> (Not an optimal fix, but a few wasted CPU cycles shouldn't matter, v1.1
> handles this better)
I just rebuild dovcot, let's see what happens :)

-- 
Ralf Hildebrandt (Ralf.Hildebrandt at charite.de)          snickebo at
charite.de
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
He may look like an idiot and talk like an idiot but don't let that
fool you. He really is an idiot. - Groucho Marx