dovecot - Apr 2009 - Segfault in Sieve 1.2

Hello,

two days ago I've upgraded to 1.2rc2 and the new sieve implementation
(version 0.1.4). Today I got the first mail that got stuck in the
postfix queue because deliver was dying with a segfault.

The mail is spam, thus I don't have any issues sharing it:
http://users.birkenwald.de/~berni/temp/deliver-segfault.mail

It happens with this small sieve script (my normal one is larger, but
this is the part that triggers the segfault):
http://users.birkenwald.de/~berni/temp/deliver-segfault.sieve

Note that I've been running this script unaltered for months, first with
Dovecot 1.1 and CMUSieve and now with various versions of Dovecot 1.2
and the new sieve implementation for about three weeks, this is the
first mail that got stuck.

I got a coredump, but without debugging symbols it doesn't tell that
much. If you can't reproduce it I'll compile it with debugging symbols
and try again.

(gdb) bt full
#0  0x00007fa0f87ecbd7 in strstr () from /lib/libc.so.6
No symbol table info available.
#1  0x00007fa0f8341933 in ?? () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#2  0x00007fa0f83377a3 in sieve_address_match () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#3  0x00007fa0f833ba7b in ?? () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#4  0x00007fa0f8332537 in sieve_interpreter_continue () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#5  0x00007fa0f8332728 in sieve_interpreter_run () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#6  0x00007fa0f833f8ca in ?? () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#7  0x00007fa0f833fb3d in sieve_execute () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#8  0x00007fa0f8326f9d in ?? () from
/usr/lib/dovecot/lda/lib90_sieve_plugin.so
No symbol table info available.
#9  0x000000000041a5ad in main ()
No symbol table info available.

Platform is Debian Lenny amd64.

Regards,
Bernhard

Hello Bernhard,

Bernhard Schmidt wrote:
> two days ago I've upgraded to 1.2rc2 and the new sieve implementation
> (version 0.1.4). Today I got the first mail that got stuck in the
> postfix queue because deliver was dying with a segfault.
> 
> The mail is spam, thus I don't have any issues sharing it:
> http://users.birkenwald.de/~berni/temp/deliver-segfault.mail
> 
> It happens with this small sieve script (my normal one is larger, but
> this is the part that triggers the segfault):
> http://users.birkenwald.de/~berni/temp/deliver-segfault.sieve
> 
> Note that I've been running this script unaltered for months, first
with
> Dovecot 1.1 and CMUSieve and now with various versions of Dovecot 1.2
> and the new sieve implementation for about three weeks, this is the
> first mail that got stuck.
This is caused by address headers containing 'undisclosed-recipients:;' 
in combination with the subaddress extension. I fixed the issue, but I 
think I need to sort this out a little better to make sure this does not 
reoccur in similar situations.

Fixed:

http://hg.rename-it.nl/dovecot-libsieve/rev/ec78123ec073

Regards,

Stephan