dovecot - Jun 2009 - Panic with signal 6 core dump with revision 9116:9ae55b68cf61

Jun  2 10:05:14 hostname dovecot: IMAP(testuser): Panic: file istream- 
raw-mbox.c: line 380: assertion failed: (new_pos > 0)
Jun  2 10:05:14 hostname dovecot: dovecot: child 544822 (imap) killed  
with signal 6


(dbx) where
raise(??) at 0x90000000005a68c
abort() at 0x900000000085c2c
default_fatal_finish(type = LOG_TYPE_PANIC, status = 0), line 160 in  
"failures.c"
i_internal_fatal_handler(type = LOG_TYPE_PANIC, status = 0, fmt =  
"file %s: line %d: assertion failed: (%s)", args = ""), line
440 in
"failures.c"
i_panic(format = "file %s: line %d: assertion failed: (%s)", ... =  
0x1001731b4, 0x17c, 0x100173328, 0x0, 0x15b5, 0x0, 0x0), line 207 in  
"failures.c"
i_stream_raw_mbox_read(stream = 0x00000001100ca6b0), line 380 in  
"istream-raw-mbox.c"
i_stream_raw_mbox_read(stream = 0x00000001100ca6b0), line 379 in  
"istream-raw-mbox.c"
i_stream_read(stream = 0x00000001100ca700), line 80 in "istream.c"
i_stream_limit_read(stream = 0x00000001100cb930), line 64 in "istream- 
limit.c"
i_stream_read(stream = 0x00000001100cb980), line 80 in "istream.c"
i_stream_read_copy_from_parent(istream = 0x00000001100cbb20), line 118  
in "istream.c"
i_stream_header_filter_read(stream = 0x00000001100cbad0), line 315 in  
"istream-header-filter.c"
i_stream_read(stream = 0x00000001100cbb20), line 80 in "istream.c"
i_stream_read_copy_from_parent(istream = 0x00000001100cbd20), line 118  
in "istream.c"
i_stream_mail_stats_read_mail_stats(stream = 0x00000001100cbcd0), line  
47 in "istream-mail-stats.c"
i_stream_read(stream = 0x00000001100cbd20), line 80 in "istream.c"
i_stream_read_data(stream = 0x00000001100cbd20, data_r =  
0x0fffffffffffecc0, size_r = 0x0fffffffffffecc8, threshold = 1), line  
361 in "istream.c"
message_parser_read_more(ctx = 0x00000001100cc118, block_r =  
0x0fffffffffffecb0, full_r = 0x0fffffffffffeb84), line 118 in "message- 
parser.c"
parse_next_body_to_boundary(ctx = 0x00000001100cc118, block_r =  
0x0fffffffffffecb0), line 330 in "message-parser.c"
message_parser_parse_next_block(ctx = 0x00000001100cc118, block_r =  
0x0fffffffffffecb0), line 768 in "message-parser.c"
message_parser_parse_body(ctx = 0x00000001100cc118, hdr_callback =  
(nil), context = (nil)), line 831 in "message-parser.c"
index_mail_parse_body(mail = 0x00000001100c9878, field =  
MAIL_CACHE_FLAGS), line 792 in "index-mail.c"
index_mail_get_parts(_mail = 0x00000001100c9878, parts_r =  
0x0fffffffffffef28), line 224 in "index-mail.c"
mail_get_parts(mail = 0x00000001100c9878, parts_r =  
0x0fffffffffffef28), line 71 in "mail.c"
unnamed block in search_arg_match_text(args = 0x00000001100c7e70, ctx  
= 0x00000001100c95f0, ret = -1), line 647 in "index-search.c"
search_arg_match_text(args = 0x00000001100c7e70, ctx =  
0x00000001100c95f0, ret = -1), line 647 in "index-search.c"
search_match_next(ctx = 0x00000001100c95f0), line 1101 in "index- 
search.c"
unnamed block in index_storage_search_next_nonblock(_ctx =  
0x00000001100c95f0, mail = 0x00000001100c9878, tryagain_r =  
0x0ffffffffffff1e0), line 1301 in "index-search.c"
index_storage_search_next_nonblock(_ctx = 0x00000001100c95f0, mail =  
0x00000001100c9878, tryagain_r = 0x0ffffffffffff1e0), line 1301 in  
"index-search.c"
mailbox_search_next_nonblock(ctx = 0x00000001100c95f0, mail =  
0x00000001100c9878, tryagain_r = 0x0ffffffffffff1e0), line 754 in  
"mail-storage.c"
cmd_search_more(cmd = 0x0000000110022058), line 347 in "imap-search.c"
cmd_search_more_callback(cmd = 0x0000000110022058), line 434 in "imap- 
search.c"
unnamed block in io_loop_handle_timeouts_real(ioloop =  
0x000000011001f310), line 316 in "ioloop.c"
io_loop_handle_timeouts_real(ioloop = 0x000000011001f310), line 316 in  
"ioloop.c"
unnamed block in io_loop_handle_timeouts(ioloop = 0x000000011001f310),  
line 327 in "ioloop.c"
io_loop_handle_timeouts(ioloop = 0x000000011001f310), line 327 in  
"ioloop.c"
io_loop_handler_run(ioloop = 0x000000011001f310), line 162 in "ioloop- 
poll.c"
io_loop_run(ioloop = 0x000000011001f310), line 338 in "ioloop.c"
main(argc = 1, argv = 0x0ffffffffffff630, envp = 0x0ffffffffffff640),  
line 323 in "main.c"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2541 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20090602/8d799eb1/attachment-0002.bin>

On Tue, 2009-06-02 at 10:17 -0400, Jonathan Siegle
wrote:
> 
> Jun  2 10:05:14 hostname dovecot: IMAP(testuser): Panic: file istream- 
> raw-mbox.c: line 380: assertion failed: (new_pos > 0)
Any chance this is also reproducible?
> unnamed block in search_arg_match_text(args = 0x00000001100c7e70, ctx  
> = 0x00000001100c95f0, ret = -1), line 647 in "index-search.c"
> search_arg_match_text(args = 0x00000001100c7e70, ctx =  
> 0x00000001100c95f0, ret = -1), line 647 in "index-search.c"
Apparently using something like: 1 search text hello

If it's reproducible, I'd like to get the mbox, or if it contains
sensitive data put it through http://dovecot.org/tools/mbox-anonymize.pl

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20090602/262f2768/attachment-0002.bin>

On Tue, 2009-06-02 at 10:17 -0400, Jonathan Siegle wrote:
> Jun  2 10:05:14 hostname dovecot: IMAP(testuser): Panic: file istream- 
> raw-mbox.c: line 380: assertion failed: (new_pos > 0)
Fixed: http://hg.dovecot.org/dovecot-1.2/rev/96aec5ab1a52

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20090611/437b057f/attachment-0002.bin>