[Dovecot] 1.0-test53, sig11 when sorting by thread

[Nicolas.Kowalski at imag.fr]

Hello.

When trying to sort a folder by thread (with pine4.61), I get a sig11. 
The mailstore is Maildir, indexes stored in /var/indexes/%u.

The syslog on the server shows this:

Nov 29 11:37:55 olan dovecot: IMAP(kowalski): Corrupted index cache file /var/indexes/kowalski/.INBOX/dovecot.index.cache: record points outside file
Nov 29 11:37:56 olan dovecot: child 14344 (imap) killed with signal 11

A backtrace of the core is attached.

Thanks.

PS: I tried with mbox mailstore, and got the same sig11.

-- 
Nicolas
-------------- next part --------------
(gdb) olan:~# gdb /usr/local/libexec/dovecot/imap /home/kowalski/core
GNU gdb 2002-04-01-cvs
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-linux"...
Core was generated by `imap'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
#0  0x08074026 in mail_cache_lookup_offset (cache=0x80bad88, view=0x80e1468, seq=1, offset_r=0xbffff308)
    at mail-cache-lookup.c:73
73                      if (cache->hdr->file_seq == ext->reset_id) {
(gdb) bt
#0  0x08074026 in mail_cache_lookup_offset (cache=0x80bad88, view=0x80e1468, seq=1, offset_r=0xbffff308)
    at mail-cache-lookup.c:73
#1  0x08074304 in mail_cache_foreach (view=0x80e1258, seq=1, callback=0x8074374 <mail_cache_seq_callback>, context=0x0)
    at mail-cache-lookup.c:208
#2  0x080743f8 in mail_cache_seq (view=0x80e1258, seq=1) at mail-cache-lookup.c:252
#3  0x0807448f in mail_cache_field_exists (view=0x80e1258, seq=1, field=0) at mail-cache-lookup.c:271
#4  0x080745bd in mail_cache_lookup_field (view=0x80e1258, dest_buf=0x80a6070, seq=1, field=0)
    at mail-cache-lookup.c:336
#5  0x0806e654 in index_mail_get_fixed_field (mail=0x80e0f18, field=MAIL_CACHE_FLAGS, data=0x80e0fbc, data_size=4)
    at index-mail.c:100
#6  0x0806f4ed in index_mail_next (mail=0x80e0f18, seq=1) at index-mail.c:647
#7  0x0806e45e in index_storage_fetch (_t=0x80e0f00, seq=1, wanted_fields=0) at index-fetch.c:18
#8  0x08082546 in mailbox_fetch (t=0x80e0f00, seq=1, wanted_fields=0) at mail-storage.c:353
#9  0x0805d3fc in gather_base_subjects (ctx=0x80a6008) at imap-thread.c:691
#10 0x0805d9f4 in mail_thread_finish (ctx=0x80a6008) at imap-thread.c:960
#11 0x0805ca17 in imap_thread (client=0x80afd18, charset=0x80affd0 "US-ASCII", args=0x80dfcb8,
    type=MAIL_THREAD_REFERENCES) at imap-thread.c:150
#12 0x08056ef2 in cmd_thread (client=0x80afd18) at cmd-thread.c:65
#13 0x080577ae in client_handle_input (client=0x80afd18) at client.c:321
#14 0x0805786b in _client_input (context=0x80afd18) at client.c:365
#15 0x080914a0 in io_loop_handler_run (ioloop=0x80ae9a8) at ioloop-poll.c:184
#16 0x08090b1d in io_loop_run (ioloop=0x80ae9a8) at ioloop.c:218
#17 0x0805e065 in main (argc=1, argv=0xbffff6f4, envp=0xbffff6fc) at main.c:224