[Dovecot] imap crash

[Todd Burroughs]

This is from the June 16 CVS, it also happens with June 15 but not with 
June 8.

Basically, imap segfaults when opening my mbox.  Some details are below:


Core was generated by `imap'.
Program terminated with signal 11, Segmentation fault.

#0  0x08094e5c in message_parse_header_next (ctx=0x80c8e10, hdr_r=0xbffff64c)
      at message-parser.c:755
755                             if (msg[0] == '\n' ||

(gdb) bt full
#0  0x08094e5c in message_parse_header_next (ctx=0x80c8e10, hdr_r=0xbffff64c)
      at message-parser.c:755
          msg = (const unsigned char *) 0x0
          i = Variable "i" is not available.

(gdb) p *ctx
$1 = {line = {name = 0x0, name_len = 0, value = 0x0, value_len = 0,
      full_value = 0x0, full_value_len = 0, middle = 0x0, middle_len = 0,
      name_offset = 14794827, full_value_offset = 0, continues = 0,
      continued = 0, eoh = 0, no_newline = 0, use_full_value = 0},
    input = 0x80c9cfc, hdr_size = 0x0, name = 0x80cf030, value_buf = 0x0,
    skip = 0, skip_initial_lwsp = 0, has_nuls = 0}

(gdb) p *hdr_r
$2 = (struct message_header_line *) 0x0

(gdb) bt
#0  0x08094e5c in message_parse_header_next (ctx=0x80c8e10, hdr_r=0xbffff64c)
      at message-parser.c:755
#1  0x0806bfaf in mbox_sync_parse_match_mail (mbox=0x80c3ba8, view=0x80c8ea8,
      seq=2028) at mbox-sync-parse.c:521
#2  0x080689d0 in mbox_file_seek (mbox=0x80c3ba8, view=0x80c8ea8, seq=2028,
      deleted_r=0xbffff748) at mbox-file.c:164
#3  0x0806a91f in mbox_mail_seek (mail=0x80c9200) at mbox-mail.c:63
#4  0x0806ab2a in mbox_mail_get_stream (_mail=0x80c9200, hdr_size=0x0,
      body_size=0x0) at mbox-mail.c:176
#5  0x0808cc55 in mail_get_stream (mail=0xfffffffe, hdr_size=0x0,
      body_size=0x0) at mail.c:106
#6  0x080760ef in index_mail_get_header_stream (_mail=0x80c9200,
      _headers=0x80c95d8) at index-mail-headers.c:606
#7  0x0808cc31 in mail_get_header_stream (mail=0xfffffffe, headers=0x80c95d8)
      at mail.c:97
#8  0x080769d0 in index_storage_search_next (_ctx=0x80c9188, mail=0x80c9200)
      at index-search.c:492
#9  0x0808d525 in mailbox_search_next (ctx=0x0, mail=0x80c9200)
      at mail-storage.c:405
#10 0x08057bee in cmd_search (cmd=0x80bcb98) at cmd-search.c:33
#11 0x080594f5 in _client_input (context=0x80bcb58) at client.c:334
#12 0x0809e1ca in io_loop_handler_run (ioloop=0x80bb9b0) at ioloop-poll.c:184
#13 0x0809d8e9 in io_loop_run (ioloop=0x80bb9b0) at ioloop.c:218
#14 0x080603e7 in main (argc=1, argv=0xbffffa44, envp=0xbffffa4c) at main.c:228