[Dovecot] beta7 imap core, no assert

[Jeff A. Earickson]

Timo,

I noticed this core dump from imap the other day from one of our 
users; there was no assertion.  GDB output attached, I have saved 
the core if you need more information.

Jeff Earickson
Colby College
-------------- next part --------------
Script started on Tue May 02 09:15:48 2006
%gdb imap core.jloo
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "sparc-sun-solaris2.9"...
Core was generated by `imap'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libdl.so.1...done.
Loaded symbols for /usr/lib/libdl.so.1
Reading symbols from /usr/lib/libsocket.so.1...done.
Loaded symbols for /usr/lib/libsocket.so.1
Reading symbols from /usr/lib/libnsl.so.1...done.
Loaded symbols for /usr/lib/libnsl.so.1
Reading symbols from /usr/lib/librt.so.1...done.
Loaded symbols for /usr/lib/librt.so.1
Reading symbols from /usr/lib/libsendfile.so.1...done.
Loaded symbols for /usr/lib/libsendfile.so.1
Reading symbols from /usr/lib/libc.so.1...done.
Loaded symbols for /usr/lib/libc.so.1
Reading symbols from /usr/lib/libmp.so.2...done.
Loaded symbols for /usr/lib/libmp.so.2
Reading symbols from /usr/lib/libaio.so.1...done.
Loaded symbols for /usr/lib/libaio.so.1
Reading symbols from /usr/lib/libmd5.so.1...done.
Loaded symbols for /usr/lib/libmd5.so.1
Reading symbols from /usr/platform/SUNW,Ultra-1/lib/libc_psr.so.1...done.
Loaded symbols for /usr/platform/SUNW,Ultra-60/lib/libc_psr.so.1
#0  0xff1b451c in strlen () from /usr/lib/libc.so.1
(gdb) backtrace
#0  0xff1b451c in strlen () from /usr/lib/libc.so.1
#1  0xff206f88 in _doprnt () from /usr/lib/libc.so.1
#2  0xff208ff8 in vsnprintf () from /usr/lib/libc.so.1
#3  0x0007ed18 in str_vprintfa (str=0xa43b2, fmt=Cannot access memory at address 0x48
) at str.c:118
#4  0x00071eb4 in internal_handler (log_type=-112 '\220',
    format=0x2 <Address 0x2 out of bounds>, args=0x18) at failures.c:362
#5  0x00071f08 in i_internal_info_handler (
    fmt=0x49 <Address 0x49 out of bounds>, args=0x82098) at failures.c:400
#6  0x000723cc in i_info (format=0x82098 "Disconnected: %s") at failures.c:218
#7  0x000217c8 in client_disconnect (client=0x82098, reason=0x0)
    at client.c:119
#8  0x00021824 in client_disconnect_with_error (client=0xaf2f8, msg=0x0)
    at client.c:130
#9  0x0001e6fc in cmd_fetch_finish (ctx=Variable "ctx" is not available.
) at cmd-fetch.c:98
#10 0x0001ea7c in cmd_fetch_continue (cmd=0xaf130) at cmd-fetch.c:127
#11 0x00021bb8 in client_destroy (client=0xaf33c,
    reason=0x82308 "Disconnected for inactivity") at client.c:83
#12 0x00021de8 in idle_timeout (context=0xaf2f8) at client.c:501
#13 0x00076fa0 in io_loop_handle_timeouts (ioloop=0x0) at ioloop.c:239
#14 0x000774b4 in io_loop_handler_run (ioloop=0xacbf8) at ioloop-poll.c:163
#15 0x00076e88 in io_loop_run (ioloop=0xacbf8) at ioloop.c:274
#16 0x0002a3f8 in main (argc=707576, argv=0x1, envp=0x0) at main.c:259
(gdb) up 5
#5  0x00071f08 in i_internal_info_handler (
    fmt=0x49 <Address 0x49 out of bounds>, args=0x82098) at failures.c:400
400             (void)internal_handler('I', fmt, args);
(gdb) print fmt
$1 = 0x49 <Address 0x49 out of bounds>
(gdb) print *fmt
Cannot access memory at address 0x49
(gdb) up
#6  0x000723cc in i_info (format=0x82098 "Disconnected: %s") at failures.c:218
218             info_handler(format, args);
(gdb) print format
$2 = 0x82098 "Disconnected: %s"
(gdb) print args
Cannot access memory at address 0xffffffec
(gdb) print *args
Cannot access memory at address 0xffffffec
(gdb) print &args
$3 = (va_list *) 0xffffffec
(gdb) up
#7  0x000217c8 in client_disconnect (client=0x82098, reason=0x0)
    at client.c:119
119             i_info("Disconnected: %s", reason);
(gdb) print *client
$4 = {fd_in = 1147761507, fd_out = 1869508197, io = 0x63746564,
  input = 0x3a202573, output = 0x0, namespaces = 0x0, mailbox = 0x2a204259,
  keywords = {pool = 0x45200000, keywords = {buffer = 0x42414420,
      element_size = 1165128303}}, select_counter = 1914726766,
  messages_count = 541674817, recent_count = 1344304225,
  last_input = 1731862528, last_output = 1111573536, bad_counter = 1165128303,
  parser = 0x7220696e, cmd = {client = 0x20494d41, pool = 0x5020636f,
    tag = 0x6d6d616e <Address 0x6d6d616e out of bounds>,
    name = 0x643a2000 <Address 0x643a2000 out of bounds>, func = 0,
    context = 0x42414420, uid = 0, param_error = 1}, disconnected = 0,
  destroyed = 1, command_pending = 1, input_pending = 1, output_pending = 0,
  rawlog = 0, input_skip_line = 1}
(gdb) up
#8  0x00021824 in client_disconnect_with_error (client=0xaf2f8, msg=0x0)
    at client.c:130
130             client_disconnect(client, msg);
(gdb) print *client
$5 = {fd_in = 0, fd_out = 1, io = 0x0, input = 0xaf390, output = 0xaf4c0,
  namespaces = 0xaed28, mailbox = 0xb8480, keywords = {pool = 0xb3578,
    keywords = {buffer = 0x0, element_size = 0}}, select_counter = 8,
  messages_count = 1633, recent_count = 0, last_input = 1146522170,
  last_output = 1146522170, bad_counter = 0, parser = 0xaf510, cmd = {
    client = 0xaf2f8, pool = 0xb1570, tag = 0xb15a0 "0000020e",
    name = 0xb15b0 "FETCH", func = 0x1ea24 <cmd_fetch_continue>,
    context = 0xb1600, uid = 0, param_error = 0}, disconnected = 0,
  destroyed = 1, command_pending = 1, input_pending = 0, output_pending = 0,
  rawlog = 0, input_skip_line = 1}
(gdb) print *msg
Cannot access memory at address 0x0
(gdb) quit