[Dovecot] Dovecot rc15 crash in mbox-sync-update.c

[Steven F Siirila]

Here is another crash we've been seeing recently in rc15 on Solaris 10.

(gdb) bt full
#0  0xff1c12a4 in ?? ()
No symbol table info available.
#1  0xff140040 in ?? ()
No symbol table info available.
#2  0x000786a8 in t_buffer_alloc (size=688976) at data-stack.c:346
	__PRETTY_FUNCTION__ = "file %s: line %"
#3  0x00078190 in t_pop () at data-stack.c:149
	frame_block = (struct stack_frame_block *) 0x7fffffff
#4  0x00042a90 in mbox_sync_update_status (ctx=0x8f7e0)
    at mbox-sync-update.c:267
No locals.
#5  0x00041730 in mbox_sync_rewrite (sync_ctx=0xffbff548, mail_ctx=0x39d5, 
    end_offset=14098141, move_diff=27645, extra_space=1, first_seq=45, 
    last_seq=163) at mbox-sync-rewrite.c:552
	mails = (struct mbox_sync_mail *) 0xcf238
	offset = 1
	dest_offset = 4294967295
	next_end_offset = 14079696
	next_move_diff = 6
	start_offset = 1275633
	expunged_space = 0
	idx = 185
	first_nonexpunged_idx = 0
	padding_per_mail = 50
	count = 542
	ret = 0
	__PRETTY_FUNCTION__ = "mktime(today) fail"
#6  0x0003db84 in mbox_sync (mbox=0xc09c0, flags=32407386) at mbox-sync.c:1375
	index_sync_ctx = (struct mail_index_sync_ctx *) 0xc1d58
	sync_view = (struct mail_index_view *) 0xc1d90
	sync_ctx = {mbox = 0xc09c0, flags = 0, input = 0xc5878, 
  file_input = 0xc5750, write_fd = 10, index_sync_ctx = 0xc1d58, 
  sync_view = 0xc1d90, t = 0xc3340, hdr = 0xc1dd8, header = 0xb6900, 
  from_line = 0xb68d8, base_uid_validity = 1143728609, base_uid_last = 5161, 
  base_uid_last_offset = 1538, mails = {buffer = 0xb6928, element_size = 56}, 
  syncs = {buffer = 0xb6950, element_size = 20}, sync_rec = {uid1 = 0, 
    uid2 = 0, type = 0, add_flags = 0 '\0', remove_flags = 0 '\0', 
    keyword_idx = 0}, mail_keyword_pool = 0xc3598, 
  saved_keywords_pool = 0xc36a0, prev_msg_uid = 5494, next_uid = 5709, 
  idx_next_uid = 1, seq = 586, idx_seq = 587, need_space_seq = 45, 
  expunged_space = 0, space_diff = -27680, dest_first_mail = 0, 
  first_mail_crlf_expunged = 0, delay_writes = 0}
	seq = 4294967295
	offset = 18446744073709551615
	lock_id = 3
	ret = 0
	changed = 1
#7  0x0003e2c8 in mbox_sync (mbox=0xb8128, flags=0) at mbox-sync.c:1312
	index_sync_ctx = (struct mail_index_sync_ctx *) 0x7e9
	sync_view = (struct mail_index_view *) 0x1ee3429
	sync_ctx = {mbox = 0x164d, flags = MBOX_SYNC_LAST_COMMIT, 
  input = 0x24a, file_input = 0x24b, write_fd = 45, index_sync_ctx = 0x0, 
  sync_view = 0x0, t = 0x0, hdr = 0xffffffff, header = 0xffff93e0, 
  from_line = 0x0, base_uid_validity = 0, base_uid_last = 0, 
  base_uid_last_offset = 18428719917034373157, mails = {buffer = 0x10, 
    element_size = 753960}, syncs = {buffer = 0xb7e14, element_size = 753960}, 
  sync_rec = {uid1 = 753104, uid2 = 752648, type = 563200, add_flags = 0 '\0', 
    remove_flags = 8 '\b', keyword_idx = 788928}, mail_keyword_pool = 0x0, 
  saved_keywords_pool = 0x0, prev_msg_uid = 13, next_uid = 2155905152, 
  idx_next_uid = 7, seq = 4290770536, idx_seq = 433948, 
  need_space_seq = 563200, expunged_space = -18024225394221448, 
  space_diff = 2418925581670400, dest_first_mail = 0, 
  first_mail_crlf_expunged = 0, delay_writes = 0}
	seq = 32386076
	offset = 2516850835456
	lock_id = 4294967295
	ret = 788928
	changed = 753960
#8  0x00069f24 in mail_storage_class_register (storage_class=0xb8128)
    at mail-storage.c:42
No locals.
#9  0x00028fe0 in imap_sync_deinit (ctx=0xc09c0) at imap-sync.c:83
	status = {messages = 706560, recent = 705536, unseen = 0, 
  uidvalidity = 0, uidnext = 753216, first_unseen_seq = 0, keywords = 0x3e7}
#10 0x00021248 in cmd_status (cmd=0xb7e14) at cmd-status.c:91
	client = (struct client *) 0xb7dd0
	args = (struct imap_arg *) 0xb8078
	status = {messages = 745216, recent = 2, unseen = 4290771088, 
  uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, keywords = 0xffbff830}
	storage = (struct mail_storage *) 0xb7c08
	real_mailbox = 0xb8128 "mail/AutoFiled/2006"
	str = (string_t *) 0x10
#11 0x0002287c in client_handle_input (cmd=0xb7dd0) at client.c:380
	client = (struct client *) 0x210e8
	__PRETTY_FUNCTION__ = "parameter \0\0\0\0\0\0Inva"
#12 0x0007e3bc in timeout_add (msecs=743112, callback=0xab800, context=0xac400)
    at ioloop.c:152
	timeout = (struct timeout *) 0x2
#13 0x0007dcb4 in _seek (stream=0xb56c8, v_offset=3039960672808960, mark=116)
    at istream-mmap.c:149
No locals.
#14 0x0002ab24 in main (argc=-4195379, argv=0xab800, envp=0xac400)
    at main.c:123
No locals.
(gdb) quit
-- 

Steven F. Siirila			Office: Lind Hall, Room 130B
Internet Services			E-mail: sfs at umn.edu
Office of Information Technology	Voice: (612) 626-0244
University of Minnesota			Fax: (612) 626-7593