[Dovecot] imap crash with backtrace (1.2.8)

Thu Dec 3 12:26:26 EET 2009

The Log:

Dec  3 10:14:35 postamt dovecot: dovecot: child 27689 (imap) killed with signal 11 (core dumped)

Backtrace:

GNU gdb (GDB) 7.0-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/local/libexec/dovecot/imap...done.
Reading symbols from /lib/i686/cmov/libdl.so.2...Reading symbols from /usr/lib/debug/lib/i686/cmov/libdl-2.10.1.so...done.
(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libdl.so.2
Reading symbols from /lib/i686/cmov/librt.so.1...Reading symbols from /usr/lib/debug/lib/i686/cmov/librt-2.10.1.so...done.
(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/librt.so.1
Reading symbols from /lib/i686/cmov/libc.so.6...Reading symbols from /usr/lib/debug/lib/i686/cmov/libc-2.10.1.so...done.
(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libc.so.6
Reading symbols from /lib/ld-linux.so.2...Reading symbols from /usr/lib/debug/lib/ld-2.10.1.so...done.
(no debugging symbols found)...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/i686/cmov/libpthread.so.0...Reading symbols from /usr/lib/debug/lib/i686/cmov/libpthread-2.10.1.so...done.
(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libpthread.so.0
Reading symbols from /usr/local/lib/dovecot/imap/lib10_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib10_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_imap_quota_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib11_trash_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib11_trash_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib20_autocreate_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_autocreate_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib20_fts_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_fts_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_mail_log_plugin.so
Reading symbols from /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib20_zlib_plugin.so
Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libbz2.so.1.0...(no debugging symbols found)...done.
Loaded symbols for /lib/libbz2.so.1.0
Reading symbols from /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so...done.
Loaded symbols for /usr/local/lib/dovecot/imap/lib21_fts_squat_plugin.so
Core was generated by `imap [zexxxx 141.42.37.83]'.
Program terminated with signal 11, Segmentation fault.
#0  0x0810480c in p_strdup (pool=0x9fbcf80, 
    str=0xb7e68c88 <Address 0xb7e68c88 out of bounds>) at strfuncs.c:39
39		for (len = 0; (str)[len] != '\0'; )
#0  0x0810480c in p_strdup (pool=0x9fbcf80, 
    str=0xb7e68c88 <Address 0xb7e68c88 out of bounds>) at strfuncs.c:39
        mem = <value optimized out>
        len = 0
#1  0x0808ed7a in maildir_save_add (t=0x9fe3660, 
    base_fname=0xb7e68c88 <Address 0xb7e68c88 out of bounds>, 
    flags=MAIL_RECENT, keywords=0x0, dest_mail=0x9fe5a48) at maildir-save.c:153
        ctx = 0x9fbcf98
        input = <value optimized out>
        __PRETTY_FUNCTION__ = "maildir_save_add"
#2  0x0808cb13 in maildir_copy_hardlink (ctx=0x9fbcf98, mail=0x9fe5070)
    at maildir-copy.c:246
        src_mbox = 0x9f87e98
        do_ctx = {dest_path = 0x9fecdd8, 
          dest_fname = 0xb7e68c88 <Address 0xb7e68c88 out of bounds>, 
          base_end_pos = 108, size_set = 0, vsize_set = 0, success = 1, 
          preserve_filename = 1}
        path = 0x4 <Address 0x4 out of bounds>
        filename = <value optimized out>
        __PRETTY_FUNCTION__ = "maildir_copy_hardlink"
#3  maildir_copy (ctx=0x9fbcf98, mail=0x9fe5070) at maildir-copy.c:269
        _data_stack_cur_id = 4
        t = 0x9fe3660
        mbox = <value optimized out>
#4  0xb7ecb22a in mail_log_copy (ctx=0x9fbcf98, mail=0x9fe5070)
    at mail-log-plugin.c:442
        name = <value optimized out>
#5  0xb7ede820 in quota_copy (ctx=0x9fbcf98, mail=0x9fe5070)
    at quota-storage.c:189
        t = 0x9fe3660
        qbox = 0x9fc4020
#6  0x080614b8 in fetch_and_copy (cmd=0x9f82e30) at cmd-copy.c:73
No locals.
#7  cmd_copy (cmd=0x9f82e30) at cmd-copy.c:145
        client = 0x9f82ba0
        storage = 0x9f824b8
        destbox = 0x9fc3c38
        t = 0x9fe3660
        search_args = 0x9fed2b0
        messageset = 0x9f85738 "7161"
        mailbox = 0x9f85746 "Pathologie.Institut"
        src_uidset = <value optimized out>
        msg = <value optimized out>
        sync_flags = <value optimized out>
        imap_flags = <value optimized out>
        copy_count = 1
        uid_validity = <value optimized out>
        uid1 = <value optimized out>
        uid2 = <value optimized out>
        ret = 1
        __PRETTY_FUNCTION__ = "cmd_copy"
#8  0x0806798c in client_command_input (cmd=0x9f82e30) at client.c:612
        client = 0x9f82ba0
        command = <value optimized out>
        __PRETTY_FUNCTION__ = "client_command_input"
#9  0x08067a33 in client_command_input (cmd=0x9f82e30) at client.c:661
        client = 0x9f82ba0
        command = <value optimized out>
        __PRETTY_FUNCTION__ = "client_command_input"
#10 0x08067b8d in client_handle_next_command (client=0x9f82ba0) at client.c:702
No locals.
#11 client_handle_input (client=0x9f82ba0) at client.c:714
        _data_stack_cur_id = 3
        ret = false
        remove_io = <value optimized out>
        handled_commands = false
        __PRETTY_FUNCTION__ = "client_handle_input"
#12 0x080684cf in client_input (client=0x9f82ba0) at client.c:753
        cmd = <value optimized out>
        output = 0x9f82d54
        bytes = <value optimized out>
        __PRETTY_FUNCTION__ = "client_input"
#13 0x080fa020 in io_loop_handler_run (ioloop=0x9f809b0) at ioloop-epoll.c:208
        ctx = 0x9f80ab8
        event = 0x9f80af8
        list = 0x9f82dd8
        io = 0x9fbbe40
        tv = {tv_sec = 1, tv_usec = 531953}
        t_id = 2
        msecs = <value optimized out>
        ret = 1
        i = 0
        j = 0
        call = <value optimized out>
#14 0x080f9490 in io_loop_run (ioloop=0x9f809b0) at ioloop.c:335
No locals.
#15 0x08070e22 in main (argc=0, argv=0xbf89a4c4, envp=0xbf89a4d4) at main.c:327
No locals.
$1 = {prev = 0x0, next = 0x0, client = 0x9f82ba0, pool = 0x9f82e18, 
  tag = 0x9f82ea8 "74", name = 0x9f82eb8 "UID copy", 
  args = 0x9f82ec8 "7161 \"INBOX.Pathologie.Institut\"", 
  cmd_flags = COMMAND_FLAG_BREAKS_SEQS, func = 0x80612d0 <cmd_copy>, 
  context = 0x0, module_contexts = {arr = {buffer = 0x9f82e70, 
      element_size = 4}, v = 0x9f82e70, v_modifiable = 0x9f82e70}, 
  parser = 0x9f85620, state = CLIENT_COMMAND_STATE_WAIT_INPUT, sync = 0x0, 
  uid = 1, cancel = 0, param_error = 0, search_save_result = 0, 
  temp_executed = 0}
(gdb) quit

-- 
Ralf Hildebrandt
  Geschäftsbereich IT | Abteilung Netzwerk
  Charité - Universitätsmedizin Berlin
  Campus Benjamin Franklin
  Hindenburgdamm 30 | D-12203 Berlin
  Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962
  ralf.hildebrandt at charite.de | http://www.charite.de