[Dovecot] 1.2.rc3 crash of deliver for one out of 4 recipients

[Wolfgang.Friebel at desy.de]

Please find below details of a crash of deliver. The dovecot version is 
still at 1.2.rc3 as we use Stephan Bosch's sieve, for which there is no 
patch for rc4. Sieve is at 0.1.4 and managesieve at 0.11.3 if that 
matters.

The mail had 4 recipients at the local mail server, the first seems to 
have triggered the crash, the other three mails were delivered:
May 31 02:07:25 apollo postfix/qmgr[6437]: AF24F3F81D7: 
from=<root at triton.ifh.de>, size=765407, nrcpt=4 (queue active)

This is the first and only crash I could find in the logs
(approx 500k Lines of postfix/dovecot logs)

The following information could be extracted from the logfile (no core 
dump unfortunately)

May 31 02:07:25 apollo dovecot: deliver(user1): Panic: 
file istream.c: line 99 (i_stream_read): assertion failed: 
((size_t)ret+old_size == _stream->pos - _stream->skip)

May 31 02:07:25 apollo dovecot: deliver(user1): Raw backtrace: 
/usr/libexec/dovecot/deliver [0x48e920] -> 
/usr/libexec/dovecot/deliver(i_syslog_fatal_handler+0x2b) [0x48e9bb] -> 
/usr/libexec/dovecot/deliver [0x48e006] -> /usr/libexec/dovecot/deliver 
[0x49305e] -> /usr/libexec/dovecot/deliver [0x4959f1] -> 
/usr/libexec/dovecot/deliver(i_stream_read+0x48) [0x492f28] -> 
/usr/libexec/dovecot/deliver(i_stream_read_data+0x28) [0x493088] -> 
/usr/libexec/dovecot/deliver [0x48764e] -> /usr/libexec/dovecot/deliver 
[0x487afe] -> 
/usr/libexec/dovecot/deliver(message_parser_parse_next_block+0x29) 
[0x487769] -> 
/usr/libexec/dovecot/deliver(index_mail_cache_parse_continue+0x1f) 
[0x446cff] -> /usr/libexec/dovecot/deliver(maildir_save_continue+0x48) 
[0x42c9c8] -> /usr/libexec/dovecot/deliver(mail_storage_copy+0x6a) 
[0x454c7a] -> /usr/libexec/dovecot/deliver(maildir_copy+0x5e) [0x4295fe] 
-> /usr/lib64/dovecot/lda/lib10_quota_plugin.so [0x2b5bf2754e4c] -> 
/usr/lib64/dovecot/lda/lib90_sieve_plugin.so [0x2b5bf2983b25] -> /usr/lib6

The output of dovecot -n:
=========================
# 1.2.rc3: /etc/dovecot.conf
# OS: Linux 2.6.18-128.1.6.el5 x86_64 Scientific Linux SL release 5.3 
(Boron)
protocols: imap imaps managesieve
listen(default): *
listen(imap): *
listen(managesieve): *:2009
disable_plaintext_auth: yes
shutdown_clients: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/libexec/dovecot/imap-login
login_executable(imap): /usr/libexec/dovecot/imap-login
login_executable(managesieve): /usr/libexec/dovecot/managesieve-login
login_processes_count: 1
login_max_processes_count: 256
verbose_proctitle: yes
mmap_disable: yes
fsync_disable: yes
lock_method: dotlock
maildir_copy_with_hardlinks: no
mbox_read_locks: dotlock flock
mbox_write_locks: dotlock flock
mail_drop_priv_before_exec: yes
mail_executable(default): /usr/libexec/dovecot/imap
mail_executable(imap): /usr/libexec/dovecot/imap
mail_executable(managesieve): /usr/libexec/dovecot/managesieve
mail_plugins(default): quota imap_quota zlib acl imap_acl
mail_plugins(imap): quota imap_quota zlib acl imap_acl
mail_plugins(managesieve):
mail_plugin_dir(default): /usr/lib64/dovecot/imap
mail_plugin_dir(imap): /usr/lib64/dovecot/imap
mail_plugin_dir(managesieve): /usr/lib64/dovecot/managesieve
imap_client_workarounds(default): delay-newmail netscape-eoh 
tb-extra-mailbox-sep outlook-idle
imap_client_workarounds(imap): delay-newmail netscape-eoh 
tb-extra-mailbox-sep outlook-idle
imap_client_workarounds(managesieve):
namespace:
   type: private
   separator: /
   location: maildir:~/Maildir
   inbox: yes
   list: yes
   subscriptions: yes
namespace:
   type: private
   separator: /
   prefix: #mbox/
   location: mbox:~/mail
   hidden: yes
   list: yes
   subscriptions: yes
auth default:
   mechanisms: gssapi gss-spnego login plain
   realms: IFH.DE DESY.DE
   passdb:
     driver: pam
     args: max_requests=1
   userdb:
     driver: passwd-file
     args: /etc/userdb
   socket:
     type: listen
     client:
       path: /var/run/dovecot/auth-client
       mode: 432
     master:
       path: /var/run/dovecot/auth-master
       mode: 438
plugin:
   quota: maildir:User Quota
   quota_rule: *:storage=1000MB
   quota_rule2: INBOX:storage=1000MB
   quota_rule3: Trash:ignore
   acl: vfile:/etc/dovecot-acls:cache_secs=300
   sieve_storage: /var/spool/sieve/%u
   sieve: /var/spool/sieve/%u.sieve
   quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95
   quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80
   quota_warning3: storage=60%% /usr/local/bin/quota-warning.sh 60

  -- 
Wolfgang Friebel                   Deutsches Elektronen-Synchrotron DESY
Phone/Fax:  +49 33762 77372/216    Platanenallee 6
Mail: Wolfgang.Friebel AT desy.de  D-15738 Zeuthen  Germany