[Dovecot] Bug report

[Bryan Seitz]

One of my users is causing dovecot to exit with signal 6 and generate a core file.  Seems to be in the mbox code.

Dovecot configuration:

# 1.2.4: /usr/local/etc/dovecot.conf
# OS: FreeBSD 7.2-STABLE amd64  
protocols: imap imaps pop3s
listen(default): localhost:143
listen(imap): localhost:143
listen(pop3): *
ssl_listen(default): *:993
ssl_listen(imap): *:993
ssl_listen(pop3): *:995
ssl_cert_file: /etc/ssl/certs/mail.bsd-unix.net.pem
ssl_key_file: /etc/ssl/certs/mail.bsd-unix.net.pem
login_dir: /var/run/dovecot/login
login_executable(default): /usr/local/libexec/dovecot/imap-login
login_executable(imap): /usr/local/libexec/dovecot/imap-login
login_executable(pop3): /usr/local/libexec/dovecot/pop3-login
verbose_proctitle: yes
first_valid_uid: 1000
first_valid_gid: 100
mail_privileged_group: mail
mail_location: mbox:~/mail/:INBOX=/var/mail/%u
mail_executable(default): /usr/local/libexec/dovecot/imap
mail_executable(imap): /usr/local/libexec/dovecot/imap
mail_executable(pop3): /usr/local/libexec/dovecot/pop3
mail_process_size: 1024
mail_plugins(default): fts fts_squat
mail_plugins(imap): fts fts_squat
mail_plugins(pop3): 
mail_plugin_dir(default): /usr/local/lib/dovecot/imap
mail_plugin_dir(imap): /usr/local/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3
imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep
imap_client_workarounds(pop3): 
pop3_client_workarounds(default): 
pop3_client_workarounds(imap): 
pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh
lda:
  postmaster_address: postmaster at example.com
  sendmail_path: /usr/sbin/sendmail
auth default:
  mechanisms: plain login
  passdb:
    driver: pam
  userdb:
    driver: passwd
  socket:
    type: listen
    client:
      path: /var/spool/postfix/private/auth
      mode: 384
      user: postfix
      group: postfix
plugin:
  fts: squat


FreeBSD triton.bsd-unix.net 7.2-STABLE FreeBSD 7.2-STABLE #17: Sat Oct  3 15:47:44 EDT 2009     root at triton.bsd-unix.net:/usr/obj/usr/src/sys/TRITON  amd64

dovecot-1.2.4_1     Secure and compact IMAP and POP3 servers

CPU Arch: x86_64

Filesystem: UFS

(gdb) bt full
#0  0x0000000040b2989c in kill () from /lib/libc.so.7
No symbol table info available.
#1  0x0000000040b286bb in abort () from /lib/libc.so.7
No symbol table info available.
#2  0x00000000004d9165 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:160
        backtrace = 0x40d4d048 ""
#3  0x00000000004d9f7e in i_internal_fatal_handler (type=Could not find the frame base for "i_internal_fatal_handler".
) at failures.c:440
No locals.
#4  0x00000000004d944a in i_panic (format=Could not find the frame base for "i_panic".
) at failures.c:207
        args = Could not find the frame base for "i_panic".
(gdb) bt
#0  0x0000000040b2989c in kill () from /lib/libc.so.7
#1  0x0000000040b286bb in abort () from /lib/libc.so.7
#2  0x00000000004d9165 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:160
#3  0x00000000004d9f7e in i_internal_fatal_handler (type=Could not find the frame base for "i_internal_fatal_handler".
) at failures.c:440
#4  0x00000000004d944a in i_panic (format=Could not find the frame base for "i_panic".
) at failures.c:207
#5  0x000000000045aea8 in istream_raw_mbox_get_body_size (stream=0x40d76070, expected_body_size=18446744073709551615) at istream-raw-mbox.c:578
#6  0x00000000004622f3 in mbox_sync_read_next_mail (sync_ctx=0x7fffffffe290, mail_ctx=0x7fffffffe0b0) at mbox-sync.c:151
#7  0x00000000004649f6 in mbox_sync_loop (sync_ctx=0x7fffffffe290, mail_ctx=0x7fffffffe0b0, partial=false) at mbox-sync.c:1004
#8  0x0000000000465c00 in mbox_sync_do (sync_ctx=0x7fffffffe290, flags=MBOX_SYNC_UNDIRTY) at mbox-sync.c:1535
#9  0x00000000004667b8 in mbox_sync_int (mbox=0x40d23848, flags=MBOX_SYNC_UNDIRTY, lock_id=0x7fffffffe4b8) at mbox-sync.c:1842
#10 0x0000000000466a26 in mbox_sync (mbox=0x40d23848, flags=MBOX_SYNC_UNDIRTY) at mbox-sync.c:1894
#11 0x0000000000466b8a in mbox_storage_sync_init (box=0x40d23848, flags=65) at mbox-sync.c:1936
#12 0x0000000000488d34 in mailbox_sync_init (box=0x40d23848, flags=65) at mail-storage.c:562
#13 0x0000000000488dfa in mailbox_sync (box=0x40d23848, flags=65, status_items=239, status_r=0x7fffffffe580) at mail-storage.c:593
#14 0x000000000041f77a in select_open (ctx=0x40d4d148, mailbox=0x40d52170 "Drafts", readonly=false) at cmd-select.c:273
#15 0x000000000041fba0 in cmd_select_full (cmd=0x40d4d048, readonly=false) at cmd-select.c:381
#16 0x000000000041fbda in cmd_select (cmd=0x40d4d048) at cmd-select.c:388
#17 0x0000000000423164 in client_command_input (cmd=0x40d4d048) at client.c:611
#18 0x00000000004233a1 in client_command_input (cmd=0x40d4d048) at client.c:660
#19 0x00000000004234e3 in client_handle_next_command (client=0x40d45030, remove_io_r=0x7fffffffe73d) at client.c:701
#20 0x0000000000423568 in client_handle_input (client=0x40d45030) at client.c:713
#21 0x00000000004236d4 in client_input (client=0x40d45030) at client.c:752
#22 0x00000000004e5da9 in io_loop_handler_run (ioloop=0x40d1f0c0) at ioloop-kqueue.c:149
#23 0x00000000004e4dfb in io_loop_run (ioloop=0x40d1f0c0) at ioloop.c:335
#24 0x000000000042f016 in main (argc=3, argv=0x7fffffffe8a0, envp=0x7fffffffe8c0) at main.c:327


Log messages:

Nov 11 23:11:20 triton dovecot: IMAP(sam): Panic: file istream-raw-mbox.c: line 578 (istream_raw_mbox_get_body_size): assertion failed: (rstream->body_offset != (uoff_t)-1)
Nov 11 23:11:20 triton kernel: pid 35530 (imap), uid 3033: exited on signal 6 (core dumped)


Any help would be appreciated!

-- 
Bryan G. Seitz