[Dovecot] Another 1.2.5 imap panic

[Chris Wakelin]

We've had another random imap process crash. This is with the original
1.2.5 imap (I haven't applied the patch for two processes creating an
index simultaneously):

> Oct 03 13:24:56 imap-login: Info: Login: user=<xxxxxxxx>, method=PLAIN, rip=134.225.1.46, lip=134.225.16.6
> Oct 03 13:25:59 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=483, msgid=<xxxxxxxx>
> Oct 03 13:28:06 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: expunge: uid=483, msgid=<xxxxxxxx>, size=63593
> Oct 03 13:28:30 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=482, msgid=<xxxxxxxx>
> Oct 03 13:28:30 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=484, msgid=<xxxxxxxx>
> Oct 03 13:28:30 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=485, msgid=<xxxxxxxx>
> Oct 03 13:28:42 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: undelete: uid=485, msgid=<xxxxxxxx>
> Oct 03 13:28:51 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=486, msgid=<xxxxxxxx>
> Oct 03 13:28:54 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: expunge: uid=482, msgid=<xxxxxxxx>, size=273185
> Oct 03 13:28:54 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: expunge: uid=484, msgid=<xxxxxxxx>, size=12740
> Oct 03 13:28:54 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: expunge: uid=486, msgid=<xxxxxxxx>, size=52154
> Oct 03 13:30:22 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=470, msgid=<xxxxxxxx>
> Oct 03 13:30:36 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=471, msgid=<xxxxxxxx>
> Oct 03 13:30:50 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=472, msgid=<xxxxxxxx>
> Oct 03 13:33:27 IMAP 6067 xxxxxxxx 134.225.1.46 : Info: delete: uid=475, msgid=<xxxxxxxx>
> Oct 03 13:34:20 IMAP 6067 xxxxxxxx 134.225.1.46 : Panic: file istream-raw-mbox.c: line 578 (istream_raw_mbox_get_body_size): assertion failed: (rstream->body_offset != (uoff_t)-1)

Backtrace:

> Core was generated by `imap [xxxxxxxx 134.225.1.46]'.
> Program terminated with signal 6, Abort.
> #0  0xff21fe78 in ?? ()
> (gdb) bt
> #0  0xff21fe78 in ?? ()
> #1  0xbe258 in ?? ()
> #2  0xbeb14 in ?? ()
> #3  0xbe414 in ?? ()
> #4  0x5a238 in mail_index_update_flags (t=0xe29b8, seq=578, modify_type=37,
>     flags=928984) at mail-index-transaction.c:697
> #5  0x5a4d8 in mail_index_ext_resize (t=0x12a250, ext_id=4294967295,
>     hdr_size=1221160, record_size=64549, record_align=0)
>     at ../../src/lib/array.h:157
> #6  0x5a7a0 in mail_index_update_ext (t=0x0, seq=0, ext_id=523301,
>     data=0xffbeeb38, old_data_r=0x22094) at ../../src/lib/array.h:187
> #7  0x5ae58 in _tview_close (view=0x1272a8) at mail-index-transaction-view.c:24
> #8  0x5c7d8 in mail_index_sync_end (_ctx=0xffffffff) at mail-index-sync.c:636
> #9  0x5cd74 in mail_index_sync_update_log_offset (ctx=0x12be80, map=0x11,
>     eol=140) at mail-index-sync-update.c:59
> #10 0x5cea4 in mail_index_map_msync (index=0x130d08, map=0x0)
>     at mail-index-sync-update.c:72
> #11 0x79354 in t_pop () at data-stack.c:160
> #12 0x6a95c in mailbox_save_init () at mail-storage.c:526
> #13 0x5ced0 in mail_index_map_msync (index=0x1296c0, map=0x11)
>     at mail-index-sync-update.c:75
> #14 0x79038 in buffer_get_size () at buffer.c:293

(see http://www.dovecot.org/list/dovecot/2009-September/043126.html for
"dovecot -n" output etc.)

BTW there's been no crashes of imap-login since the last patch for
literals in login parameters :)

Best Wishes,
Chris
-- 
--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
Christopher Wakelin,                           c.d.wakelin at reading.ac.uk
IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 8439
Whiteknights, Reading, RG6 2AF, UK              Fax: +44 (0)118 975 3094