[Dovecot] v2.2.2 (266101990d63) Core Dump

==> /var/log/dovecot/dovecot.log <== Jun 9 09:58:26 spectre dovecot: lmtp: Fatal: master: service(lmtp): child 12635 killed with signal 11 (core dumped)

This is another segmentation fault introduced in the current code. Please also look into fixing the other Core Dump I reported:

http://www.dovecot.org/list/dovecot/2013-June/090795.html

(gdb) bt full #0 0x00007f305d3df646 in buffer_append (buf=0x0, data=0x7fff92c0d218, data_size=0) at buffer.c:184 No locals. #1 0x00007f305d6bee16 in array_append_i (data=0x7fff92c0d218, array=0x1267448, count=<optimized out>) at ../../src/lib/array.h:148 count = 1 #2 mail_namespace_add_storage (ns=ns@entry=0x12673f0, storage=0x7fff92c0d218, storage@entry=0x126cb50) at mail-namespace.c:39 No locals. #3 0x00007f305d6c488d in mail_storage_create_full (ns=ns@entry=0x12673f0, driver=<optimized out>, driver@entry=0x7f305d7263a4 "raw", data=<optimized out>, flags=flags@entry=0, storage_r=storage_r@entry=0x7fff92c0d318, error_r=error_r@entry=0x7fff92c0d338) at mail-storage.c:397 storage_class = 0x7f305d95a560 storage = 0x126cb50 list = 0x1271800 list_set = {layout = 0x125b050 "none", root_dir = 0x125b048 "", index_dir = 0x0, index_pvt_dir = 0x0, control_dir = 0x0, alt_dir = 0x0, inbox_path = 0x0, subscription_fname = 0x7f305d72310d "subscriptions", maildir_name = 0x7f305d71e70b "", mailbox_dir_name = 0x7f305d71e70b "", escape_char = 0 '\000', broken_char = 0 '\000', utf8 = false, alt_dir_nocheck = false} list_flags = <optimized out> p = <optimized out> __FUNCTION__ = "mail_storage_create_full" #4 0x00007f305d6c4b7e in mail_storage_create (ns=ns@entry=0x12673f0, driver=driver@entry=0x7f305d7263a4 "raw", flags=flags@entry=0, error_r=error_r@entry=0x7fff92c0d338) at mail-storage.c:407 storage = 0x7f305dd87a38 #5 0x00007f305d6bd605 in raw_storage_create_from_set (set_info=<optimized out>, set=<optimized out>) at raw-storage.c:48 user = 0x126d7f0 ns = 0x12673f0 ns_set = 0x126f2e0 mail_set = <optimized out> error = 0x0 #6 0x0000000000405762 in client_raw_user_create (client=<optimized out>) at client.c:150 sets = <optimized out> #7 client_create (fd_in=12, fd_out=12, conn=<optimized out>) at client.c:242 client = 0x1267f10 pool = 0x1267ef0 #8 0x00007f305d3a8740 in master_service_listen (l=0x1266120) at master-service.c:826 service = 0x12625a0 conn = {fd = 12, listen_fd = 8, name = 0x1262905 "dovecot-lmtp", remote_ip = {family = 0, u = {ip6 = {__in6_u = {__u6_addr8 = '\000' , __u6_addr16 = {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 = {0, 0, 0, 0}}}, ip4 = {s_addr = 0}}}, remote_port = 0, fifo = 0, ssl = 0, accepted = 1} #9 0x00007f305d3f2996 in io_loop_call_io (io=0x12661c0) at ioloop.c:387 ioloop = 0x1262710 t_id = 2 #10 0x00007f305d3f3807 in io_loop_handler_run (ioloop=ioloop@entry=0x1262710) at ioloop-epoll.c:215 ctx = 0x1265540 events = 0x0 event = 0x12655b0 list = 0x1266210 io = <optimized out> tv = {tv_sec = 2147483, tv_usec = 0} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #11 0x00007f305d3f24d8 in io_loop_run (ioloop=0x1262710) at ioloop.c:406 No locals. ---Type <return> to continue, or q <return> to quit--- #12 0x00007f305d3a8013 in master_service_run (service=0x12625a0, callback=callback@entry=0x404dd0 ) at master-service.c:560 No locals. #13 0x0000000000404c24 in main (argc=1, argv=0x1262390) at main.c:122 set_roots = {0x60a6a0, 0x409260, 0x0} service_flags = <optimized out> storage_service_flags = 675 c = <optimized out>