Hi,
after the upgrade from dovecot 2.0.13 (ubuntu oneiric) to dovecot 2.0.19 (ubuntu precise), in my logs I have a lot of these errors:
Jun 23 00:20:29 server1 dovecot: master: Error: service(imap-login): child 6714 killed with signal 11 (core dumps disabled)
I tested 2.0.21 and the problem is still here. The problem seems to appear only when the client is ms outlook, thunderbird works fine
Here is the captured trace (I hope this is enough and I don't need to install debug symbols for everythings):
Core was generated by `dovecot/imap-login -D'. Program terminated with signal 11, Segmentation fault. #0 0x00007f4d01c1a031 in RC4 () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (gdb) bt full #0 0x00007f4d01c1a031 in RC4 () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 No symbol table info available. #1 0x0000000000000134 in ?? () No symbol table info available. #2 0x00000000000000cd in ?? () No symbol table info available. #3 0x00007f4d03e97470 in ?? () No symbol table info available. #4 0x00007f4d01c80629 in ?? () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 No symbol table info available. #5 0x00007f4d01f82bcf in ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0 No symbol table info available. #6 0x00007f4d01f79e04 in ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0 No symbol table info available. #7 0x00007f4d01f7a134 in ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0 No symbol table info available. #8 0x00007f4d027fed6f in ssl_write (proxy=0x7f4d03e7c0a0) at ssl-proxy-openssl.c:499 ret = <optimized out> #9 0x00007f4d027fee68 in plain_read (proxy=0x7f4d03e7c0a0) at ssl-proxy-openssl.c:308 ret = <optimized out> corked = true ---Type <return> to continue, or q <return> to quit--- #10 0x00007f4d025b5c98 in io_loop_call_io (io=0x7f4d03e84b10) at ioloop.c:384 ioloop = 0x7f4d03e3e680 t_id = 2 #11 0x00007f4d025b6d27 in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:213 ctx = 0x7f4d03e505a0 events = 0x6579351d event = 0x7f4d03e50610 list = 0x7f4d03e93690 io = <optimized out> tv = {tv_sec = 59, tv_usec = 999832} msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> #12 0x00007f4d025b5c28 in io_loop_run (ioloop=0x7f4d03e3e680) at ioloop.c:405 No locals. #13 0x00007f4d025a3e33 in master_service_run (service=0x7f4d03e3e550, callback=<optimized out>) at master-service.c:481 No locals. #14 0x00007f4d027f7cc2 in main (argc=2, argv=0x7f4d03e3e370) at main.c:371 set_pool = 0x7f4d03e3e880 allow_core_dumps = <optimized out> ---Type <return> to continue, or q <return> to quit--- login_socket = 0x7f4d02800763 "login" c = <optimized out> #15 0x00007f4d021d676d in __libc_start_main () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #16 0x00007f4d02c2d5a9 in _start () No symbol table info available.
Nicola
Il 23/06/2012 22:39, Mailing List SVR ha scritto:
Hi,
after the upgrade from dovecot 2.0.13 (ubuntu oneiric) to dovecot 2.0.19 (ubuntu precise), in my logs I have a lot of these errors:
Jun 23 00:20:29 server1 dovecot: master: Error: service(imap-login): child 6714 killed with signal 11 (core dumps disabled)
I tested 2.0.21 and the problem is still here. The problem seems to appear only when the client is ms outlook, thunderbird works fine
Here is the captured trace (I hope this is enough and I don't need to install debug symbols for everythings):
Core was generated by `dovecot/imap-login -D'. Program terminated with signal 11, Segmentation fault. #0 0x00007f4d01c1a031 in RC4 () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (gdb) bt full #0 0x00007f4d01c1a031 in RC4 () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 No symbol table info available. #1 0x0000000000000134 in ?? () No symbol table info available. #2 0x00000000000000cd in ?? () No symbol table info available. #3 0x00007f4d03e97470 in ?? () No symbol table info available. #4 0x00007f4d01c80629 in ?? () from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 No symbol table info available. #5 0x00007f4d01f82bcf in ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0 No symbol table info available. #6 0x00007f4d01f79e04 in ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0 No symbol table info available. #7 0x00007f4d01f7a134 in ?? () from /lib/x86_64-linux-gnu/libssl.so.1.0.0 No symbol table info available. #8 0x00007f4d027fed6f in ssl_write (proxy=0x7f4d03e7c0a0) at ssl-proxy-openssl.c:499 ret = <optimized out> #9 0x00007f4d027fee68 in plain_read (proxy=0x7f4d03e7c0a0) at ssl-proxy-openssl.c:308 ret = <optimized out> corked = true ---Type <return> to continue, or q <return> to quit--- #10 0x00007f4d025b5c98 in io_loop_call_io (io=0x7f4d03e84b10) at ioloop.c:384 ioloop = 0x7f4d03e3e680 t_id = 2 #11 0x00007f4d025b6d27 in io_loop_handler_run (ioloop=<optimized out>) at ioloop-epoll.c:213 ctx = 0x7f4d03e505a0 events = 0x6579351d event = 0x7f4d03e50610 list = 0x7f4d03e93690 io = <optimized out> tv = {tv_sec = 59, tv_usec = 999832} msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> #12 0x00007f4d025b5c28 in io_loop_run (ioloop=0x7f4d03e3e680) at ioloop.c:405 No locals. #13 0x00007f4d025a3e33 in master_service_run (service=0x7f4d03e3e550, callback=<optimized out>) at master-service.c:481 No locals. #14 0x00007f4d027f7cc2 in main (argc=2, argv=0x7f4d03e3e370) at main.c:371 set_pool = 0x7f4d03e3e880 allow_core_dumps = <optimized out> ---Type <return> to continue, or q <return> to quit--- login_socket = 0x7f4d02800763 "login" c = <optimized out> #15 0x00007f4d021d676d in __libc_start_main () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #16 0x00007f4d02c2d5a9 in _start () No symbol table info available.
Nicola
Here is a more detailed trace,
Core was generated by dovecot/imap-login -D'. Program terminated with signal 11, Segmentation fault. #0 RC4 () at rc4-x86_64.s:343 343 rc4-x86_64.s: File o directory non esistente. (gdb) bt full #0 RC4 () at rc4-x86_64.s:343 No locals. #1 0x0000000000000134 in ?? () No symbol table info available. #2 0x00000000000000cd in ?? () No symbol table info available. #3 0x00007f4d03e97470 in ?? () No symbol table info available. #4 0x00007f4d01c80629 in rc4_hmac_md5_cipher (ctx=<optimized out>, out=0x7f4d03e8d0b8 "\314V\347\335Lc\024\205\221'µ\006\177\313\326ۢ\313\317\303c\266\360\347\364\263\242\316z\326\307\320\303Ω\242
\303\321ί\313Т\177\315\305\313̯\320\307u\307\320\320\303\316ѢzƢ\307\314\303\300\316v\242\313\306\316Ǣ\321c\030T
SORT=DISPLAY\301\021\222RC\005D=R\244\237T\342\004\"\020ES
TH\003\246AD=\247\032FS
\351ULTIA&\315\025N8\032\341\255\364EZ\376\236\062
CHILDREN\\\b{\250\240\255PACE U\216\331\nLUS LIST-EXTENDED I18NLEVEL=h
CO"...,
in=<optimized out>, len=0) at e_rc4_hmac_md5.c:163
key = 0x1a
rc4_off = 139968754799079
md5_off = <optimized out>
blocks = <optimized out>
l = <optimized out>
plen = <optimized out>
#5 0x00007f4d01f82bcf in tls1_enc (s=0x7f4d03e7b700, send=1) at
t1_enc.c:828
---Type <return> to continue, or q <return> to quit---
rec = 0x7f4d03e7bcb8
ds = 0x7f4d03e95cf0
l = 308
bs = 1
i = <optimized out>
ii = <optimized out>
j = <optimized out>
k = <optimized out>
pad = <optimized out>
enc = 0x7f4d01f4eae0
#6 0x00007f4d01f79e04 in do_ssl3_write (s=0x7f4d03e7b700, type=23,
buf=0x7f4d03e7c514 "A0 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR
LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES
THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS
LIST-EXTENDED I18NLEVEL=1 CO"..., len=292,
create_empty_fragment=0) at s3_pkt.c:815
p = <optimized out>
plen = 0x7f4d03e8d0b6 ""
i = <optimized out>
mac_size = 0
clear = <optimized out>
prefix_len = <optimized out>
eivlen = <optimized out>
align = <optimized out>
---Type <return> to continue, or q <return> to quit---
wr = 0x7f4d03e7bcb8
wb = 0x7f4d03e7bc68
sess = <optimized out>
#7 0x00007f4d01f7a134 in ssl3_write_bytes (s=0x7f4d03e7b700, type=23,
buf_=0x7f4d03e7c514, len=<optimized out>) at s3_pkt.c:605
buf = 0x7f4d03e7c514 "A0 OK [CAPABILITY IMAP4rev1 LITERAL+
SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY
THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE
UIDPLUS LIST-EXTENDED I18NLEVEL=1 CO"...
tot = 0
n = 292
nw = <optimized out>
i = <optimized out>
#8 0x00007f4d027fed6f in ssl_write (proxy=0x7f4d03e7c0a0)
at ssl-proxy-openssl.c:499
ret = <optimized out>
#9 0x00007f4d027fee68 in plain_read (proxy=0x7f4d03e7c0a0)
at ssl-proxy-openssl.c:308
ret = <optimized out>
corked = true
#10 0x00007f4d025b5c98 in io_loop_call_io (io=0x7f4d03e84b10) at
ioloop.c:384
ioloop = 0x7f4d03e3e680
t_id = 2
#11 0x00007f4d025b6d27 in io_loop_handler_run (ioloop=<optimized out>)
---Type <return> to continue, or q <return> to quit---
at ioloop-epoll.c:213
ctx = 0x7f4d03e505a0
events = 0x6579351d
event = 0x7f4d03e50610
list = 0x7f4d03e93690
io = <optimized out>
tv = {tv_sec = 59, tv_usec = 999832}
msecs = <optimized out>
ret = 1
i = <optimized out>
call = <optimized out>
#12 0x00007f4d025b5c28 in io_loop_run (ioloop=0x7f4d03e3e680) at
ioloop.c:405
No locals.
#13 0x00007f4d025a3e33 in master_service_run (service=0x7f4d03e3e550,
callback=<optimized out>) at master-service.c:481
No locals.
#14 0x00007f4d027f7cc2 in main (argc=2, argv=0x7f4d03e3e370) at main.c:371
set_pool = 0x7f4d03e3e880
allow_core_dumps = <optimized out>
login_socket = 0x7f4d02800763 "login"
c = <optimized out>
#15 0x00007f4d021d676d in __libc_start_main (main=0x7f4d027f7a60 <main>,
argc=2, ubp_av=0x7fff37290a68, init=<optimized out>,
fini=<optimized out>,
---Type <return> to continue, or q <return> to quit---
rtld_fini=<optimized out>, stack_end=0x7fff37290a58) at
libc-start.c:226
result = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0,
-1085834845464457622,
139968735532416, 140734118824544, 0, 0,
1085429787565592170,
1041548453329079914}, mask_was_saved = 0}}, priv = {pad = {
0x0, 0x0, 0x7fff37290a80, 0x1}, data = {prev = 0x0,
cleanup = 0x0, canceltype = 925436544}}}
not_first_call = <optimized out>
#16 0x00007f4d02c2d5a9 in _start ()
Nicola
On Sat, 2012-06-23 at 22:39 +0200, Mailing List SVR wrote:
after the upgrade from dovecot 2.0.13 (ubuntu oneiric) to dovecot 2.0.19 (ubuntu precise), in my logs I have a lot of these errors:
Jun 23 00:20:29 server1 dovecot: master: Error: service(imap-login): child 6714 killed with signal 11 (core dumps disabled)
I tested 2.0.21 and the problem is still here. The problem seems to appear only when the client is ms outlook, thunderbird works fine
Looks to me more like OpenSSL library bug. The only reason why it could be Dovecot bug is if Dovecot is causing memory corruption. Could you run imap-login via valgrind to see if this is the case?
service imap-login { executable = /usr/bin/valgrind -q --vgdb=no /usr/local/libexec/dovecot/imap-login chroot = }
Also have you changed any ssl-related settings in dovecot.conf?
Il 24/06/2012 00:05, Timo Sirainen ha scritto:
On Sat, 2012-06-23 at 22:39 +0200, Mailing List SVR wrote:
after the upgrade from dovecot 2.0.13 (ubuntu oneiric) to dovecot 2.0.19 (ubuntu precise), in my logs I have a lot of these errors:
Jun 23 00:20:29 server1 dovecot: master: Error: service(imap-login): child 6714 killed with signal 11 (core dumps disabled)
I tested 2.0.21 and the problem is still here. The problem seems to appear only when the client is ms outlook, thunderbird works fine Looks to me more like OpenSSL library bug. The only reason why it could be Dovecot bug is if Dovecot is causing memory corruption. Could you run imap-login via valgrind to see if this is the case?
service imap-login { executable = /usr/bin/valgrind -q --vgdb=no /usr/local/libexec/dovecot/imap-login chroot = }
Also have you changed any ssl-related settings in dovecot.conf?
attached my complete configuration, I hope there is a mistake in my config
I looked at the code and there was no relevant change from dovecot 2.0.13 and dovecot 2.0.19, upgrading between ubuntu releases updated openssl too and this could be the problem,
however is not clear to me while imap over ssl works fine with thunderdird and I see the crash in the logs for customers that seems to use ms outlook,
Nicola
On 6/23/2012 3:27 PM, Mailing List SVR wrote:
I looked at the code and there was no relevant change from dovecot 2.0.13 and dovecot 2.0.19, upgrading between ubuntu releases updated openssl too and this could be the problem,
however is not clear to me while imap over ssl works fine with thunderdird and I see the crash in the logs for customers that seems to use ms outlook,
There have been many interactions between OpenSSL (and some other SSL implementations) and some versions of schannel.dll (the system library responsible for SSL connections, used by Outlook and Internet Explorer, amongst other tools).
M$ has released hotfixes addressing various problems in schannel.dll in the past, such as: http://support.microsoft.com/kb/933430
There is a fair bit of write-up online about how to configure your SSL servers to avoid problematic ciphers and socket configurations that help you avoid tripping over most of the bugs.
For example: http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html#msie
Whenever SSL is involved in the transaction process, always include it in your debug process as SSL negotiation is non-trivial and has been often fraught with some peril.
=R=
Il 24/06/2012 00:05, Timo Sirainen ha scritto:
On Sat, 2012-06-23 at 22:39 +0200, Mailing List SVR wrote:
after the upgrade from dovecot 2.0.13 (ubuntu oneiric) to dovecot 2.0.19 (ubuntu precise), in my logs I have a lot of these errors:
Jun 23 00:20:29 server1 dovecot: master: Error: service(imap-login): child 6714 killed with signal 11 (core dumps disabled)
I tested 2.0.21 and the problem is still here. The problem seems to appear only when the client is ms outlook, thunderbird works fine Looks to me more like OpenSSL library bug.
the bug seems related to this patch:
http://cvs.openssl.org/chngview?cn=22415
I'm applying just now
The only reason why it could be Dovecot bug is if Dovecot is causing memory corruption. Could you run imap-login via valgrind to see if this is the case?
service imap-login { executable = /usr/bin/valgrind -q --vgdb=no /usr/local/libexec/dovecot/imap-login chroot = }
Also have you changed any ssl-related settings in dovecot.conf?
Il 24/06/2012 00:49, Mailing List SVR ha scritto:
Il 24/06/2012 00:05, Timo Sirainen ha scritto:
On Sat, 2012-06-23 at 22:39 +0200, Mailing List SVR wrote:
after the upgrade from dovecot 2.0.13 (ubuntu oneiric) to dovecot 2.0.19 (ubuntu precise), in my logs I have a lot of these errors:
Jun 23 00:20:29 server1 dovecot: master: Error: service(imap-login): child 6714 killed with signal 11 (core dumps disabled)
I tested 2.0.21 and the problem is still here. The problem seems to appear only when the client is ms outlook, thunderbird works fine Looks to me more like OpenSSL library bug.
the bug seems related to this patch:
http://cvs.openssl.org/chngview?cn=22415
I'm applying just now
I can confirm that the patch listed above solve the problem, thanks for pointing me to openssl,
Nicola
The only reason why it could be Dovecot bug is if Dovecot is causing memory corruption. Could you run imap-login via valgrind to see if this is the case?
service imap-login { executable = /usr/bin/valgrind -q --vgdb=no /usr/local/libexec/dovecot/imap-login chroot = }
Also have you changed any ssl-related settings in dovecot.conf?
participants (3)
-
Mailing List SVR
-
Robin
-
Timo Sirainen