[Dovecot] Trying to allocate 0 bytes in index-mail-headers.c

[Todd Burroughs]

Here's a new one.  It just started with the latest (April 8) CVS
version.

In index-mail-headers.c, line 622:
         fields = t_new(struct mail_cache_field, count);
count is 0

I'm seeing this with several mailboxes.  We're using mbox.

Here's the error message and backtrace.

dovecot: Apr 09 10:53:18 Error:  3348 IMAP(chairman): Trying to allocate 0 bytes
dovecot: Apr 09 10:53:18 Error: child 3348 (imap) killed with signal 6


Core was generated by `imap'.
Program terminated with signal 6, Aborted.

(gdb) bt
#1  0xbffff5c8 in ?? ()
#2  0x00000006 in ?? ()
#3  0x00000d14 in ?? ()
#4  0xb7ef1d41 in raise () from /lib/tls/libc.so.6
#5  0xb7ef3529 in abort () from /lib/tls/libc.so.6
#6  0x080985ba in i_internal_panic_handler (
     fmt=0x6 <Address 0x6 out of bounds>,
     args=0xd14 <Address 0xd14 out of bounds>) at failures.c:374
#7  0x080989d4 in i_panic (format=0x80add1b "Trying to allocate %u bytes")
     at failures.c:173
#8  0x08097e37 in t_malloc_real (size=Variable "size" is not available.
) at data-stack.c:214
#9  0x08097f54 in t_malloc0 (size=0) at data-stack.c:282
#10 0x08074d34 in index_header_lookup_init (box=0x80c2990, headers=0xbffff840)
     at index-mail-headers.c:622
#11 0x0808c6f1 in mailbox_header_lookup_init (box=0x0, headers=0xbffff840)
     at mail-storage.c:376
#12 0x0805e095 in imap_sort (cmd=0x80bb9a8, charset=0x80bbd38 "US-ASCII",
     args=0x80d72a0, sort_program=0x80b2098) at imap-sort.c:228
#13 0x08058363 in cmd_sort (cmd=0x80bb9a8) at cmd-sort.c:123
#14 0x080595e5 in _client_input (context=0x80bb968) at client.c:334
#15 0x0809d74a in io_loop_handler_run (ioloop=0x80ba5b0) at ioloop-poll.c:184
#16 0x0809ce69 in io_loop_run (ioloop=0x80ba5b0) at ioloop.c:218
#17 0x080604a7 in main (argc=1, argv=0xbffffa74, envp=0xbffffa7c) at main.c:228

(gdb) bt full
#0  0xffffe410 in ?? ()
No symbol table info available.
#1  0xbffff5c8 in ?? ()
No symbol table info available.
#2  0x00000006 in ?? ()
No symbol table info available.
#3  0x00000d14 in ?? ()
No symbol table info available.
#4  0xb7ef1d41 in raise () from /lib/tls/libc.so.6
No symbol table info available.
#5  0xb7ef3529 in abort () from /lib/tls/libc.so.6
No symbol table info available.
#6  0x080985ba in i_internal_panic_handler (
     fmt=0x6 <Address 0x6 out of bounds>,
     args=0xd14 <Address 0xd14 out of bounds>) at failures.c:374
No locals.
#7  0x080989d4 in i_panic (format=0x80add1b "Trying to allocate %u bytes")
     at failures.c:173
No locals.
#8  0x08097e37 in t_malloc_real (size=Variable "size" is not available.
) at data-stack.c:214
         block = Variable "block" is not available.