[Dovecot] Segfault in imap

[Todd Burroughs]

I'm running the current CVS version, as of April 26.  There have been a few
of these with the same problem.

There was a NULL pointer dereference at mail-index-view.c:603
view->map == NULL

Here's the log entry, etc.


dovecot: May 03 08:30:08 Error:  10195 IMAP(support): UIDVALIDITY changed (1115122813 -> 1115123383) in mbox file /mailhome/new/m/2/support/mbox
dovecot: May 03 08:30:13 Error: child 10195 (imap) killed with signal 11


Core was generated by `imap'.
Program terminated with signal 11, Segmentation fault.

(gdb) bt full
#0  mail_index_view_open (index=0x80c2fc0) at mail-index-view.c:603
         view = (struct mail_index_view *) 0x80c5608
#1  0x08077ccd in index_storage_mailbox_init (ibox=0x80c3bc8, index=0x80c2fc0,
     name=0x80a6cfe "INBOX", flags=Variable "flags" is not available.
) at index-storage.c:345
         storage = Variable "storage" is not available.
(gdb) bt
#0  mail_index_view_open (index=0x80c2fc0) at mail-index-view.c:603
#1  0x08077ccd in index_storage_mailbox_init (ibox=0x80c3bc8, index=0x80c2fc0,
     name=0x80a6cfe "INBOX", flags=Variable "flags" is not available.
) at index-storage.c:345
#2  0x080679c2 in mbox_alloc (storage=0x80bc788, index=0x80c2fc0,
     name=0x80a6cfe "INBOX", flags=0) at mbox-storage.c:500
#3  0x080684e0 in mbox_open (storage=0x80bc788, name=0x80a6cfe "INBOX",
     flags=0) at mbox-storage.c:545
#4  0x0806863f in mbox_mailbox_open (_storage=0x80bc788,
     name=0x80a6cfe "INBOX", input=0x0, flags=0) at mbox-storage.c:603
#5  0x0808ce88 in mailbox_open (storage=0x0, name=0x80a6cfe "INBOX",
     input=0x0, flags=0) at mail-storage.c:295
#6  0x08057f9f in _cmd_select_full (cmd=0x80bcb98, readonly=0)
     at cmd-select.c:32
#7  0x08058171 in cmd_select (cmd=0x80bcb98) at cmd-select.c:97
#8  0x08059635 in _client_input (context=0x80bcb58) at client.c:334
#9  0x0809e04a in io_loop_handler_run (ioloop=0x80bb9b0) at ioloop-poll.c:184
#10 0x0809d769 in io_loop_run (ioloop=0x80bb9b0) at ioloop.c:218
#11 0x08060537 in main (argc=1, argv=0xbffffa44, envp=0xbffffa4c) at main.c:228


(gdb) p view->map
$1 = (struct mail_index_map *) 0x0
(gdb) p index->map
$2 = (struct mail_index_map *) 0x0
(gdb) p index->indexid
$3 = 0