[Dovecot] Dovecot rc15 crash in mbox-sync-update.c

[Steven F Siirila]

On Sat, Jan 06, 2007 at 12:46:45AM +0200, Timo Sirainen wrote:
> On 5.1.2007, at 23.25, Steven F Siirila wrote:
> 
> >Here is another crash we've been seeing recently in rc15 on Solaris  
> >10.
> >
> >(gdb) bt full
> 
> This backtrace is pretty much corrupted. That happens if the binary  
> you gave to gdb wasn't the exact same one that produced the core file.

Hmm, I may have used the RC16 binary since in order to use gdb I have to
move the core file to a different server than the one in which the crash
occurred.  Here is another backtrace using the right binary:

(gdb) bt full
#0  0xff1c12a4 in .L423 () from /lib/libc.so.1
No symbol table info available.
#1  0xff15fe20 in __wcsxfrm_std () from /lib/libc.so.1
No symbol table info available.
#2  0xff140040 in getutline () from /lib/libc.so.1
No symbol table info available.
#3  0x000786a8 in i_internal_panic_handler (
    fmt=0x8f7e0 "file %s: line %d (%s): assertion failed: (%s)", 
    args=0xffbfee68) at failures.c:382
No locals.
#4  0x00078190 in i_panic (
    format=0x8f7e0 "file %s: line %d (%s): assertion failed: (%s)")
    at failures.c:180
No locals.
#5  0x00042a90 in mbox_sync_update_header_from (ctx=0xffbff340, mail=0x14e8)
    at mbox-sync-update.c:459
	__PRETTY_FUNCTION__ = "mbox_sync_update_header_from"
#6  0x00041730 in mbox_sync_rewrite (sync_ctx=0xffbff548, mail_ctx=0x39d5, 
    end_offset=14098141, move_diff=27645, extra_space=1, first_seq=45, 
    last_seq=163) at mbox-sync-rewrite.c:357
	mails = (struct mbox_sync_mail *) 0xcf238
	offset = 1
	dest_offset = 4294967295
	next_end_offset = 14079696
	next_move_diff = 6
	start_offset = 1275633
	expunged_space = 0
	idx = 185
	first_nonexpunged_idx = 0
	padding_per_mail = 50
	count = 542
	ret = 0
	__PRETTY_FUNCTION__ = "mbox_sync_rewrite"
#7  0x0003db84 in mbox_sync (mbox=0xc09c0, flags=32407386) at mbox-sync.c:1302
	index_sync_ctx = (struct mail_index_sync_ctx *) 0xc1d58
	sync_view = (struct mail_index_view *) 0xc1d90
	sync_ctx = {mbox = 0xc09c0, flags = 0, input = 0xc5878, 
  file_input = 0xc5750, write_fd = 10, index_sync_ctx = 0xc1d58, 
  sync_view = 0xc1d90, t = 0xc3340, hdr = 0xc1dd8, header = 0xb6900, 
  from_line = 0xb68d8, base_uid_validity = 1143728609, base_uid_last = 5161, 
  base_uid_last_offset = 1538, mails = {buffer = 0xb6928, element_size = 56}, 
  syncs = {buffer = 0xb6950, element_size = 20}, sync_rec = {uid1 = 0, 
    uid2 = 0, type = 0, add_flags = 0 '\0', remove_flags = 0 '\0', 
    keyword_idx = 0}, mail_keyword_pool = 0xc3598, 
  saved_keywords_pool = 0xc36a0, prev_msg_uid = 5494, next_uid = 5709, 
  idx_next_uid = 1, seq = 586, idx_seq = 587, need_space_seq = 45, 
  expunged_space = 0, space_diff = -27680, dest_first_mail = 0, 
  first_mail_crlf_expunged = 0, delay_writes = 0}
	seq = 4294967295
	offset = 18446744073709551615
	lock_id = 3
	ret = 0
	changed = 1
#8  0x0003e2c8 in mbox_storage_sync_init (box=0xc09c0, flags=0)
    at mbox-sync.c:1815
	mbox_sync_flags = 254656
	ret = 0
#9  0x00069f24 in mailbox_sync_init (box=0xc09c0, flags=0)
    at mail-storage.c:404
No locals.
#10 0x00028fe0 in imap_sync_nonselected (box=0xc09c0, flags=0)
    at imap-sync.c:195
	ctx = (struct mailbox_sync_context *) 0xd
	sync_rec = {seq1 = 753216, seq2 = 0, type = 999}
	status = {messages = 2155905152, recent = 7, unseen = 4290770816, 
  uidvalidity = 135948, uidnext = 706560, first_unseen_seq = 705536, 
  keywords = 0x0}
#11 0x00021248 in cmd_status (cmd=0xb7e14) at cmd-status.c:68
	client = (struct client *) 0xb7dd0
	args = (struct imap_arg *) 0xb8078
	status = {messages = 745216, recent = 2, unseen = 4290771088, 
  uidvalidity = 0, uidnext = 0, first_unseen_seq = 0, keywords = 0xffbff830}
	storage = (struct mail_storage *) 0xb7c08
	real_mailbox = 0xb8128 "mail/AutoFiled/2006"
	str = (string_t *) 0xb8128
#12 0x0002287c in _client_input (context=0xb7dd0) at client.c:381
	cmd = (struct client_command_context *) 0xb7e14
	ret = 135400
#13 0x0007e3bc in io_loop_handler_run (ioloop=0xb56c8) at ioloop-poll.c:199
	ctx = (struct ioloop_handler_context *) 0xb5700
	pollfd = (struct pollfd *) 0x2
	tv = {tv_sec = 0, tv_usec = 999040}
	io = (struct io *) 0xb6658
	t_id = 2
	msecs = 999
	ret = 0
	call = true
#14 0x0007dcb4 in io_loop_run (ioloop=0xb56c8) at ioloop.c:281
No locals.
#15 0x0002ab24 in main (argc=-4195379, argv=0xab800, envp=0xac400)
    at main.c:280
No locals.
(gdb) quit

-- 

Steven F. Siirila			Office: Lind Hall, Room 130B
Internet Services			E-mail: sfs at umn.edu
Office of Information Technology	Voice: (612) 626-0244
University of Minnesota			Fax: (612) 626-7593