[Dovecot] 2.1.10 crashes at login (buf->used <= buf->alloc)

[interfaSys sàrl]

I thought it would be easily identifiable and a common problem, but
apparently not :)

Here is the trace:
(gdb) bt full
#0  0x0000000010709ebc in kill () from /lib/libc.so.7
No symbol table info available.
#1  0x0000000010708e43 in abort () from /lib/libc.so.7
No symbol table info available.
#2  0x00000000105b8e65 in default_fatal_finish.14395 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#3  0x0000000010588e3d in i_internal_fatal_handler.14399 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#4  0x00000000105e4941 in i_panic () from /usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#5  0x00000000105e7c77 in buffer_check_limits.13467 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#6  0x00000000105e7a6a in buffer_write () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#7  0x00000000105ce9f9 in array_idx_set_i () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#8  0x00000000109c770b in antispam_user_created (user=0x10a83040) at
user.c:17
        _module_tmp = (void *) 0x10a84d28
        asu = (struct antispam_user *) 0x10a84d28
        tmp = 0x0
#9  0x00000000104f1f04 in hook_mail_user_created () from
/usr/lib/dovecot/libdovecot-storage.so.0
No symbol table info available.
#10 0x00000000104efaf9 in mail_user_init () from
/usr/lib/dovecot/libdovecot-storage.so.0
No symbol table info available.
#11 0x0000000010495858 in mail_storage_service_init_post.46586.6405 ()
from /usr/lib/dovecot/libdovecot-storage.so.0
No symbol table info available.
#12 0x0000000010495582 in mail_storage_service_next () from
/usr/lib/dovecot/libdovecot-storage.so.0
No symbol table info available.
#13 0x00000000104951b3 in mail_storage_service_lookup_next () from
/usr/lib/dovecot/libdovecot-storage.so.0
No symbol table info available.
#14 0x000000000041f112 in client_create_from_input
(input=0x7fffffffe940, login_client=0x10a550c0, fd_in=11, fd_out=11,
input_buf=0x7fffffffe900,
    error_r=0x7fffffffe938) at main.c:202
        user = (struct mail_storage_service_user *) 0x10a55141
        mail_user = (struct mail_user *) 0x3
        client = (struct client *) 0x7fffffffec70
        set = (const struct imap_settings *) 0x7fffffffe900
        flags = 32767
#15 0x000000000041eeaa in login_client_connected (client=0x10a550c0,
username=0x10a04093 "test at example.com", extra_fields=0x10a04118)
    at main.c:272
        input = {module = 0x423d0f "imap", service = 0x423d0f "imap",
username = 0x10a04093 "test at example.com",
  session_id = 0x10a55120 "UCFMXQDK5gBewxZf", local_ip = {family = 2, u
= {ip6 = {__u6_addr = {__u6_addr8 = "N.8Q", '\0' <repeats 11 times>,
          __u6_addr16 = {11854, 20792, 0, 0, 0, 0, 0, 0}, __u6_addr32 =
{1362636366, 0, 0, 0}}}, ip4 = {s_addr = 1362636366}}}, remote_ip =
{family = 2,
    u = {ip6 = {__u6_addr = {__u6_addr8 = "^¦\026_", '\0' <repeats 11
times>, __u6_addr16 = {50014, 24342, 0, 0, 0, 0, 0, 0}, __u6_addr32 =
{1595327326,
            0, 0, 0}}}, ip4 = {s_addr = 1595327326}}}, local_port = 0,
remote_port = 0, userdb_fields = 0x10a04118, flags_override_add = 0,
  flags_override_remove = 0, no_userdb_lookup = 0}
        error = (const __unknown__ *) 0x0
        input_buf = {data = 0x10a55141, used = 3, priv = {0x0, 0x0, 0x3,
0x0, 0x0}}
#16 0x00000000105a229f in master_login_auth_finish.11302 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#17 0x00000000105efa50 in master_login_auth_callback.11253.2275 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#18 0x0000000010596f56 in master_login_auth_input_user.11520 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#19 0x000000001058bf99 in master_login_auth_input.11492 () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#20 0x00000000105e9b34 in io_loop_call_io () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#21 0x00000000105d1ba7 in io_loop_handler_run () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#22 0x00000000105d1a55 in io_loop_run () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#23 0x00000000105d1790 in master_service_run () from
/usr/lib/dovecot/libdovecot.so.0
No symbol table info available.
#24 0x000000000041ed5d in main (argc=1, argv=0x7fffffffec60) at main.c:389
        set_roots = {0x424020, 0x0}
        login_set = {auth_socket_path = 0x10a04068
"/var/run/dovecot/auth-master", postlogin_socket_path = 0x0,
postlogin_timeout_secs = 60,
  callback = 0x41ed9d <login_client_connected>, failure_callback =
0x4194ee <login_client_failed.21744>}
        service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN
        storage_service_flags = MAIL_STORAGE_SERVICE_FLAG_DISALLOW_ROOT
        username = (const __unknown__ *) 0x0
        c = -1
        set_roots = {0x424020, 0x0}


Cheers,

Olivier



On 18/09/2012 21:42, Timo Sirainen wrote:
> On 18.9.2012, at 23.32, interfaSys sàrl wrote:
> 
>> There is a big problem with 2.1.10.
>>
>> Here is what I saw in the logs:
>> Sep 18 22:22:23 imap(): Panic: file buffer.c: line 86
>> (buffer_check_limits): assertion failed: (buf->used <= buf->alloc)
>> Sep 18 22:22:23 imap(): Fatal: master: service(imap): child 26833 killed
>> with signal 6 (core dumped)
>>
>> Reverting to 2.1.9 with the exact same config file works just fine
> 
> gdb backtrace? http://dovecot.org/bugreport.html
> 
> 
>