Fatal: master: service(imap): child 19549 killed with signal 11 (core dumped)

[Gabriel Almaguer]

hello.

Today I had a problem (core dumped) in a dovecot installation update 
yesterday.
After many hours I found that when one settings "protocol imap" the 
option "replication"
causes (core dumped).
In this server settings "replication" was removed leaving only the 
"protocol imap" (my error)
I send my documentation error so they can add a validation and not generate
   a Fatal Error end users.

Any other info you need please email me

Thank You.

dovecot-2.2.15

---------------------/src/plugins/replication/replication-plugin.c

replication_mail_transaction_commit(void *txn,
                                     struct 
mail_transaction_commit_changes *changes)
{
         struct replication_mail_txn_context *ctx =
                 (struct replication_mail_txn_context *)txn;
         struct replication_user *ruser =
                 REPLICATION_USER_CONTEXT(ctx->ns->user);
         enum replication_priority priority;

         if (ctx->new_messages || changes->changed) {
                 priority = !ctx->new_messages ? 
REPLICATION_PRIORITY_LOW :       <== linea 258 look dgb
                         ruser->sync_secs == 0 ? REPLICATION_PRIORITY_HIGH :
                         REPLICATION_PRIORITY_SYNC;
                 replication_notify(ctx->ns, priority);
         }
         i_free(ctx);
}



--------------------------------------------------------------------------------------- 
dovecot -n

protocol imap {
   mail_plugins = quota notify fts fts_squat zlib acl imap_zlib imap_acl 
quota imap_quota  replication
}

------------------------------------------------------------- 
/var/log/maillog
Jan 21 20:38:17 xxxxxx dovecot: imap(etrevino at xxxxxxx.com.mx): Fatal: 
master: service(imap): child 19549 killed with signal 11 (core dumped)
--------------------------------------------- /var/log/messages
Jan 21 20:38:17 xxxxxx kernel: imap[19549]: segfault at 0000000000000018 
rip 00002aacb45ea645 rsp 00007fffc2db7350 error 4

-------------------------------------------------------------------- strace
[pid 18265] fstat(4, {st_mode=S_IFREG|0600, st_size=32712, ...}) = 0
[pid 18265] write(4, "\200\200\200\205\4\0\0\0R\2\0\0R\2\0\0\10\0\0\0", 
20) = 20
[pid 18265] fcntl(4, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=0, 
len=0}) = 0
[pid 18265] 
stat("/var/spool/vdovecot/xxxxxx.com.mx/cduran/dovecot.index.log", 
{st_mode=S_IFREG|0600, st_size=32732, ...}) = 0
[pid 18265] fstat(4, {st_mode=S_IFREG|0600, st_size=32732, ...}) = 0
[pid 18265] munmap(0x2ab13f335000, 32712) = 0
[pid 18265] pread(4, "\200\200\200\205\4\0\0\0R\2\0\0R\2\0\0\10\0\0\0", 
8192, 32712) = 20
[pid 18265] pread(4, "", 8192, 32732)   = 0
[pid 18265] fstat(4, {st_mode=S_IFREG|0600, st_size=32732, ...}) = 0
[pid 18265] mmap(NULL, 32732, PROT_READ, MAP_SHARED, 4, 0) = 0x2ab13f335000
[pid 18265] madvise(0x2ab13f335000, 32732, MADV_SEQUENTIAL) = 0
[pid 18265] fstat(4, {st_mode=S_IFREG|0600, st_size=32732, ...}) = 0
[pid 18265] --- SIGSEGV (Segmentation fault) @ 0 (0) ---
Process 18265 detached
--------------------------------------------------------------------------------- 
gdb
Core was generated by `dovecot/imap'.
Program terminated with signal 11, Segmentation fault.
#0  replication_mail_transaction_commit (txn=0x18610d70, 
changes=0x7fff80ac1440) at replication-plugin.c:258
258     replication-plugin.c: No such file or directory.
         in replication-plugin.c
(gdb) bt full
#0  replication_mail_transaction_commit (txn=0x18610d70, 
changes=0x7fff80ac1440) at replication-plugin.c:258
         ctx = <value optimized out>
         priority = <value optimized out>
#1  0x00002ab29a975749 in notify_contexts_mail_transaction_commit 
(t=0x18610000, changes=0x7fff80ac1440) at notify-plugin.c:132
         ctx = 0x1859af70
         mail_txn = 0x18610800
#2  0x00002ab29a975d60 in notify_transaction_commit (t=0x18610000, 
changes_r=0x7fff80ac1440) at notify-storage.c:182
         lt = 0x18610d50
#3  0x00002ab29a569beb in quota_mailbox_transaction_commit 
(ctx=0x18610000, changes_r=0x7fff80ac1440) at quota-storage.c:134
         qt = 0x18610d90
#4  0x00002ab299bce134 in mailbox_transaction_commit_get_changes 
(_t=<value optimized out>, changes_r=0x7fff80ac1440)
     at mail-storage.c:1916
         _data_stack_cur_id = 3
         t = 0x18610000
         box = 0x18609610
         save_count = 1
         ret = <value optimized out>
         __FUNCTION__ = "mailbox_transaction_commit_get_changes"
#5  0x000000000040b85c in cmd_append_parse_new_msg ()
No symbol table info available.
#6  0x000000000040b65b in cmd_append_continue_message ()
No symbol table info available.
#7  0x0000000000416aa7 in command_exec ()
No symbol table info available.
#8  0x000000000040c191 in client_input_append ()
No symbol table info available.
#9  0x00002ab299ee3689 in io_loop_call_io (io=0x1859c010) at ioloop.c:498
         ioloop = 0x18585740
         t_id = 2
         __FUNCTION__ = "io_loop_call_io"
#10 0x00002ab299ee4a45 in io_loop_handler_run_internal (ioloop=<value 
optimized out>) at ioloop-epoll.c:220
         ctx = <value optimized out>
         event = 0x18587240
         list = 0x18587e30
         io = 0x20
         tv = {tv_sec = 1799, tv_usec = 999036}
         msecs = <value optimized out>
         ret = 1
         i = 0
         call = false
         __FUNCTION__ = "io_loop_handler_run_internal"
#11 0x00002ab299ee3729 in io_loop_handler_run (ioloop=0x20) at ioloop.c:545
No locals.
#12 0x00002ab299ee39a8 in io_loop_run (ioloop=0x18585740) at ioloop.c:522
         __FUNCTION__ = "io_loop_run"
#13 0x00002ab299e8a233 in master_service_run (service=0x185855d0, 
callback=0x28) at master-service.c:566
No locals.
#14 0x000000000041f3ce in main ()