lmtp 2.3.2.1 segfault with backtrace

[Aki Tuomi]

Hi!

Thank you for reporting this, we'll look into it!

Aki


On 14.08.2018 12:44, Tom Sommer wrote:
> lmtp on Director crash with 2.3.2.1
>
> # gdb /usr/libexec/dovecot/lmtp /var/core/60174
> GNU gdb (GDB) Red Hat Enterprise Linux (7.2-92.el6)
> Copyright (C) 2010 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later
> <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.  Type "show
> copying"
> and "show warranty" for details.
> This GDB was configured as "x86_64-redhat-linux-gnu".
> For bug reporting instructions, please see:
> <http://www.gnu.org/software/gdb/bugs/>...
> Reading symbols from /usr/libexec/dovecot/lmtp...Reading symbols from
> /usr/lib/debug/usr/libexec/dovecot/lmtp.debug...done.
> done.
> [New Thread 60174]
> Reading symbols from /usr/lib64/dovecot/libdovecot-lda.so.0...Reading
> symbols from
> /usr/lib/debug/usr/lib64/dovecot/libdovecot-lda.so.0.0.0.debug...done.
> done.
> Loaded symbols for /usr/lib64/dovecot/libdovecot-lda.so.0
> Reading symbols from
> /usr/lib64/dovecot/libdovecot-storage.so.0...Reading symbols from
> /usr/lib/debug/usr/lib64/dovecot/libdovecot-storage.so.0.0.0.debug...done.
>
> done.
> Loaded symbols for /usr/lib64/dovecot/libdovecot-storage.so.0
> Reading symbols from /usr/lib64/dovecot/libdovecot.so.0...Reading
> symbols from
> /usr/lib/debug/usr/lib64/dovecot/libdovecot.so.0.0.0.debug...done.
> done.
> Loaded symbols for /usr/lib64/dovecot/libdovecot.so.0
> Reading symbols from /lib64/libc.so.6...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libc.so.6
> Reading symbols from /lib64/librt.so.1...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/librt.so.1
> Reading symbols from /lib64/libdl.so.2...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libdl.so.2
> Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging
> symbols found)...done.
> Loaded symbols for /lib64/ld-linux-x86-64.so.2
> Reading symbols from /lib64/libpthread.so.0...(no debugging symbols
> found)...done.
> [Thread debugging using libthread_db enabled]
> Loaded symbols for /lib64/libpthread.so.0
> Reading symbols from
> /usr/lib64/dovecot/libssl_iostream_openssl.so...Reading symbols from
> /usr/lib/debug/usr/lib64/dovecot/libssl_iostream_openssl.so.debug...done.
> done.
> Loaded symbols for /usr/lib64/dovecot/libssl_iostream_openssl.so
> Reading symbols from /usr/lib64/libssl.so.10...(no debugging symbols
> found)...done.
> Loaded symbols for /usr/lib64/libssl.so.10
> Reading symbols from /usr/lib64/libcrypto.so.10...(no debugging
> symbols found)...done.
> Loaded symbols for /usr/lib64/libcrypto.so.10
> Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging
> symbols found)...done.
> Loaded symbols for /lib64/libgssapi_krb5.so.2
> Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libkrb5.so.3
> Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libcom_err.so.2
> Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libk5crypto.so.3
> Reading symbols from /lib64/libz.so.1...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libz.so.1
> Reading symbols from /lib64/libkrb5support.so.0...(no debugging
> symbols found)...done.
> Loaded symbols for /lib64/libkrb5support.so.0
> Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libkeyutils.so.1
> Reading symbols from /lib64/libresolv.so.2...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libresolv.so.2
> Reading symbols from /lib64/libselinux.so.1...(no debugging symbols
> found)...done.
> Loaded symbols for /lib64/libselinux.so.1
> Core was generated by `dovecot/lmtp'.
> Program terminated with signal 11, Segmentation fault.
> #0  smtp_client_command_set_replies (cmd=0x0, replies=1) at
> smtp-client-command.c:401
> 401             i_assert(cmd->replies_expected == 1 ||
> Missing separate debuginfos, use: debuginfo-install
> glibc-2.12-1.212.el6.x86_64 keyutils-libs-1.4-5.el6.x86_64
> krb5-libs-1.10.3-65.el6.x86_64 libcom_err-1.41.12-24.el6.x86_64
> libselinux-2.0.94-7.el6.x86_64 openssl-1.0.1e-57.el6.x86_64
> zlib-1.2.3-29.el6.x86_64
> (gdb) bt full
> #0  smtp_client_command_set_replies (cmd=0x0, replies=1) at
> smtp-client-command.c:401
>         __func__ = "smtp_client_command_set_replies"
> #1  0x00007f5d14f40f3f in smtp_client_transaction_data_cb
> (reply=0x7ffe5cd19650, trans=0x7f5d176ae2b8) at
> smtp-client-transaction.c:658
>         conn = 0x7f5d176ade80
>         rcpt = 0x7f5d176ae560
>         i = <value optimized out>
>         count = 1
> #2  0x00007f5d14f3e941 in smtp_client_command_fail_reply (_cmd=<value
> optimized out>, reply=0x7ffe5cd19650) at smtp-client-command.c:299
>         cmd = 0x7f5d17600d18
>         tmp_cmd = <value optimized out>
>         conn = 0x7f5d176ade80
>         state = <value optimized out>
>         callback = 0x7f5d14f40e80 <smtp_client_transaction_data_cb>
> #3  0x00007f5d14f4113f in smtp_client_transaction_fail_reply
> (trans=0x7f5d176ae2b8, reply=0x7ffe5cd19650) at
> smtp-client-transaction.c:365
>         conn = 0x7f5d176ade80
>         rcpts = <value optimized out>
>         i = <value optimized out>
>         count = <value optimized out>
>         __func__ = "smtp_client_transaction_fail_reply"
> #4  0x00007f5d14f41442 in smtp_client_transaction_timeout
> (trans=0x7f5d176ae2b8) at smtp-client-transaction.c:419
>         reply = {status = 451, enhanced_code = {x = 4, y = 4, z = 0},
> text_lines = 0x7f5d1759c090}
> #5  0x00007f5d14fdbe7b in io_loop_handle_timeouts_real
> (ioloop=0x7f5d175a4c80) at ioloop.c:641
>         timeout = 0x7f5d176299d0
>         tv = {tv_sec = 0, tv_usec = 0}
>         tv_call = {tv_sec = 1534202969, tv_usec = 770866}
>         t_id = 3
>         item = 0x7f5d176299d0
> #6  io_loop_handle_timeouts (ioloop=0x7f5d175a4c80) at ioloop.c:655
>         _data_stack_cur_id = 2
> #7  0x00007f5d14fdd667 in io_loop_handler_run_internal
> (ioloop=0x7f5d175a4c80) at ioloop-epoll.c:195
>         ctx = 0x7f5d175af300
>         events = <value optimized out>
>         event = <value optimized out>
>         list = <value optimized out>
>         io = <value optimized out>
>         tv = {tv_sec = 34, tv_usec = 105308}
>         events_count = <value optimized out>
>         msecs = <value optimized out>
>         ret = 0
>         i = <value optimized out>
>         call = <value optimized out>
>         __func__ = "io_loop_handler_run_internal"
> #8  0x00007f5d14fdb7c5 in io_loop_handler_run (ioloop=0x7f5d175a4c80)
> at ioloop.c:726
>         __func__ = "io_loop_handler_run"
> #9  0x00007f5d14fdb9e8 in io_loop_run (ioloop=0x7f5d175a4c80) at
> ioloop.c:699
>         __func__ = "io_loop_run"
> #10 0x00007f5d14f58963 in master_service_run (service=0x7f5d175a4b10,
> callback=<value optimized out>) at master-service.c:767
> No locals.
> #11 0x00007f5d159eb584 in main (argc=1, argv=0x7f5d175a48a0) at
> main.c:158
>         set_roots = {0x7f5d15262e20, 0x7f5d157c2040, 0x7f5d15bf1540, 0x0}
>         service_flags = <value optimized out>
>         storage_service_flags = <value optimized out>
>         tmp_base_dir = 0x7f5d1759c040 "erver not answering
> (transaction timed out while waiting for reply to DATA)"
>         c = <value optimized out>
>         error = <value optimized out>
>
>