Dovecot crash

[JCA]

  This happening when my Thunderbird client is trying to establish a
connection with a Dovecot server. Some background first:

  1) I am running Thunderbird 6.20.1 from a Linux client.
  2) Other clients (e.g. Maildroid in my Android phone) do not have any
issues.
  3) The Dovecot software is version 2.2.9, running in a Linux server.
  4) This may be the root of the problem: at some point, the Dovecot
software  was changed to      version 2.3.1, and the reverted to 2.2.9. The
crash started to appear when this reversion took place.

  My guess is that upgrading to 2.3.1 will eliminate this problem. However,
in  case that does not solve the problem, I would be grateful if anybody
could throw some light into exactly what is going on here, and whether it
can be fixed even without the need of upgrading to 2.3.1.

  What follows are the traces generated by Dovecot  2.2.9 when a connection
is attempted from Thunderbird, with usernames and IP addresses disguised
for privacy, and some blank lines inserted for readability:

Nov 28 13:36:20 imap-login: Info: Login: user=<xyz>, method=PLAIN,
rip=xxx.yyy.z
zz.154, lip=aaa.bbb.ccc.7, mpid=29245, TLS, session=<q7jNhL97qQDMhbWa>

Nov 28 13:36:20 imap(xyz): Panic: file mail-index-sync-keywords.c: line 227
(key
words_update_records): assertion failed: (data_offset >= sizeof(struct
mail_index_record))

Nov 28 13:36:20 imap(xyz): Error: Raw backtrace:
/usr/lib/dovecot/libdovecot.so.
0(+0x65626) [0xb75ae626] -> /usr/lib/dovecot/libdovecot.so.0(+0x6569f)
[0xb75ae6
9f] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb756180e] ->
/usr/lib/dove
cot/libdovecot-storage.so.0(mail_index_sync_keywords+0x707) [0xb76cb6b7] ->
/usr
/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_record+0xf7)
[0xb76cc167] -
> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x2a4)
[0xb76cd22
4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map+0x57c)
[0xb76bcb9c
] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb7c2a) [0xb76b7c2a] ->
/usr/lib
/dovecot/libdovecot-storage.so.0(+0xb7daa) [0xb76b7daa] ->
/usr/lib/dovecot/libd
ovecot-storage.so.0(mail_index_open+0x114) [0xb76b7f54] ->
/usr/lib/dovecot/libd
ovecot-storage.so.0(index_storage_mailbox_open+0xab) [0xb76a808b] ->
/usr/lib/do
vecot/libdovecot-storage.so.0(+0x5a481) [0xb765a481] ->
/usr/lib/dovecot/libdove
cot-storage.so.0(+0x5a6f2) [0xb765a6f2] ->
/usr/lib/dovecot/libdovecot-storage.s
o.0(+0x7a017) [0xb767a017] ->
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_o
pen+0x26) [0xb767a1d6] -> dovecot/imap(client_open_save_dest_box+0x79)
[0x805dca
9] -> dovecot/imap() [0x8052678] -> dovecot/imap(command_exec+0x32)
[0x805d7a2]
-> dovecot/imap() [0x805c746] -> dovecot/imap() [0x805c820] ->
dovecot/imap(clie
nt_handle_input+0x125) [0x805cad5] -> dovecot/imap(client_input+0x71)
[0x805ce91
] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x42) [0xb75c1292] ->
/usr
/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xdb) [0xb75c22cb] ->
/usr/lib/
dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb75c0cd8] ->
/usr/lib/dovecot/libdo
vecot.so.0(master_service_run+0x2d) [0xb756728d] ->
dovecot/imap(main+0x2bf) [0x
8066fef] -> /lib/libc.so.6(__libc_start_main+0xe6) [0xb73cfdb6]

Nov 28 13:36:20 imap(xyz): Fatal: master: service(imap): child 29245 killed
with
 signal 6 (core dumps disabled)

Nov 28 13:36:20 imap-login: Info: Login: user=<xyz>, method=PLAIN,
rip=xxx.yyy.z
zz.154, lip=aaa.bbb.ccc.7, mpid=29247, TLS, session=<xPzShL97lADMhbWa>

Nov 28 13:36:21 imap(xyz): Panic: file mail-index-sync-keywords.c: line 227
(key
words_update_records): assertion failed: (data_offset >= sizeof(struct
mail_inde
x_record))

Nov 28 13:36:21 imap(xyz): Error: Raw backtrace:
/usr/lib/dovecot/libdovecot.so.
0(+0x65626) [0xb7757626] -> /usr/lib/dovecot/libdovecot.so.0(+0x6569f)
[0xb77576
9f] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb770a80e] ->
/usr/lib/dove
cot/libdovecot-storage.so.0(mail_index_sync_keywords+0x707) [0xb78746b7] ->
/usr
/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_record+0xf7)
[0xb7875167] -
> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x2a4)
[0xb787622
4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map+0x57c)
[0xb7865b9c
] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xb7c2a) [0xb7860c2a] ->
/usr/lib
/dovecot/libdovecot-storage.so.0(+0xb7daa) [0xb7860daa] ->
/usr/lib/dovecot/libd
ovecot-storage.so.0(mail_index_open+0x114) [0xb7860f54] ->
/usr/lib/dovecot/libd
ovecot-storage.so.0(index_storage_mailbox_open+0xab) [0xb785108b] ->
/usr/lib/do
vecot/libdovecot-storage.so.0(+0x5a481) [0xb7803481] ->
/usr/lib/dovecot/libdove
cot-storage.so.0(+0x5a6f2) [0xb78036f2] ->
/usr/lib/dovecot/libdovecot-storage.s
o.0(+0x7a017) [0xb7823017] ->
/usr/lib/dovecot/libdovecot-storage.so.0(mailbox_o
pen+0x26) [0xb78231d6] -> dovecot/imap(client_open_save_dest_box+0x79)
[0x805dca
9] -> dovecot/imap() [0x8052678] -> dovecot/imap(command_exec+0x32)
[0x805d7a2]
-> dovecot/imap() [0x805c746] -> dovecot/imap() [0x805c820] ->
dovecot/imap(clie
nt_handle_input+0x125) [0x805cad5] -> dovecot/imap(client_input+0x71)
[0x805ce91
] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x42) [0xb776a292] ->
/usr
/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xdb) [0xb776b2cb] ->
/usr/lib/
dovecot/libdovecot.so.0(io_loop_run+0x48) [0xb7769cd8] ->
/usr/lib/dovecot/libdo
vecot.so.0(master_service_run+0x2d) [0xb771028d] ->
dovecot/imap(main+0x2bf) [0x
8066fef] -> /lib/libc.so.6(__libc_start_main+0xe6) [0xb7578db6]

Nov 28 13:36:21 imap(xyz): Fatal: master: service(imap): child 29247 killed
with
 signal 6 (core dumps disabled)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://dovecot.org/pipermail/dovecot/attachments/20181128/76178895/attachment.html>