lmtp 2.3.2.1 segfault with backtrace

[Stephan Bosch]

Hi,

Op 16/08/2018 om 00:53 schreef Stephan Bosch:
> Hi,
>
> I have reproduced this problem and I am working on a fix.

Fix is included in 2.3.5.

Regards,

Stephan.

> Op 14/08/2018 om 11:44 schreef Tom Sommer:
>> lmtp on Director crash with 2.3.2.1
>>
>> # gdb /usr/libexec/dovecot/lmtp /var/core/60174
>> GNU gdb (GDB) Red Hat Enterprise Linux (7.2-92.el6)
>> Copyright (C) 2010 Free Software Foundation, Inc.
>> License GPLv3+: GNU GPL version 3 or later 
>> <http://gnu.org/licenses/gpl.html>
>> This is free software: you are free to change and redistribute it.
>> There is NO WARRANTY, to the extent permitted by law.  Type "show 
>> copying"
>> and "show warranty" for details.
>> This GDB was configured as "x86_64-redhat-linux-gnu".
>> For bug reporting instructions, please see:
>> <http://www.gnu.org/software/gdb/bugs/>...
>> Reading symbols from /usr/libexec/dovecot/lmtp...Reading symbols from 
>> /usr/lib/debug/usr/libexec/dovecot/lmtp.debug...done.
>> done.
>> [New Thread 60174]
>> Reading symbols from /usr/lib64/dovecot/libdovecot-lda.so.0...Reading 
>> symbols from 
>> /usr/lib/debug/usr/lib64/dovecot/libdovecot-lda.so.0.0.0.debug...done.
>> done.
>> Loaded symbols for /usr/lib64/dovecot/libdovecot-lda.so.0
>> Reading symbols from 
>> /usr/lib64/dovecot/libdovecot-storage.so.0...Reading symbols from 
>> /usr/lib/debug/usr/lib64/dovecot/libdovecot-storage.so.0.0.0.debug...done. 
>>
>> done.
>> Loaded symbols for /usr/lib64/dovecot/libdovecot-storage.so.0
>> Reading symbols from /usr/lib64/dovecot/libdovecot.so.0...Reading 
>> symbols from 
>> /usr/lib/debug/usr/lib64/dovecot/libdovecot.so.0.0.0.debug...done.
>> done.
>> Loaded symbols for /usr/lib64/dovecot/libdovecot.so.0
>> Reading symbols from /lib64/libc.so.6...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libc.so.6
>> Reading symbols from /lib64/librt.so.1...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/librt.so.1
>> Reading symbols from /lib64/libdl.so.2...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libdl.so.2
>> Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging 
>> symbols found)...done.
>> Loaded symbols for /lib64/ld-linux-x86-64.so.2
>> Reading symbols from /lib64/libpthread.so.0...(no debugging symbols 
>> found)...done.
>> [Thread debugging using libthread_db enabled]
>> Loaded symbols for /lib64/libpthread.so.0
>> Reading symbols from 
>> /usr/lib64/dovecot/libssl_iostream_openssl.so...Reading symbols from 
>> /usr/lib/debug/usr/lib64/dovecot/libssl_iostream_openssl.so.debug...done.
>> done.
>> Loaded symbols for /usr/lib64/dovecot/libssl_iostream_openssl.so
>> Reading symbols from /usr/lib64/libssl.so.10...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /usr/lib64/libssl.so.10
>> Reading symbols from /usr/lib64/libcrypto.so.10...(no debugging 
>> symbols found)...done.
>> Loaded symbols for /usr/lib64/libcrypto.so.10
>> Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging 
>> symbols found)...done.
>> Loaded symbols for /lib64/libgssapi_krb5.so.2
>> Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libkrb5.so.3
>> Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libcom_err.so.2
>> Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libk5crypto.so.3
>> Reading symbols from /lib64/libz.so.1...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libz.so.1
>> Reading symbols from /lib64/libkrb5support.so.0...(no debugging 
>> symbols found)...done.
>> Loaded symbols for /lib64/libkrb5support.so.0
>> Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libkeyutils.so.1
>> Reading symbols from /lib64/libresolv.so.2...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libresolv.so.2
>> Reading symbols from /lib64/libselinux.so.1...(no debugging symbols 
>> found)...done.
>> Loaded symbols for /lib64/libselinux.so.1
>> Core was generated by `dovecot/lmtp'.
>> Program terminated with signal 11, Segmentation fault.
>> #0  smtp_client_command_set_replies (cmd=0x0, replies=1) at 
>> smtp-client-command.c:401
>> 401             i_assert(cmd->replies_expected == 1 ||
>> Missing separate debuginfos, use: debuginfo-install 
>> glibc-2.12-1.212.el6.x86_64 keyutils-libs-1.4-5.el6.x86_64 
>> krb5-libs-1.10.3-65.el6.x86_64 libcom_err-1.41.12-24.el6.x86_64 
>> libselinux-2.0.94-7.el6.x86_64 openssl-1.0.1e-57.el6.x86_64 
>> zlib-1.2.3-29.el6.x86_64
>> (gdb) bt full
>> #0  smtp_client_command_set_replies (cmd=0x0, replies=1) at 
>> smtp-client-command.c:401
>>         __func__ = "smtp_client_command_set_replies"
>> #1  0x00007f5d14f40f3f in smtp_client_transaction_data_cb 
>> (reply=0x7ffe5cd19650, trans=0x7f5d176ae2b8) at 
>> smtp-client-transaction.c:658
>>         conn = 0x7f5d176ade80
>>         rcpt = 0x7f5d176ae560
>>         i = <value optimized out>
>>         count = 1
>> #2  0x00007f5d14f3e941 in smtp_client_command_fail_reply (_cmd=<value 
>> optimized out>, reply=0x7ffe5cd19650) at smtp-client-command.c:299
>>         cmd = 0x7f5d17600d18
>>         tmp_cmd = <value optimized out>
>>         conn = 0x7f5d176ade80
>>         state = <value optimized out>
>>         callback = 0x7f5d14f40e80 <smtp_client_transaction_data_cb>
>> #3  0x00007f5d14f4113f in smtp_client_transaction_fail_reply 
>> (trans=0x7f5d176ae2b8, reply=0x7ffe5cd19650) at 
>> smtp-client-transaction.c:365
>>         conn = 0x7f5d176ade80
>>         rcpts = <value optimized out>
>>         i = <value optimized out>
>>         count = <value optimized out>
>>         __func__ = "smtp_client_transaction_fail_reply"
>> #4  0x00007f5d14f41442 in smtp_client_transaction_timeout 
>> (trans=0x7f5d176ae2b8) at smtp-client-transaction.c:419
>>         reply = {status = 451, enhanced_code = {x = 4, y = 4, z = 0}, 
>> text_lines = 0x7f5d1759c090}
>> #5  0x00007f5d14fdbe7b in io_loop_handle_timeouts_real 
>> (ioloop=0x7f5d175a4c80) at ioloop.c:641
>>         timeout = 0x7f5d176299d0
>>         tv = {tv_sec = 0, tv_usec = 0}
>>         tv_call = {tv_sec = 1534202969, tv_usec = 770866}
>>         t_id = 3
>>         item = 0x7f5d176299d0
>> #6  io_loop_handle_timeouts (ioloop=0x7f5d175a4c80) at ioloop.c:655
>>         _data_stack_cur_id = 2
>> #7  0x00007f5d14fdd667 in io_loop_handler_run_internal 
>> (ioloop=0x7f5d175a4c80) at ioloop-epoll.c:195
>>         ctx = 0x7f5d175af300
>>         events = <value optimized out>
>>         event = <value optimized out>
>>         list = <value optimized out>
>>         io = <value optimized out>
>>         tv = {tv_sec = 34, tv_usec = 105308}
>>         events_count = <value optimized out>
>>         msecs = <value optimized out>
>>         ret = 0
>>         i = <value optimized out>
>>         call = <value optimized out>
>>         __func__ = "io_loop_handler_run_internal"
>> #8  0x00007f5d14fdb7c5 in io_loop_handler_run (ioloop=0x7f5d175a4c80) 
>> at ioloop.c:726
>>         __func__ = "io_loop_handler_run"
>> #9  0x00007f5d14fdb9e8 in io_loop_run (ioloop=0x7f5d175a4c80) at 
>> ioloop.c:699
>>         __func__ = "io_loop_run"
>> #10 0x00007f5d14f58963 in master_service_run (service=0x7f5d175a4b10, 
>> callback=<value optimized out>) at master-service.c:767
>> No locals.
>> #11 0x00007f5d159eb584 in main (argc=1, argv=0x7f5d175a48a0) at 
>> main.c:158
>>         set_roots = {0x7f5d15262e20, 0x7f5d157c2040, 0x7f5d15bf1540, 
>> 0x0}
>>         service_flags = <value optimized out>
>>         storage_service_flags = <value optimized out>
>>         tmp_base_dir = 0x7f5d1759c040 "erver not answering 
>> (transaction timed out while waiting for reply to DATA)"
>>         c = <value optimized out>
>>         error = <value optimized out>
>>
>>
>