v2.2.27 Panic: file rfc822-parser.h: line 23 (rfc822_parser_deinit): assertion failed: (ctx->data <= ctx->end)

[Timo Sirainen]

On 27 Mar 2019, at 1.25, Jason Lewis via dovecot <dovecot at dovecot.org> wrote:
> 
> Hi Aki,
> 
> debian jessie backports has been moved to archive.debian.org and
> initially I was unable to install dovecot-dbg because of that. But I've
> managed to resolve that issue now.
> 
> This was the command I ran:
> doveadm -D -f flow fetch imap.envelope mailbox crm-spam.2008.g
> 
> Backtrace follows.

I've a feeling Debian's security fix backports didn't work properly:

> #5  0x00007f3a7c34a97d in rfc822_parser_deinit (ctx=0x7ffdc7615e38,
> ctx=0x7ffdc7615e38) at rfc822-parser.h:23

rfc822_parser_deinit() wasn't added until v2.2.31. I think it was added as part of a security fix.

>    data=data at entry=0x5563c13f3910 "To: bluefrog at dickson.st,
> jason at dickson.st, lewisjason at dickson.st, 05 Jul 2008 16:39:47 -0500
> PDT6Q--q=dns; c=nofws;d sender)
> smtp.mail=Matt_Cooley at postnewsweektech.com; domainkeys=pass (test mode)
> hea"..., size=size at entry=64,

I tried fetching a mail with these contents in v2.2.27, v2.2.33 and master. They all worked fine.