dpc22 at cam.ac.uk
Wed Oct 8 07:06:02 EDT 2008
If I import the attached Unix mailbox (culled from some real messages from
an ITEF list) into Cyrus, then the index_thread_compare() call started by:
. THREAD REFERENCES US-ASCII ALL
segfaults with a NULL pointer deference:
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb79916d0 (LWP 30378)]
0x0807b0fe in index_thread_compare (t1=0x817ff60, t2=0x817ffc0,
call_data=0xbfcc0e28) at index.c:4417
4417 md2 = t2->msgdata ? t2->msgdata : t2->child->msgdata;
This is because t2->msgdata and t2->child are both NULL.
I infer that the large DKIM-Signature: header blocks are causing a buffer
overrun somewhere although I can't see where right now. This is true of
both 2.3.11 (which I am currently running) and a vanilla 2.3.13rc2.
David Carter Email: David.Carter at ucs.cam.ac.uk
University Computing Service, Phone: (01223) 334502
New Museums Site, Pembroke Street, Fax: (01223) 334679
Cambridge UK. CB2 3QH.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 1388 bytes
Url : http://lists.andrew.cmu.edu/pipermail/cyrus-devel/attachments/20081008/9ac10705/attachment.bin
More information about the Cyrus-devel