THREAD curiosity

David Carter dpc22 at cam.ac.uk
Wed Oct 8 07:06:02 EDT 2008


If I import the attached Unix mailbox (culled from some real messages from 
an ITEF list) into Cyrus, then the index_thread_compare() call started by:

   . THREAD REFERENCES US-ASCII ALL

segfaults with a NULL pointer deference:

   Program received signal SIGSEGV, Segmentation fault.
   [Switching to Thread 0xb79916d0 (LWP 30378)]
   0x0807b0fe in index_thread_compare (t1=0x817ff60, t2=0x817ffc0,
     call_data=0xbfcc0e28) at index.c:4417
   4417      md2 = t2->msgdata ? t2->msgdata : t2->child->msgdata;

This is because t2->msgdata and t2->child are both NULL.

I infer that the large DKIM-Signature: header blocks are causing a buffer 
overrun somewhere although I can't see where right now. This is true of 
both 2.3.11 (which I am currently running) and a vanilla 2.3.13rc2.

-- 
David Carter                             Email: David.Carter at ucs.cam.ac.uk
University Computing Service,            Phone: (01223) 334502
New Museums Site, Pembroke Street,       Fax:   (01223) 334679
Cambridge UK. CB2 3QH.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dkim.gz
Type: application/x-gzip
Size: 1388 bytes
Desc: 
Url : http://lists.andrew.cmu.edu/pipermail/cyrus-devel/attachments/20081008/9ac10705/attachment.bin 


More information about the Cyrus-devel mailing list