imap[xxx]: IOERROR: reading message: unexpected end of file

Carlos Velasco carlos.velasco at nimastelecom.com
Tue Apr 25 17:59:27 EDT 2017


Hi,

I have an annoying problem with one specific message and any help of you would be greatly appreciated.
My cyrus imap version is 2.5.10 and my SMTP is a postfix 3.1.4

This afternoon I received a spam/malware mail message in my own mailbox, and I was reporting it to Spamcop using the original message as attachment. My client is Thunderbird 52.0.1.
Then I stepped into this problem....

Thunderbird seemed to hang and a syslog message like this was reported from cyrus-imap:
Apr 25 22:05:29 local6:err imap: imap[13453]: IOERROR: reading message: unexpected end of file

Surprisingly the message is ok and postfix process the message without any problem. The problem is the copy of the mail that Thunderbird try to put into the Sent folder.
Note that I only have problem with this message. Any other sent message is copied to Sent folder without any issue.
So, I supposed this is a formatting issue with this exact message and I was going to forget about it. But... IOERROR seems a bit hard to me... this should not happen in cyrus-imap.

Looking into imap logs I see these errors at the end. All are "6 NO System I/O error".
===
PK
<1493150904<
>1493150978>6 NO System I/O error
 
PK

>1493150760>6 NO System I/O error
===

I'm attaching imap logs (with some address changed to xxx for privacy), and also a copy of the mail received into a hotmail account.
WARNING WARNING WARNING WARNING.... please do not open the ZIP into hotmail.txt file, it contains a harmful/malware .js file that I was going to report.

Regards,
Carlos Velasco

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.andrew.cmu.edu/pipermail/cyrus-devel/attachments/20170425/e8cdac9f/attachment.html>
-------------- next part --------------
---------- xxx at xxx.com Tue Apr 25 22:08:24 2017

<1493150904<4 COMPRESS DEFLATE
>1493150904>4 OK DEFLATE active
<1493150904<5 ID ("name" "Thunderbird" "version" "52.0.1")
>1493150904>* ID ("name" "Cyrus IMAPD" "version" "2.5.10 be9a1799 2016-10-18" "vendor" "Project Cyrus" "support-url" "http://www.cyrusimap.org" "os" "Linux" "os-version" "4.8.6" "environment" "Built w/Cyrus SASL 2.1.26; Running w/Cyrus SASL 2.1.26; Built w/OpenSSL 1.0.2j  26 Sep 2016; Running w/OpenSSL 1.0.2k  26 Jan 2017; Built w/zlib 1.2.8; Running w/zlib 1.2.8; CMU Sieve 2.4; mmap = shared; lock = fcntl; nonblock = fcntl; idle = idled")
5 OK Completed
<1493150904<6 append "INBOX/Sent" (\Seen) {5180+}
<1493150904<References: <<149314105608.21938.13585947838228240308 at 105.212.50.231>
Subject: Fwd: 28403 xxx.xxx
To: xxxx <xxxx at xxx.com>
From: xxx <xxxx at xxx.com>
X-Forwarded-Message-Id: <<149314105608.21938.13585947838228240308 at 105.212.50.231>
Message-ID: <495a6eb8-535a-d9ed-5bff-79f99f9107a2 at xxx.com>
Date: Tue, 25 Apr 2017 22:08:24 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101
 Thunderbird/52.0.1
MIME-Version: 1.0
In-Reply-To: <149314105608.21938.13585947838228240308 at 105.212.50.231>
Content-Type: multipart/mixed;
 boundary="------------ED4352FA0F9660CD0BAD727B"
Content-Language: es-ES

This is a multi-part message in MIME format.
--------------ED4352FA0F9660CD0BAD727B
Content-Type: multipart/alternative;
 boundary="------------5068FE9C74D8AA01225202AA"


--------------5068FE9C74D8AA01225202AA
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit



--------------5068FE9C74D8AA01225202AA
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=utf-8">
  </head>
  <body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
    0);" text="#000000" bgcolor="#FFFFFF">
    <br>
  </body>
</html>

--------------5068FE9C74D8AA01225202AA--

--------------ED4352FA0F9660CD0BAD727B
Content-Type: message/rfc822;
 name="28403 xxxxx.eml"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment;
 filename="28403 xxx_xxxx.eml"

X-Spam-Checker-Version: SpamAssassin 3.4.2-r1676620 (2015-04-28) on
	pulsar.nimastelecom.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DCC_CHECK,
	DIGEST_MULTIPLE,PYZOR_CHECK,RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP
	autolearn=no autolearn_force=no version=3.4.2-r1676620
Received: from nimastelecom.com (unknown [105.212.50.231])
	by w01.nimastelecom.com (ESMTP Server) with SMTP
	for <xxxx at xxx.com>; Tue, 25 Apr 2017 19:24:29 +0200 (CEST)
Date: Tue, 25 Apr 2017 17:24:16 -0000
From: <serenal at arredosalaria.com>
Importance: High
Content-Disposition: attachment
Content-Type: application/zip; name="909929.zip"
Subject: 28403 xxxxx
To: <xxx at xxx.com>
Message-ID: <149314105608.21938.13585947838228240308 at 105.212.50.231>
MIME-Version: 1.0
Content-Transfer-Encoding: base64

PK
<1493150904<
>1493150978>6 NO System I/O error
-------------- next part --------------
---------- xxx at xxx.com Tue Apr 25 22:05:39 2017

<1493150739<4 COMPRESS DEFLATE
>1493150739>4 OK DEFLATE active
<1493150739<5 ID ("name" "Thunderbird" "version" "52.0.1")
>1493150739>* ID ("name" "Cyrus IMAPD" "version" "2.5.10 be9a1799 2016-10-18" "vendor" "Project Cyrus" "support-url" "http://www.cyrusimap.org" "os" "Linux" "os-version" "4.8.6" "environment" "Built w/Cyrus SASL 2.1.26; Running w/Cyrus SASL 2.1.26; Built w/OpenSSL 1.0.2j  26 Sep 2016; Running w/OpenSSL 1.0.2k  26 Jan 2017; Built w/zlib 1.2.8; Running w/zlib 1.2.8; CMU Sieve 2.4; mmap = shared; lock = fcntl; nonblock = fcntl; idle = idled")
5 OK Completed
<1493150739<6 append "INBOX/Sent" (\Seen) {5180+}
<1493150739<References: <<149314105608.21938.13585947838228240308 at 105.212.50.231>
Subject: Fwd: 28403 xxx
To: xxx at xxx.com
From: xxx <xxx at xxx.com>
X-Forwarded-Message-Id: <<149314105608.21938.13585947838228240308 at 105.212.50.231>
Message-ID: <2f1fa7c5-caa6-e8d0-131d-11b0b9625a00 at xxx.com>
Date: Tue, 25 Apr 2017 22:04:39 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101
 Thunderbird/52.0.1
MIME-Version: 1.0
In-Reply-To: <149314105608.21938.13585947838228240308 at 105.212.50.231>
Content-Type: multipart/mixed;
 boundary="------------F0B5186FF6EA5F8FF26C58A0"
Content-Language: es-ES

This is a multi-part message in MIME format.
--------------F0B5186FF6EA5F8FF26C58A0
Content-Type: multipart/alternative;
 boundary="------------630B9C08FFE7ADF0DF108F40"


--------------630B9C08FFE7ADF0DF108F40
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit



--------------630B9C08FFE7ADF0DF108F40
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=utf-8">
  </head>
  <body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
    0);" text="#000000" bgcolor="#FFFFFF">
    <br>
  </body>
</html>

--------------630B9C08FFE7ADF0DF108F40--

--------------F0B5186FF6EA5F8FF26C58A0
Content-Type: message/rfc822;
 name="28403 xxx.eml"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment;
 filename="28403 xxx.eml"

X-Spam-Checker-Version: SpamAssassin 3.4.2-r1676620 (2015-04-28) on
	pulsar.nimastelecom.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DCC_CHECK,
	DIGEST_MULTIPLE,PYZOR_CHECK,RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP
	autolearn=no autolearn_force=no version=3.4.2-r1676620
Received: from nimastelecom.com (unknown [105.212.50.231])
	by w01.nimastelecom.com (ESMTP Server) with SMTP
	for <xxx at xxx.com>; Tue, 25 Apr 2017 19:24:29 +0200 (CEST)
Date: Tue, 25 Apr 2017 17:24:16 -0000
From: <serenal at arredosalaria.com>
Importance: High
Content-Disposition: attachment
Content-Type: application/zip; name="909929.zip"
Subject: 28403 xxx
To: <xxx at xxx.com>
Message-ID: <149314105608.21938.13585947838228240308 at 105.212.50.231>
MIME-Version: 1.0
Content-Transfer-Encoding: base64

PK

>1493150760>6 NO System I/O error
-------------- next part --------------
Received: from w01.nimastelecom.com (localhost [127.0.0.1])
	by w01.nimastelecom.com (ESMTP Server) with ESMTPS
	for <sirmarius at hotmail.com>; Tue, 25 Apr 2017 22:12:36 +0200 (CEST)
Received: from [1.1.1.1] (dhcp.xxx.com [1.1.1.1])
	by w01.nimastelecom.com (ESMTP Server) with ESMTPSA id 383AB10B
	for <sirmarius at hotmail.com>; Tue, 25 Apr 2017 22:12:36 +0200 (CEST)
References: <<149314105608.21938.13585947838228240308 at 105.212.50.231>
Subject: Fwd: 28403 xxx
To: <xxx at xxx.com>
From: xxx <xxx at xxx.com>
X-Forwarded-Message-Id: <<149314105608.21938.13585947838228240308 at 105.212.50.231>
Message-ID: <4bda1240-5d39-bfa2-1627-bf412a9239cc at xxx.com>
Date: Tue, 25 Apr 2017 22:12:35 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101
 Thunderbird/52.0.1
In-Reply-To: <149314105608.21938.13585947838228240308 at 105.212.50.231>
Content-Type: multipart/mixed;
	boundary="------------67049BBC0112CA3698BA2382"
Content-Language: es-ES
Return-Path: xxx at xxx.com
MIME-Version: 1.0

--------------67049BBC0112CA3698BA2382
Content-Type: multipart/alternative;
	boundary="------------C7CAEAF767EFC98D1C101FF1"

--------------C7CAEAF767EFC98D1C101FF1
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit



--------------C7CAEAF767EFC98D1C101FF1
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit

<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
    0);" text="#000000" bgcolor="#FFFFFF">
    <br>
  </body>
</html>

--------------C7CAEAF767EFC98D1C101FF1--

--------------67049BBC0112CA3698BA2382
Content-Type: message/rfc822; name="28403 xxx.eml"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="28403 xxx.eml"

X-Spam-Checker-Version: SpamAssassin 3.4.2-r1676620 (2015-04-28) on
	pulsar.nimastelecom.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DCC_CHECK,
	DIGEST_MULTIPLE,PYZOR_CHECK,RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP
	autolearn=no autolearn_force=no version=3.4.2-r1676620
Received: from nimastelecom.com (unknown [105.212.50.231])
	by w01.nimastelecom.com (ESMTP Server) with SMTP
	for <xxx at xxx.com>; Tue, 25 Apr 2017 19:24:29 +0200 (CEST)
Date: Tue, 25 Apr 2017 17:24:16 +0000
From: <serenal at arredosalaria.com>
Content-Disposition: attachment
Content-Type: application/zip; name="909929.zip"
Subject: 28403 xxx
To: <xxx at xxx.com>
Message-ID: <149314105608.21938.13585947838228240308 at 105.212.50.231>
Content-Transfer-Encoding: base64
Importance: high
X-Priority: 1
MIME-Version: 1.0
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--------------67049BBC0112CA3698BA2382--


More information about the Cyrus-devel mailing list