Cyrus IMAP 2.2.13 64-bit: imapd core dump with signal 11/6/10

[Дейтер Александр Ва]

Hi,

After upgrade Cyrus-IMAP 2.2.12 32-bit up to Cyrus-IMAP 2.2.13 64-bit on
Solaris 9 sparc we have a problem under high load: imapd core dump with
signal 11:

2386                cacheitem = CACHE_ITEM_NEXT(cacheitem); /* skip body */
(gdb) bt
#0  index_fetchreply (mailbox=0x1002046e0, msgno=43,
rock=0xffffffff7fffdc50) at index.c:2386
#1  0x0000000100024cfc in index_forsequence (mailbox=0x79000,
sequence=0x100295a09 "", usinguid=1,
    proc=0x100029204 <index_fetchreply>, rock=0xffffffff7fffdc50,
fetchedsomething=0xffffffff7fffdcac)
    at index.c:1538
#2  0x00000001000115b0 in cmd_fetch (tag=0x100294390 "5",
sequence=0x100295a00 "1833:1840", usinguid=1)
    at imapd.c:3123
#3  0x00000001000226c8 in cmdloop () at imapd.c:1089
#4  0x0000000100023fa8 in service_main (argc=<value optimized out>,
argv=0x1002108e0,
    envp=<value optimized out>) at imapd.c:691
#5  0x000000010000b6a4 in main (argc=<value optimized out>, argv=<value
optimized out>, envp=0xffffffff7ffffc40)
    at service.c:533

signal 6:

(gdb) bt
#0  0xffffffff7cfa88ec in _libc_kill () from /usr/lib/64/libc.so.1
#1  0xffffffff7cf3e3c0 in abort () from /usr/lib/64/libc.so.1
#2  0xffffffff7cf3e6c4 in _assert () from /usr/lib/64/libc.so.1
#3  0x00000001000679fc in mycommit (db=0x100296360, tid=0x1002e2770) at
cyrusdb_skiplist.c:1366
#4  0x0000000100056514 in seen_unlock (seendb=0x100214b90) at seen_db.c:536
#5  0x0000000100027b0c in index_checkseen (mailbox=<value optimized
out>, quiet=2117632, usinguid=0,
    oldexists=13) at index.c:720
#6  0x0000000100028618 in index_check (mailbox=0x1002046e0, usinguid=0,
checkseen=1) at index.c:410
#7  0x000000010000f5f8 in cmd_idle (tag=0x100294490 "101") at imapd.c:2207
#8  0x0000000100021200 in cmdloop () at imapd.c:1166
#9  0x0000000100023fa8 in service_main (argc=<value optimized out>,
argv=0x1002108e0,
    envp=<value optimized out>) at imapd.c:691
#10 0x000000010000b6a4 in main (argc=<value optimized out>, argv=<value
optimized out>, envp=0xffffffff7ffffc40)
    at service.c:533

signal 10:

(gdb) bt
#0  0xffffffff7cf4eb1c in _smalloc () from /usr/lib/64/libc.so.1
#1  0xffffffff7cf4eb64 in malloc () from /usr/lib/64/libc.so.1
#2  0x000000010006bfd0 in strlcat (dst=0x81010100 <Address 0x81010100
out of bounds>,
    src=0x5 <Address 0x5 out of bounds>, len=<value optimized out>) at
xstrlcat.c:55
#3  0x000000010006c0e8 in xstrndup (str=0xffffffff7840008f <Address
0xffffffff7840008f out of bounds>, len=4)
    at xmalloc.c:97
#4  0x0000000100036894 in mailbox_read_header
(mailbox=0xffffffff7fffd5b0) at mailbox.c:652
#5  0x0000000100036ca8 in mailbox_open_header_path
(name=0xffffffff7fffdaf5 "user.moran",
    path=0x100205610 "/var/spool/imap/user/moran", acl=0x10029d860
"moran\tlrswipcda\tcyradm\tlrswipcda\t",
    auth_state=0x100295e60, mailbox=0xffffffff7fffd5b0, suppresslog=0)
at mailbox.c:444
#6  0x0000000100036dd4 in mailbox_open_header (name=0xffffffff7fffdaf5
"user.moran", auth_state=0x100295e60,
    mailbox=0xffffffff7fffd5b0) at mailbox.c:390
#7  0x0000000100015e8c in cmd_getquotaroot (tag=0x100294770 "510",
name=0x100295de0 "INBOX") at imapd.c:4689
#8  0x0000000100022648 in cmdloop () at imapd.c:1143
#9  0x0000000100023fa8 in service_main (argc=<value optimized out>,
argv=0x1002108e0,
    envp=<value optimized out>) at imapd.c:691
#10 0x000000010000b6a4 in main (argc=<value optimized out>, argv=<value
optimized out>, envp=0xffffffff7ffffc70)
    at service.c:533

Thanks!

-- 
Alex Deiter