cyrus imapd - core dumps...

[Ivan Auger]

We are running Solaris 9 with cyrus-sasl 2.1.21 and cyrus-imapd 2.2.13., 
berkeley db 4.1.25.  Problem started about a week ago - Apr 30.  Our 
logs show:

> May  5 08:42:23 mailserv master[21147]: [ID 392559 local6.debug] about to exec /usr/cyrus/bin/imapd
> May  5 08:42:23 mailserv imap[21147]: [ID 518349 local6.debug] executed
> May  5 08:48:51 mailserv imap[21147]: [ID 921384 local6.debug] accepted connection
> May  5 08:48:53 mailserv imap[21147]: [ID 277583 local6.notice] login: nnewton.wadsworth.org [199.184.30.36] brian plaintext User logged in
> May  5 08:48:53 mailserv imap[21147]: [ID 275131 local6.notice] skiplist: recovered /var/imap/user/b/brian.seen (1 record, 2860 bytes) in 0 seconds
> May  5 08:48:53 mailserv imap[21147]: [ID 677757 local6.debug] seen_db: user brian opened /var/imap/user/b/brian.seen
> May  5 08:48:53 mailserv imap[21147]: [ID 736213 local6.debug] open: user brian opened INBOX
> May  5 09:00:42 mailserv genunix: [ID 603404 kern.notice] NOTICE: core_log: imapd[21147] core dumped: /var/core/core.imapd.21147.mailserv.6010.340.1146834041
> May  5 09:00:42 mailserv master[547]: [ID 970914 local6.error] process 21147 exited, signaled to death by 11
> May  5 09:00:42 mailserv master[547]: [ID 621917 local6.debug] service imap pid 21147 in BUSY state: terminated abnormally

Reconstructing the mailbox may work temporarily.  A little bit later I 
get the same problem except that I don't see the "skiplist:  recovered 
/var/imap/user/b/brian.seen (1 record, 2860 bytes) in 0 seconds" line.

Problem started to occur with cyrus imapd 2.2.12 and berkeley db 4.1.24 
- upgrading both to the above releases did not solve the problem.

dbx shows:

> program terminated by signal SEGV (no mapping at the fault address)
> Current function is index_fetchreply
>  2386               cacheitem = CACHE_ITEM_NEXT(cacheitem); /* skip body */
> (dbx) where
> =>[1] index_fetchreply(mailbox = 0x1647bc, msgno = 16U, rock = 0xffbfe334), line 2386 in "index.c"
>   [2] index_forsequence(mailbox = 0x1647bc, sequence = 0x18972b "", usinguid = 1, proc = 0x4f070 = &`imapd`index.c`index_fetchreply(struct mailbox *mailbox, unsigned msgno, void *rock), rock = 0xffbfe334, fetchedsomething = 0xffbfe31c), line 1538 in "index.c"
>   [3] index_fetch(mailbox = 0x1647bc, sequence = 0x189720 "29872:29878", usinguid = 1, fetchargs = 0xffbfe334, fetchedsomething = 0xffbfe31c), line 761 in "index.c"
>   [4] cmd_fetch(tag = 0x1892f0 "5", sequence = 0x189720 "29872:29878", usinguid = 1), line 3124 in "imapd.c"
>   [5] cmdloop(), line 1089 in "imapd.c"
>   [6] service_main(argc = 2, argv = 0x170578, envp = 0xffbffcc0), line 691 in "imapd.c"
>   [7] main(argc = 2, argv = 0xffbffcb4, envp = 0xffbffcc0), line 533 in "service.c"

Ivan...