imapd dumping core due to SEGV

[Gavin Gray]

Hi there,

We have three backend servers in our cyrus murder all like this:

name       : Cyrus IMAPD
version    : v2.3.15 2009/09/09 12:35:48
vendor     : Project Cyrus
support-url: http://cyrusimap.web.cmu.edu
os         : SunOS
os-version : 5.11
environment: Built w/Cyrus SASL 2.1.23
              Running w/Cyrus SASL 2.1.23
              Built w/Berkeley DB 4.7.25: (May 15, 2008)
              Running w/Berkeley DB 4.7.25: (May 15, 2008)
              Built w/OpenSSL 0.9.8a 11 Oct 2005 (+ security fixes  
for: CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339  
CVE-2006-4343 CVE-2007-3108 CVE-2007-4995 CVE-2007-5135 CVE-2008-5077  
CVE-2009-0590)
              Running w/OpenSSL 0.9.8a 11 Oct 2005 (+ security fixes  
for: CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339  
CVE-2006-4343 CVE-2007-3108 CVE-2007-4995 CVE-2007-5135 CVE-2008-5077  
CVE-2009-0590)
              Built w/zlib 1.2.3
              Running w/zlib 1.2.3
              CMU Sieve 2.3
              NET-SNMP
              mmap = shared
              lock = fcntl
              nonblock = fcntl
              idle = poll

Two of them have had imapd  processes crash and leave core dumps in  
the past couple of days. Looking at the core dumps with dbx we see

.....
t at 1 (l at 1) program terminated by signal SEGV (no mapping at the fault address)
0xfe5848d3: strncmp+0x0033:     movb     0x00000002(%esi),%al
(dbx) where
current thread: t at 1
=>[1] strncmp(0x8098d2b, 0xfbed7fe6, 0x81824e0, 0x20), at 0xfe5848d3
   [2] message_pendingboundary(0xfbed7fe4, 0x8183750, 0x8040f84,  
0x819364d), at 0x8098d2b
   [3] message_parse_content(0x8040fd0, 0x0, 0x8196698, 0x8040f80), at  
0x8098b4f
   [4] message_parse_body(0x8040fd0, 0x0, 0x8196698, 0x81422d7,  
0x8040f80, 0x140, 0x8040cc0, 0x8040f80), at 0x80969df
   [5] message_parse_multipart(0x8040fd0, 0x0, 0x8196550, 0x8040f80),  
at 0x8098967
   [6] message_parse_body(0x8040fd0, 0x0, 0x8196550, 0x81422d7,  
0x8040f80, 0xa0, 0x8040ea0, 0x8040f80), at 0x809690f
   [7] message_parse_multipart(0x8040fd0, 0x0, 0x8182438, 0x8040f80),  
at 0x8098967
   [8] message_parse_body(0x8040fd0, 0x0, 0x8182438, 0x81422d7,  
0x8040f80, 0x0, 0x8040ff8), at 0x809690f
   [9] message_parse_mapped(0xfbed0000, 0x8000, 0x8182438, 0xfe5be856,  
0x8041050, 0x1), at 0x809648a
   [10] message_parse_file(0x8174b68, 0x0, 0x0, 0x80441e0, 0x81ed030,  
0x30), at 0x80962c1
   [11] append_fromstage(0x8044200, 0x80441e0, 0x818c880, 0x485baf50,  
0x8189dc0, 0x1), at 0x8086364
   [12] cmd_append(0x817f6c0, 0x817f7a0, 0x0, 0x0), at 0x8068d7c
   [13] cmdloop(0xfee20118, 0xfe4e2a00, 0x7ab8a40), at 0x8063852
   [14] service_main(0x1, 0x8175218, 0x8047e3c, 0xf, 0xfeffdbb0,  
0x8047878), at 0x8062e9e
   [15] main(0x1, 0x8047e34, 0x8047e3c), at 0x8061fde

and

....
t at 1 (l at 1) program terminated by signal SEGV (no mapping at the fault address)
0xfe5babb3: _smalloc+0x00c3:    movl     0x00000008(%ecx),%edx
(dbx) where
current thread: t at 1
=>[1] _smalloc(0x10, 0xfe6a0000, 0x8044b88, 0xfe5bac43), at 0xfe5babb3
   [2] _malloc_unlocked(0x10), at 0xfe5bae3e
   [3] malloc(0x10, 0x8044c60, 0xfe6a1de8, 0x8180070), at 0xfe5bac0d
   [4] xmalloc(0x10, 0x8044bf0, 0xfe621e65, 0xfe60c37d, 0x65746164,  
0x81a8800), at 0x80bd8b1
   [5] appendstrlist_withdata(0x8044c64, 0x81a5e70, 0x0, 0x0), at 0x809d1c4
   [6] appendstrlist(0x8044c64, 0x81a5e70, 0x816566c, 0x0), at 0x809d23e
   [7] cmd_fetch(0x817f688, 0x817f768, 0x0, 0x8063451), at 0x806a2fa
   [8] cmdloop(0xfe8e0118, 0xfe4f2a00, 0x7ab8a40), at 0x8064177
   [9] service_main(0x1, 0x8175218, 0x8047e3c, 0xf, 0xfeffdbb0,  
0x8047878), at 0x8062e9e
   [10] main(0x1, 0x8047e34, 0x8047e3c), at 0x8061fde

Is there any known issues with 2.3.15?

Also when this happens the cyrus master process kills all other active  
imapd processes and restarts, is there a reason for this?

regards,

Gavin Gray

-- 
Gavin Gray
Edinburgh University Information Services
Rm 2013 JCMB
Kings Buildings
Edinburgh
EH9 3JZ
UK
tel +44 (0)131 650 5987
email gavin.gray at ed.ac.uk

--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.

-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.