dovecot - Aug 2014 - Fatal: master: service(imap): child 28145 killed with signal 11 (core dumped) -- started happening after upgrade last night

Hello,

I upgraded Dovecot last night and have been receiving core-dumps any
time I attempt to access a mailbox (via IMAP) ever since. Logging-in
seems to work, but any attempt to access the mailbox contents
(regardless of folder) causes a core-dump.

Please let me know if I can provide any additional details.


apt Sources Details:

# grep "dovecot" /etc/apt/sources.list
deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2 main
deb-src http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2 main


Package Upgrade Details:

Start-Date: 2014-08-14  19:30:57
Commandline: apt-get upgrade
Upgrade: dovecot-sieve:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150),
dovecot-managesieved:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150),
dovecot-dev:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150),
dovecot-mysql:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150),
dovecot-core:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150),
dovecot-pop3d:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150),
dovecot-imapd:amd64 (2.2.13-1~auto+138, 2.2.13-1~auto+150)
End-Date: 2014-08-14  19:32:39


Filesystem Details

# df -T | grep "xvda1"
Filesystem     Type     1K-blocks    Used Available Use% Mounted on
/dev/xvda1     ext3      61796348 8037864  50612756  14% /


================= DOVECONF ================
# doveconf -n
# 2.2.13 (c810e288aaed): /etc/dovecot/dovecot.conf
# OS: Linux 3.13.0-24-generic x86_64 Ubuntu 14.04.1 LTS
auth_mechanisms = plain login
disable_plaintext_auth = no
listen = *,[::]
log_timestamp = "%Y-%m-%d %H:%M:%S "
mail_debug = yes
mail_max_userip_connections = 20
mail_privileged_group = vmail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date ihave duplicate
passdb {
  args = /etc/dovecot/dovecot-sql.conf
  driver = sql
}
plugin {
  antispam_backend = mailtrain
  antispam_debug_target = syslog
  antispam_mail_notspam = --ham
  antispam_mail_sendmail = /bin/bash
  antispam_mail_sendmail_args = /usr/local/bin/sa-learn-pipe.sh
  antispam_mail_spam = --spam
  antispam_spam_pattern_ignorecase = SPAM;JUNK
  antispam_trash_pattern_ignorecase = trash;Deleted *
  antispam_verbose_debug = 1
  quota = dict:user::file:/var/vmail/%d/%n/.quotausage
  quota_rule2 = Trash:storage=+100M
  quota_rule3 = Junk:ignore
  quota_rule4 = INBOX:storage=+100M
  quota_warning = storage=100%% quota-reached 100 %u %d
  quota_warning2 = storage=95%% quota-warning 95 %u %d
  quota_warning3 = storage=80%% quota-warning 80 %u %d
  quota_warning4 = -storage=100%% quota-below below %u %d
  sieve = /var/vmail/%d/%n/.sieve
}
postmaster_address = postmaster at example.com
protocols = imap pop3 sieve
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
  unix_listener auth-userdb {
    group = vmail
    mode = 0600
    user = vmail
  }
  user = root
}
service config {
  unix_listener config {
    group = vmail
    mode = 0600
    user = vmail
  }
}
service imap-login {
  client_limit = 1000
  process_limit = 500
}
service quota-below {
  executable = script /usr/local/bin/quota-below.sh
  unix_listener quota-below {
    group = vmail
    mode = 0666
    user = vmail
  }
  user = vmail
}
service quota-reached {
  executable = script /usr/local/bin/quota-reached.sh
  unix_listener quota-reached {
    group = vmail
    mode = 0666
    user = vmail
  }
  user = vmail
}
service quota-warning {
  executable = script /usr/local/bin/quota-warning.sh
  unix_listener quota-warning {
    group = vmail
    mode = 0666
    user = vmail
  }
  user = vmail
}
ssl_cert = </etc/postfix/smtpd.cert
ssl_key = </etc/postfix/smtpd.key
userdb {
  args = /etc/dovecot/dovecot-sql.conf
  driver = sql
}
protocol imap {
  mail_plugins = quota imap_quota antispam
}
protocol pop3 {
  mail_plugins = quota
  pop3_uidl_format = %08Xu%08Xv
}
protocol lda {
  mail_plugins = sieve quota
}


================= CORE DUMP ================
# gdb /usr/lib/dovecot/imap /var/vmail/example.com/user/core
Reading symbols from /usr/lib/dovecot/imap...(no debugging symbols
found)...done.
[New LWP 27866]
[Thread debugging using libthread_db enabled]
Using host libthread_db library
"/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `dovecot/imap'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f034d987a3e in array_idx_modifiable_i () from
/usr/lib/dovecot/libdovecot.so.0


================= SAMPLE MAIL LOG ENTRIES ================
Aug 15 19:39:30 xen dovecot: imap-login: Login: user=<ben at example.com>,
method=PLAIN, rip=76.179.182.207, lip=192.64.115.178, mpid=29100, TLS,
session=<Ki0NLrAAiwBMs7bP>
Aug 15 19:39:30 xen dovecot: imap: Debug: Loading modules from
directory: /usr/lib/dovecot/modules
Aug 15 19:39:30 xen dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib10_quota_plugin.so
Aug 15 19:39:30 xen dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib11_imap_quota_plugin.so
Aug 15 19:39:30 xen dovecot: imap: Debug: Module loaded:
/usr/lib/dovecot/modules/lib90_antispam_plugin.so
Aug 15 19:39:30 xen dovecot: imap: Debug: Added userdb setting:
mail=maildir:/var/vmail/example.com/ben/Maildir
Aug 15 19:39:30 xen dovecot: imap: Debug: Added userdb setting:
plugin/quota_rule=*:storage=0B
Aug 15 19:39:30 xen dovecot: imap: Debug: Added userdb setting:
plugin/sieve=/var/vmail/example.com/ben/.sieve
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Effective
uid=5000, gid=5000, home=/var/vmail/example.com/ben
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota root:
name=user backend=dict args=:file:/var/vmail/example.com/ben/.quotausage
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota rule:
root=user mailbox=* bytes=0 messages=0
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota rule:
root=user mailbox=Trash bytes=+104857600 messages=0
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota rule:
root=user mailbox=Junk ignored
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota rule:
root=user mailbox=INBOX bytes=+104857600 messages=0
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota
warning: bytes=0 (100%) messages=0 reverse=no command=quota-reached 100
ben at example.com example.com
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota
warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95
ben at example.com example.com
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota
warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80
ben at example.com example.com
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota
warning: bytes=0 (100%) messages=0 reverse=yes command=quota-below below
ben at example.com example.com
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: Quota grace:
root=user bytes=0 (10%)
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: dict quota:
user=ben at example.com, uri=file:/var/vmail/example.com/ben/.quotausage,
noenforcing=0
Aug 15 19:39:30 xen dovecot: imap(ben at example.com): Debug: maildir++:
root=/var/vmail/example.com/ben/Maildir, index=, indexpvt=, control=,
inbox=/var/vmail/example.com/ben/Maildir, altAug 15 19:39:30 xen dovecot:
imap(ben at example.com): Fatal: master:
service(imap): child 29100 killed with signal 11 (core dumped)

On 15 Aug 2014, at 21:53, Ben Johnson <ben at indietorrent.org> wrote:
> # gdb /usr/lib/dovecot/imap /var/vmail/example.com/user/core
> Reading symbols from /usr/lib/dovecot/imap...(no debugging symbols
> found)...done.
> [New LWP 27866]
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library
"/lib/x86_64-linux-gnu/libthread_db.so.1".
> Core was generated by `dovecot/imap'.
> Program terminated with signal SIGSEGV, Segmentation fault.
> #0  0x00007f034d987a3e in array_idx_modifiable_i () from
> /usr/lib/dovecot/libdovecot.so.0
What about also giving the command "bt full"? Also having dovecot-dbg
package installed before that would make it even more helpful.