View Issue Details

IDProjectCategoryView StatusLast Update
0014245CentOS-7dovecotpublic2018-01-09 21:26
Reportermekeystore 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
PlatformOSOS Version7
Product Version 
Target VersionFixed in Version 
Summary0014245: [abrt] dovecot: io_remove_full(): imap killed by SIGSEGV
DescriptionVersion-Release number of selected component:
dovecot-2.2.10-8.el7

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 io_remove_full at ioloop.c:88
 #1 client_dict_finish_transaction at dict-client.c:274
 #2 client_dict_disconnect at dict-client.c:459
 #3 client_dict_deinit at dict-client.c:520
 #4 dict_quota_deinit at quota-dict.c:95
 #5 quota_root_deinit at quota.c:276
 #6 quota_deinit at quota.c:372
 #7 quota_user_deinit at quota-storage.c:490
 #8 mail_user_unref at mail-user.c:163
 #9 client_default_destroy at imap-client.c:283
Additional Informationreporter: libreport-2.1.11.1
backtrace_rating: 4
cmdline: dovecot/imap
crash_function: io_remove_full
environ: '\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab'
executable: /usr/libexec/dovecot/imap
global_pid: 22915
kernel: 3.10.0-514.el7.x86_64
pkg_fingerprint: 24C6 A8A7 F4A8 0EB5
pkg_vendor: CentOS
reproducible: Not sure how to reproduce the problem
runlevel: N 5
type: CCpp
uid: 101
TagsNo tags attached.
abrt_hash7b11eed5b25700deac7a5e6210b905f25cbcfbb9
URLhttps://retrace.fedoraproject.org/faf/reports/bthash/cd5c486292cf84afa986b82daf54a0537ca8be69

Activities

mekeystore

mekeystore

2017-12-07 08:49

reporter  

backtrace (9,674 bytes)
[New LWP 22915]
Core was generated by `dovecot/imap'.
Program terminated with signal 11, Segmentation fault.
#0  io_remove_full (_io=0x7fcae6b87430, closed=false) at ioloop.c:88
88	ioloop.c: No such file or directory.

Thread 1 (LWP 22915):
#0  io_remove_full (_io=0x7fcae6b87430, closed=false) at ioloop.c:88
        io = 0x0
#1  0x00007fcae559b550 in client_dict_finish_transaction (dict=dict@entry=0x7fcae6b87370, id=<optimized out>, ret=ret@entry=-1) at dict-client.c:274
        ctx = 0x7fcae6b98a10
        __FUNCTION__ = "client_dict_finish_transaction"
#2  0x00007fcae559b5da in client_dict_disconnect (dict=dict@entry=0x7fcae6b87370) at dict-client.c:459
        ctx = <optimized out>
        next = 0x0
#3  0x00007fcae559bbd9 in client_dict_deinit (_dict=0x7fcae6b87370) at dict-client.c:520
        dict = 0x7fcae6b87370
#4  0x00007fcae4d88d1a in dict_quota_deinit (_root=0x7fcae6b81fa0) at quota-dict.c:95
        root = 0x7fcae6b81fa0
#5  0x00007fcae4d84ad5 in quota_root_deinit (root=0x7fcae6b81fa0) at quota.c:276
        pool = 0x7fcae6b82090
#6  0x00007fcae4d84e3d in quota_deinit (_quota=_quota@entry=0x7fcae6b843a8) at quota.c:372
        quota = 0x7fcae6b81e90
        roots = 0x7fcae6b81f10
        i = <optimized out>
        count = 1
#7  0x00007fcae4d8bf3c in quota_user_deinit (user=0x7fcae6b82b50) at quota-storage.c:490
        quser = 0x7fcae6b843a0
        quota_set = 0x7fcae6b86b60
#8  0x00007fcae58af775 in mail_user_unref (_user=_user@entry=0x7fcae6b87b08) at mail-user.c:163
        user = 0x7fcae6b82b50
        __FUNCTION__ = "mail_user_unref"
#9  0x00007fcae5d85b76 in client_default_destroy (client=0x7fcae6b87a90, reason=<optimized out>) at imap-client.c:283
        cmd = 0x7ffed88e18b0
        __FUNCTION__ = "client_default_destroy"
#10 0x00007fcae5d856f4 in client_destroy (reason=0x0, client=0x7fcae6b87a90) at imap-client.c:232
No locals.
#11 client_input (client=0x7fcae6b87a90) at imap-client.c:949
        cmd = 0xd9f48
        output = 0x0
        bytes = 10
        __FUNCTION__ = "client_input"
#12 0x00007fcae55d1a87 in io_loop_call_io (io=0x7fcae6b8ddd0) at ioloop.c:388
        ioloop = 0x7fcae6b71740
        t_id = 2
#13 0x00007fcae55d290f in io_loop_handler_run (ioloop=ioloop@entry=0x7fcae6b71740) at ioloop-epoll.c:220
        ctx = 0x7fcae6b723d0
        events = <optimized out>
        list = 0x7fcae6b73e00
        io = <optimized out>
        tv = {tv_sec = 4, tv_usec = 999587}
        events_count = <optimized out>
        msecs = <optimized out>
        ret = 1
        i = 0
        call = <optimized out>
        __FUNCTION__ = "io_loop_handler_run"
#14 0x00007fcae55d15d8 in io_loop_run (ioloop=0x7fcae6b71740) at ioloop.c:412
        __FUNCTION__ = "io_loop_run"
#15 0x00007fcae557e9e3 in master_service_run (service=0x7fcae6b715d0, callback=callback@entry=0x7fcae5d8ed70 <client_connected>) at master-service.c:571
No locals.
#16 0x00007fcae5d79324 in main (argc=1, argv=0x7fcae6b71390) at main.c:400
        set_roots = {0x7fcae5f9d9e0 <imap_setting_parser_info>, 0x0}
        login_set = {auth_socket_path = 0x7fcae6b69048 "127.0.0.1/alex@mekeystore.ro", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x7fcae5d8f170 <login_client_connected>, failure_callback = 0x7fcae5d8ee50 <login_client_failed>, request_auth_token = 1}
        service_flags = <optimized out>
        storage_service_flags = <optimized out>
        username = 0x0
        c = <optimized out>
From                To                  Syms Read   Shared Object Library
0x00007fcae5862800  0x00007fcae5905c24  Yes         /usr/lib64/dovecot/libdovecot-storage.so.0
0x00007fcae55792e0  0x00007fcae55e8806  Yes         /usr/lib64/dovecot/libdovecot.so.0
0x00007fcae51b53b0  0x00007fcae52fa11f  Yes         /lib64/libc.so.6
0x00007fcae4f92e60  0x00007fcae4f93960  Yes         /lib64/libdl.so.2
0x00007fcae5b4baf0  0x00007fcae5b65520  Yes         /lib64/ld-linux-x86-64.so.2
0x00007fcae4d84830  0x00007fcae4d8ce93  Yes         /usr/lib64/dovecot/lib10_quota_plugin.so
0x00007fcae4b7d410  0x00007fcae4b7dd68  Yes         /usr/lib64/dovecot/lib11_imap_quota_plugin.so
0x00007fcae4979540  0x00007fcae497a03c  Yes         /usr/lib64/dovecot/lib11_trash_plugin.so
0x00007fcae4775ae0  0x00007fcae4775f1c  Yes         /usr/lib64/dovecot/lib20_autocreate_plugin.so
$1 = 0x0
No symbol "__glib_assert_msg" in current context.
rax            0x0	0
rbx            0x0	0
rcx            0x7fcae6b81ed0	140509430947536
rdx            0xffffffff	4294967295
rsi            0x0	0
rdi            0x7fcae6b87430	140509430969392
rbp            0x7fcae6b87370	0x7fcae6b87370
rsp            0x7ffed88e1740	0x7ffed88e1740
r8             0x7fcae5d93a32	140509416340018
r9             0x7fcae52d8f50	140509405089616
r10            0x2e302e302e373231	3328210909095473713
r11            0x246	582
r12            0x7fcae6b81f10	140509430947600
r13            0x7fcae6b81e90	140509430947472
r14            0x7fcae6b843a8	140509430956968
r15            0x1	1
rip            0x7fcae55d1419	0x7fcae55d1419 <io_remove_full+9>
eflags         0x10202	[ IF RF ]
cs             0x33	51
ss             0x2b	43
ds             0x0	0
es             0x0	0
fs             0x0	0
gs             0x0	0
st0            *value not available*
st1            *value not available*
st2            *value not available*
st3            *value not available*
st4            *value not available*
st5            *value not available*
st6            *value not available*
st7            *value not available*
fctrl          *value not available*
fstat          *value not available*
ftag           *value not available*
fiseg          *value not available*
fioff          *value not available*
foseg          *value not available*
fooff          *value not available*
fop            *value not available*
xmm0           *value not available*
xmm1           *value not available*
xmm2           *value not available*
xmm3           *value not available*
xmm4           *value not available*
xmm5           *value not available*
xmm6           *value not available*
xmm7           *value not available*
xmm8           *value not available*
xmm9           *value not available*
xmm10          *value not available*
xmm11          *value not available*
xmm12          *value not available*
xmm13          *value not available*
xmm14          *value not available*
xmm15          *value not available*
mxcsr          *value not available*
Dump of assembler code for function io_remove_full:
   0x00007fcae55d1410 <+0>:	push   %rbp
   0x00007fcae55d1411 <+1>:	push   %rbx
   0x00007fcae55d1412 <+2>:	sub    $0x8,%rsp
   0x00007fcae55d1416 <+6>:	mov    (%rdi),%rbx
=> 0x00007fcae55d1419 <+9>:	cmpq   $0x0,0x8(%rbx)
   0x00007fcae55d141e <+14>:	je     0x7fcae55d14be <io_remove_full+174>
   0x00007fcae55d1424 <+20>:	movq   $0x0,(%rdi)
   0x00007fcae55d142b <+27>:	cmpq   $0x0,0x20(%rbx)
   0x00007fcae55d1430 <+32>:	mov    %esi,%ebp
   0x00007fcae55d1432 <+34>:	movq   $0x0,0x8(%rbx)
   0x00007fcae55d143a <+42>:	je     0x7fcae55d1445 <io_remove_full+53>
   0x00007fcae55d143c <+44>:	lea    0x20(%rbx),%rdi
   0x00007fcae55d1440 <+48>:	callq  0x7fcae55763a0 <io_loop_context_unref@plt>
   0x00007fcae55d1445 <+53>:	testb  $0x8,(%rbx)
   0x00007fcae55d1448 <+56>:	jne    0x7fcae55d1490 <io_remove_full+128>
   0x00007fcae55d144a <+58>:	mov    0x28(%rbx),%rax
   0x00007fcae55d144e <+62>:	test   %rax,%rax
   0x00007fcae55d1451 <+65>:	je     0x7fcae55d14b0 <io_remove_full+160>
   0x00007fcae55d1453 <+67>:	mov    0x30(%rbx),%rdx
   0x00007fcae55d1457 <+71>:	mov    %rdx,0x30(%rax)
   0x00007fcae55d145b <+75>:	mov    0x30(%rbx),%rax
   0x00007fcae55d145f <+79>:	test   %rax,%rax
   0x00007fcae55d1462 <+82>:	je     0x7fcae55d146c <io_remove_full+92>
   0x00007fcae55d1464 <+84>:	mov    0x28(%rbx),%rdx
   0x00007fcae55d1468 <+88>:	mov    %rdx,0x28(%rax)
   0x00007fcae55d146c <+92>:	mov    0x18(%rbx),%rax
   0x00007fcae55d1470 <+96>:	cmp    0x18(%rax),%rbx
   0x00007fcae55d1474 <+100>:	je     0x7fcae55d14a0 <io_remove_full+144>
   0x00007fcae55d1476 <+102>:	add    $0x8,%rsp
   0x00007fcae55d147a <+106>:	mov    %rbx,%rdi
   0x00007fcae55d147d <+109>:	movzbl %bpl,%esi
   0x00007fcae55d1481 <+113>:	pop    %rbx
   0x00007fcae55d1482 <+114>:	pop    %rbp
   0x00007fcae55d1483 <+115>:	jmpq   0x7fcae5577020 <io_loop_handle_remove@plt>
   0x00007fcae55d1488 <+120>:	nopl   0x0(%rax,%rax,1)
   0x00007fcae55d1490 <+128>:	add    $0x8,%rsp
   0x00007fcae55d1494 <+132>:	mov    %rbx,%rdi
   0x00007fcae55d1497 <+135>:	pop    %rbx
   0x00007fcae55d1498 <+136>:	pop    %rbp
   0x00007fcae55d1499 <+137>:	jmpq   0x7fcae55767b0 <io_loop_notify_remove@plt>
   0x00007fcae55d149e <+142>:	xchg   %ax,%ax
   0x00007fcae55d14a0 <+144>:	mov    0x30(%rbx),%rdx
   0x00007fcae55d14a4 <+148>:	mov    %rdx,0x18(%rax)
   0x00007fcae55d14a8 <+152>:	jmp    0x7fcae55d1476 <io_remove_full+102>
   0x00007fcae55d14aa <+154>:	nopw   0x0(%rax,%rax,1)
   0x00007fcae55d14b0 <+160>:	mov    0x18(%rbx),%rax
   0x00007fcae55d14b4 <+164>:	mov    0x30(%rbx),%rdx
   0x00007fcae55d14b8 <+168>:	mov    %rdx,0x10(%rax)
   0x00007fcae55d14bc <+172>:	jmp    0x7fcae55d145b <io_remove_full+75>
   0x00007fcae55d14be <+174>:	lea    0x24d6a(%rip),%r8        # 0x7fcae55f622f
   0x00007fcae55d14c5 <+181>:	lea    0x250c5(%rip),%rcx        # 0x7fcae55f6591 <__FUNCTION__.4213>
   0x00007fcae55d14cc <+188>:	lea    0x24cda(%rip),%rsi        # 0x7fcae55f61ad
   0x00007fcae55d14d3 <+195>:	lea    0x173ce(%rip),%rdi        # 0x7fcae55e88a8
   0x00007fcae55d14da <+202>:	mov    $0x58,%edx
   0x00007fcae55d14df <+207>:	xor    %eax,%eax
   0x00007fcae55d14e1 <+209>:	callq  0x7fcae55752e0 <i_panic@plt>
End of assembler dump.
backtrace (9,674 bytes)
cgroup (204 bytes)
11:freezer:/
10:hugetlb:/
9:devices:/system.slice/dovecot.service
8:pids:/
7:blkio:/
6:cpuset:/
5:net_prio,net_cls:/
4:memory:/
3:perf_event:/
2:cpuacct,cpu:/
1:name=systemd:/system.slice/dovecot.service
cgroup (204 bytes)
core_backtrace (5,187 bytes)
{   "signal": 11
,   "executable": "/usr/libexec/dovecot/imap"
,   "stacktrace":
      [ {   "crash_thread": true
        ,   "frames":
              [ {   "address": 140509408203801
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 500761
                ,   "function_name": "io_remove_full"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509407982928
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 279888
                ,   "function_name": "client_dict_finish_transaction"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509407983066
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 280026
                ,   "function_name": "client_dict_disconnect"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509407984601
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 281561
                ,   "function_name": "client_dict_deinit"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509399518490
                ,   "build_id": "1af71f98be6d438ae0c3f4f3053e92611805d666"
                ,   "build_id_offset": 36122
                ,   "function_name": "dict_quota_deinit"
                ,   "file_name": "/usr/lib64/dovecot/lib10_quota_plugin.so"
                }
              , {   "address": 140509399501525
                ,   "build_id": "1af71f98be6d438ae0c3f4f3053e92611805d666"
                ,   "build_id_offset": 19157
                ,   "function_name": "quota_root_deinit"
                ,   "file_name": "/usr/lib64/dovecot/lib10_quota_plugin.so"
                }
              , {   "address": 140509399502397
                ,   "build_id": "1af71f98be6d438ae0c3f4f3053e92611805d666"
                ,   "build_id_offset": 20029
                ,   "function_name": "quota_deinit"
                ,   "file_name": "/usr/lib64/dovecot/lib10_quota_plugin.so"
                }
              , {   "address": 140509399531324
                ,   "build_id": "1af71f98be6d438ae0c3f4f3053e92611805d666"
                ,   "build_id_offset": 48956
                ,   "function_name": "quota_user_deinit"
                ,   "file_name": "/usr/lib64/dovecot/lib10_quota_plugin.so"
                }
              , {   "address": 140509411211125
                ,   "build_id": "f13563830af109ff33cda715ce5c495da0b801c0"
                ,   "build_id_offset": 534389
                ,   "function_name": "mail_user_unref"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot-storage.so.0.0.0"
                }
              , {   "address": 140509416282998
                ,   "build_id": "b609a5957bad03f5e4399e6b862abfe8ab33455f"
                ,   "build_id_offset": 101238
                ,   "function_name": "client_default_destroy"
                ,   "file_name": "/usr/libexec/dovecot/imap"
                }
              , {   "address": 140509416281844
                ,   "build_id": "b609a5957bad03f5e4399e6b862abfe8ab33455f"
                ,   "build_id_offset": 100084
                ,   "function_name": "client_input"
                ,   "file_name": "/usr/libexec/dovecot/imap"
                }
              , {   "address": 140509408205447
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 502407
                ,   "function_name": "io_loop_call_io"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509408209167
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 506127
                ,   "function_name": "io_loop_handler_run"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509408204248
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 501208
                ,   "function_name": "io_loop_run"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509407865315
                ,   "build_id": "d60db481bffccf0e50b130e663b9c0c2274f79f4"
                ,   "build_id_offset": 162275
                ,   "function_name": "master_service_run"
                ,   "file_name": "/usr/lib64/dovecot/libdovecot.so.0.0.0"
                }
              , {   "address": 140509416231716
                ,   "build_id": "b609a5957bad03f5e4399e6b862abfe8ab33455f"
                ,   "build_id_offset": 49956
                ,   "function_name": "main"
                ,   "file_name": "/usr/libexec/dovecot/imap"
                } ]
        } ]
}
core_backtrace (5,187 bytes)
mekeystore

mekeystore

2017-12-07 08:49

reporter  

dso_list (845 bytes)
/usr/lib64/dovecot/libdovecot.so.0.0.0 dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
/usr/lib64/ld-2.17.so glibc-2.17-157.el7.x86_64 (CentOS) 1512627138
/usr/lib64/libc-2.17.so glibc-2.17-157.el7.x86_64 (CentOS) 1512627138
/usr/libexec/dovecot/imap dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
/usr/lib64/dovecot/lib11_imap_quota_plugin.so dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
/usr/lib64/libdl-2.17.so glibc-2.17-157.el7.x86_64 (CentOS) 1512627138
/usr/lib64/dovecot/lib20_autocreate_plugin.so dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
/usr/lib64/dovecot/lib10_quota_plugin.so dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
/usr/lib64/dovecot/libdovecot-storage.so.0.0.0 dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
/usr/lib64/dovecot/lib11_trash_plugin.so dovecot-1:2.2.10-8.el7.x86_64 (CentOS) 1512632733
dso_list (845 bytes)
exploitable (82 bytes)
Likely crash reason: Jump to an invalid address
Exploitable rating (0-9 scale): 6
exploitable (82 bytes)
limits (1,323 bytes)
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             268435456            268435456            bytes     
Max stack size            8388608              unlimited            bytes     
Max core file size        0                    unlimited            bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             15034                15034                processes 
Max open files            1024                 4096                 files     
Max locked memory         65536                65536                bytes     
Max address space         268435456            268435456            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       15034                15034                signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                    
Max realtime priority     0                    0                    
Max realtime timeout      unlimited            unlimited            us        
limits (1,323 bytes)
machineid (135 bytes)
systemd=a809fc03443443f8978cd10abad831c8
sosreport_uploader-dmidecode=76123af9688f3b2820eb8f1a219301bcdd802c1674610eb5df26500d120dc3b2
machineid (135 bytes)
mekeystore

mekeystore

2017-12-07 08:49

reporter  

maps (4,853 bytes)
7fcae4775000-7fcae4777000 r-xp 00000000 fd:00 68356437                   /usr/lib64/dovecot/lib20_autocreate_plugin.so
7fcae4777000-7fcae4976000 ---p 00002000 fd:00 68356437                   /usr/lib64/dovecot/lib20_autocreate_plugin.so
7fcae4976000-7fcae4977000 r--p 00001000 fd:00 68356437                   /usr/lib64/dovecot/lib20_autocreate_plugin.so
7fcae4977000-7fcae4978000 rw-p 00002000 fd:00 68356437                   /usr/lib64/dovecot/lib20_autocreate_plugin.so
7fcae4978000-7fcae497b000 r-xp 00000000 fd:00 68356435                   /usr/lib64/dovecot/lib11_trash_plugin.so
7fcae497b000-7fcae4b7a000 ---p 00003000 fd:00 68356435                   /usr/lib64/dovecot/lib11_trash_plugin.so
7fcae4b7a000-7fcae4b7b000 r--p 00002000 fd:00 68356435                   /usr/lib64/dovecot/lib11_trash_plugin.so
7fcae4b7b000-7fcae4b7c000 rw-p 00003000 fd:00 68356435                   /usr/lib64/dovecot/lib11_trash_plugin.so
7fcae4b7c000-7fcae4b7f000 r-xp 00000000 fd:00 68356434                   /usr/lib64/dovecot/lib11_imap_quota_plugin.so
7fcae4b7f000-7fcae4d7e000 ---p 00003000 fd:00 68356434                   /usr/lib64/dovecot/lib11_imap_quota_plugin.so
7fcae4d7e000-7fcae4d7f000 r--p 00002000 fd:00 68356434                   /usr/lib64/dovecot/lib11_imap_quota_plugin.so
7fcae4d7f000-7fcae4d80000 rw-p 00003000 fd:00 68356434                   /usr/lib64/dovecot/lib11_imap_quota_plugin.so
7fcae4d80000-7fcae4d90000 r-xp 00000000 fd:00 68356433                   /usr/lib64/dovecot/lib10_quota_plugin.so
7fcae4d90000-7fcae4f90000 ---p 00010000 fd:00 68356433                   /usr/lib64/dovecot/lib10_quota_plugin.so
7fcae4f90000-7fcae4f91000 r--p 00010000 fd:00 68356433                   /usr/lib64/dovecot/lib10_quota_plugin.so
7fcae4f91000-7fcae4f92000 rw-p 00011000 fd:00 68356433                   /usr/lib64/dovecot/lib10_quota_plugin.so
7fcae4f92000-7fcae4f94000 r-xp 00000000 fd:00 33622279                   /usr/lib64/libdl-2.17.so
7fcae4f94000-7fcae5194000 ---p 00002000 fd:00 33622279                   /usr/lib64/libdl-2.17.so
7fcae5194000-7fcae5195000 r--p 00002000 fd:00 33622279                   /usr/lib64/libdl-2.17.so
7fcae5195000-7fcae5196000 rw-p 00003000 fd:00 33622279                   /usr/lib64/libdl-2.17.so
7fcae5196000-7fcae534c000 r-xp 00000000 fd:00 33622273                   /usr/lib64/libc-2.17.so
7fcae534c000-7fcae554c000 ---p 001b6000 fd:00 33622273                   /usr/lib64/libc-2.17.so
7fcae554c000-7fcae5550000 r--p 001b6000 fd:00 33622273                   /usr/lib64/libc-2.17.so
7fcae5550000-7fcae5552000 rw-p 001ba000 fd:00 33622273                   /usr/lib64/libc-2.17.so
7fcae5552000-7fcae5557000 rw-p 00000000 00:00 0 
7fcae5557000-7fcae5626000 r-xp 00000000 fd:00 68384986                   /usr/lib64/dovecot/libdovecot.so.0.0.0
7fcae5626000-7fcae5825000 ---p 000cf000 fd:00 68384986                   /usr/lib64/dovecot/libdovecot.so.0.0.0
7fcae5825000-7fcae5829000 r--p 000ce000 fd:00 68384986                   /usr/lib64/dovecot/libdovecot.so.0.0.0
7fcae5829000-7fcae582a000 rw-p 000d2000 fd:00 68384986                   /usr/lib64/dovecot/libdovecot.so.0.0.0
7fcae582a000-7fcae582d000 rw-p 00000000 00:00 0 
7fcae582d000-7fcae5940000 r-xp 00000000 fd:00 68384212                   /usr/lib64/dovecot/libdovecot-storage.so.0.0.0
7fcae5940000-7fcae5b40000 ---p 00113000 fd:00 68384212                   /usr/lib64/dovecot/libdovecot-storage.so.0.0.0
7fcae5b40000-7fcae5b46000 r--p 00113000 fd:00 68384212                   /usr/lib64/dovecot/libdovecot-storage.so.0.0.0
7fcae5b46000-7fcae5b4b000 rw-p 00119000 fd:00 68384212                   /usr/lib64/dovecot/libdovecot-storage.so.0.0.0
7fcae5b4b000-7fcae5b6b000 r-xp 00000000 fd:00 33622266                   /usr/lib64/ld-2.17.so
7fcae5d50000-7fcae5d53000 rw-p 00000000 00:00 0 
7fcae5d67000-7fcae5d68000 r--s 00000000 fd:00 68395653                   /var/vmail/mekeystore.ro/alex/.Sent/dovecot.index.cache
7fcae5d68000-7fcae5d6a000 rw-p 00000000 00:00 0 
7fcae5d6a000-7fcae5d6b000 r--p 0001f000 fd:00 33622266                   /usr/lib64/ld-2.17.so
7fcae5d6b000-7fcae5d6c000 rw-p 00020000 fd:00 33622266                   /usr/lib64/ld-2.17.so
7fcae5d6c000-7fcae5d6d000 rw-p 00000000 00:00 0 
7fcae5d6d000-7fcae5d9d000 r-xp 00000000 fd:00 102512576                  /usr/libexec/dovecot/imap
7fcae5f9d000-7fcae5f9f000 r--p 00030000 fd:00 102512576                  /usr/libexec/dovecot/imap
7fcae5f9f000-7fcae5fa0000 rw-p 00032000 fd:00 102512576                  /usr/libexec/dovecot/imap
7fcae6b69000-7fcae6bb3000 rw-p 00000000 00:00 0                          [heap]
7ffed88c1000-7ffed88e2000 rw-p 00000000 00:00 0                          [stack]
7ffed8930000-7ffed8932000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
maps (4,853 bytes)
open_fds (1,010 bytes)
0:/dev/null
pos:	0
flags:	0100001
mnt_id:	173
1:/dev/null
pos:	0
flags:	0100001
mnt_id:	173
2:pipe:[225483]
pos:	0
flags:	01
mnt_id:	9
3:pipe:[224241]
pos:	0
flags:	01
mnt_id:	9
4:/var/vmail/mekeystore.ro/alex/dovecot.mailbox.log
pos:	24
flags:	0102002
mnt_id:	162
5:pipe:[225513]
pos:	0
flags:	04001
mnt_id:	9
6:pipe:[225496]
pos:	0
flags:	01
mnt_id:	9
7:socket:[285296]
pos:	0
flags:	02004002
mnt_id:	8
8:/dev/urandom
pos:	0
flags:	02100000
mnt_id:	173
9:pipe:[285649]
pos:	0
flags:	02004000
mnt_id:	9
10:pipe:[285649]
pos:	0
flags:	02004001
mnt_id:	9
11:anon_inode:[eventpoll]
pos:	0
flags:	02000002
mnt_id:	10
tfd:        6 events:       18 data:     7fcae6b73d60
tfd:        9 events:       1b data:     7fcae6b73c90
tfd:        7 events:       1b data:     7fcae6b73e00
12:/var/vmail/mekeystore.ro/alex/.Sent/dovecot.index.log
pos:	456
flags:	0102002
mnt_id:	162
13:socket:[284421]
pos:	0
flags:	02
mnt_id:	8
14:/var/vmail/mekeystore.ro/alex/.Sent/dovecot.index.cache
pos:	364
flags:	0100002
mnt_id:	162
open_fds (1,010 bytes)
proc_pid_status (1,152 bytes)
Name:	imap
State:	S (sleeping)
Tgid:	22915
Ngid:	0
Pid:	22915
PPid:	21136
TracerPid:	0
Uid:	101	101	101	101
Gid:	12	12	12	12
FDSize:	256
Groups:	12 
VmPeak:	   21512 kB
VmSize:	   21120 kB
VmLck:	       0 kB
VmPin:	       0 kB
VmHWM:	    2496 kB
VmRSS:	    2496 kB
RssAnon:	     432 kB
RssFile:	    2064 kB
RssShmem:	       0 kB
VmData:	     360 kB
VmStk:	     136 kB
VmExe:	     192 kB
VmLib:	    3912 kB
VmPTE:	      56 kB
VmSwap:	       0 kB
Threads:	1
SigQ:	0/15034
SigPnd:	0000000000000000
ShdPnd:	0000000000000000
SigBlk:	0000000000000000
SigIgn:	0000000000001000
SigCgt:	0000000000006002
CapInh:	0000000000000000
CapPrm:	0000000000000000
CapEff:	0000000000000000
CapBnd:	0000001fffffffff
CapAmb:	0000000000000000
Seccomp:	0
Cpus_allowed:	f
Cpus_allowed_list:	0-3
Mems_allowed:	00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000001
Mems_allowed_list:	0
voluntary_ctxt_switches:	24
nonvoluntary_ctxt_switches:	22
proc_pid_status (1,152 bytes)
mekeystore

mekeystore

2017-12-07 08:49

reporter  

var_log_messages (260 bytes)
[System Logs]:
Dec 07 10:37:10 mekeystore.ro kernel: imap[22915]: segfault at 8 ip 00007fcae55d1419 sp 00007ffed88e1740 error 4
Dec 07 10:37:10 mekeystore.ro abrt-hook-ccpp[22916]: Process 22915 (imap) of user 101 killed by SIGSEGV - dumping core
[User Logs]:
var_log_messages (260 bytes)
hillside

hillside

2018-01-09 21:26

reporter   ~0030897

Another user experienced a similar problem:

reason: imap killed by SIGSEGV

reporter: libreport-2.1.11.1
backtrace_rating: 4
cmdline: dovecot/imap
crash_function: io_remove_full
environ: '\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab\xab'
executable: /usr/libexec/dovecot/imap
global_pid: 12744
kernel: 3.10.0-693.11.6.el7.x86_64
package: dovecot-2.2.10-8.el7
pkg_fingerprint: 24C6 A8A7 F4A8 0EB5
pkg_vendor: CentOS
reason: imap killed by SIGSEGV
reproducible: Not sure how to reproduce the problem
runlevel: N 5
type: CCpp
uid: 101

Issue History

Date Modified Username Field Change
2017-12-07 08:49 mekeystore New Issue
2017-12-07 08:49 mekeystore File Added: backtrace
2017-12-07 08:49 mekeystore File Added: cgroup
2017-12-07 08:49 mekeystore File Added: core_backtrace
2017-12-07 08:49 mekeystore File Added: dso_list
2017-12-07 08:49 mekeystore File Added: exploitable
2017-12-07 08:49 mekeystore File Added: limits
2017-12-07 08:49 mekeystore File Added: machineid
2017-12-07 08:49 mekeystore File Added: maps
2017-12-07 08:49 mekeystore File Added: open_fds
2017-12-07 08:49 mekeystore File Added: proc_pid_status
2017-12-07 08:49 mekeystore File Added: var_log_messages
2018-01-09 21:26 hillside Note Added: 0030897