[Dovecot] imap catches sig 11 on EXPUNGE

[Thomas Lofgren]

Debian unstable, x86

# dovecot --version
0.99.12

# tail /var/log/mail.log
...
Jan  6 16:56:55 gecko dovecot: child 16505 (imap) killed with signal 11
...

When I use squirrelmail, the imap process always segfaults when I try
to enter my INBOX group. Squirrelmail produces the following error
message:

    ERROR : Connection dropped by imap-server.
    Query: EXPUNGE

When I use gnus, I can enter the group just fine, but gnus/emacs hangs
on exit (100% reproducible, as is the squirrelmail case). Turning on
debug info I catch this in the imap log:
 
   37 UID SEARCH UID 1098 NOT SINCE 30 DEC 2004
   * SEARCH
   37 OK Search completed.
   38 EXPUNGE
   read:errno=0
  (hangs until emacs is killed)

So in each case, it seems to happen on EXPUNGE. I got it to produce a
core file, and this is the backtrace:

(gdb) where
#0  0x08071a58 in mail_index_lookup_field_raw ()
#1  0x080666b6 in mbox_mail_get_location ()
#2  0x08063111 in mbox_is_valid_mask ()
#3  0x08063553 in mbox_expunge_locked ()
#4  0x0806a9c3 in index_storage_expunge ()
#5  0x08051cc6 in cmd_expunge ()
#6  0x08054ae9 in _client_reset_command ()
#7  0x08054b78 in _client_input ()
#8  0x0808b108 in io_loop_handler_run ()
#9  0x0808aa98 in io_loop_run ()
#10 0x0805ac29 in main ()

Please let me know if I can provide any further information. I don't
subscribe to the mailing list, but I'll try to keep up on the archive
in the next few days.

Thanks,
Tom