[Dovecot] segfault in dovecot imap 1.1.1 to 1.1.3

[Rene Luria]

Dovecot dies with signal 11 (segfault) when doing some commands with a
specific message

you'll find relevant information stored here:
http://www.luria.ch/9e93676668e453b739ee3e085434e086/

the email:
msg.anon.txt

input rawlog:
20081001-120137-24371.in

dovecot -n:
dovecot-n.txt

the gdb backtrace:
bt.txt

test system is running debian sarge, but same thing happens with debian
etch (both x86) using xfs

always reproductible

Can you help me with this ?

(the problematic email is anonimized, tell-me if you need the originalone)

-- 
Rene Luria

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5314 bytes
Desc: S/MIME Cryptographic Signature
Url : http://dovecot.org/pipermail/dovecot/attachments/20081001/ee41c88c/attachment.bin