[Dovecot] [bug] dovecot 1.1.15: segfault after message move

[Juergen Daubert]

Hello,

found the following in my error log:

May 20 13:27:48 ser dovecot: imap-login: Login: user=<juergen>, method=PLAIN, rip=192.168.0.17, lip=192.168.0.90, TLS
May 20 13:28:10 ser dovecot: Panic: IMAP(juergen): file imap-sync.c: line 439 (cmd_sync_delayed): assertion failed: (client->mailbox != NULL)
May 20 13:28:10 ser dovecot: IMAP(juergen): Raw backtrace: imap [0x80cc01e] -> imap [0x80cc08a] -> imap [0x80cba78] -> imap [0x806642f] -> imap [0x80602c1] 
May 20 13:28:10 ser dovecot: child 23536 (imap) killed with signal 6 (core dumps disabled)

it's almost always reproducible using the Heirloom mailx [1] 
mail client, with mutt I get a 'connection closed' message but 
no segfault: 

- login to the dovecot server via imap/imaps
- move a message from INBOX to a another large mbox-file
- quit

Seems to be a new issue introduced with 1.1.15 because I don't
see that with 1.1.14 or older versions. 


Greetings
Juergen

[1] http://heirloom.sourceforge.net/mailx.html


#:> dovecot -n
# 1.1.15: /etc/dovecot.conf
# OS: Linux 2.6.27.23 i686  
base_dir: /var/run/dovecot/
protocols: imap imaps pop3 pop3s
ssl_cert_file: /etc/ssl/certs/dovecot.crt
ssl_key_file: /etc/ssl/keys/dovecot.key
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/lib/dovecot/imap-login
login_executable(imap): /usr/lib/dovecot/imap-login
login_executable(pop3): /usr/lib/dovecot/pop3-login
login_process_per_connection: no
login_processes_count: 1
first_valid_gid: 100
mail_location: mbox:~/Mail:INBOX=/var/spool/mail/%u
mbox_min_index_size: 100
mbox_very_dirty_syncs: yes
mail_executable(default): /usr/lib/dovecot/imap
mail_executable(imap): /usr/lib/dovecot/imap
mail_executable(pop3): /usr/lib/dovecot/pop3
mail_plugin_dir(default): /usr/lib/dovecot/modules/imap
mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3
auth default:
  passdb:
    driver: shadow
  userdb:
    driver: passwd


-- 
Juergen Daubert  |  mailto:jue at jue.li  
Korb, Germany    |  http://jue.li/crux