[Dovecot] Core dump in 2.2.rc2 with FETCH 1 BODY.PEEK[ALL]

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Usingt ./sbin/dovecot --version
2.2.rc2 (7a08461c5559)
with Maildir,

2 FETCH 1 BODY.PEEK[ALL]

dumps core, bt full is:

#0  0x00007fa166e721b5 in raise () from /lib/libc.so.6
No symbol table info available.
#1  0x00007fa166e74fc0 in abort () from /lib/libc.so.6
No symbol table info available.
#2  0x00007fa16721ac47 in default_fatal_finish (type=LOG_TYPE_PANIC, 
status=0) at failures.c:191
         backtrace = 0x181e2d0 
"/usr/local/dovecot-2.2.rc2/lib/dovecot/libdovecot.so.0(+0x78c20) 
[0x7fa16721ac20] -> 
/usr/local/dovecot-2.2.rc2/lib/dovecot/libdovecot.so.0(+0x7a0dd) 
[0x7fa16721c0dd] -> /usr/local/dovecot-2.2.rc2/lib"...
#3  0x00007fa16721c0dd in i_internal_fatal_handler (ctx=0x7fffa3de5d90, 
format=0x7fa1675bbde1 "file %s: line %d: unreached", args=0x7fffa3de5d70) 
at failures.c:652
         status = 0
#4  0x00007fa16721af90 in i_panic (format=0x7fa1675bbde1 "file %s: line 
%d: unreached") at failures.c:263
         ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0}
         args = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 
0x7fffa3de5e70, reg_save_area = 0x7fffa3de5da0}}
#5  0x00007fa16759d415 in imap_msgpart_parse (section=0x181e278 "ALL", 
msgpart_r=0x18476c0) at imap-msgpart.c:291
         msgpart = 0x1851c40
         pool = 0x1851c20
         i = 0
         next_digit = true
         ret = 0
#6  0x000000000041e734 in imap_fetch_body_section_init 
(ctx=0x7fffa3de5fa0) at imap-fetch-body.c:358
         body = 0x18476b8
         list_args = 0x7fa1672152a7
         list_count = 0
         str = 0x0
         p = 0x181e26e ""
         error = 0x7fffa3de6460 "\001"
         __FUNCTION__ = "imap_fetch_body_section_init"
#7  0x000000000041d064 in fetch_body_init (ctx=0x7fffa3de5fa0) at 
imap-fetch.c:670
No locals.
#8  0x000000000041b6b5 in imap_fetch_init_handler 
(init_ctx=0x7fffa3de5fa0) at imap-fetch.c:62
         handler = 0x1827e10
         lookup_name = 0x181e270 "BODY"
         p = 0x181e264 ".PEEK[ALL]"
         __FUNCTION__ = "imap_fetch_init_handler"
#9  0x000000000040e6f5 in imap_fetch_cmd_init_handler (ctx=0x1847068, 
cmd=0x1846f60, name=0x181e260 "BODY.PEEK[ALL]", args=0x7fffa3de5fe8) at 
cmd-fetch.c:36
         init_ctx = {fetch_ctx = 0x1847068, pool = 0x1846f40, name = 
0x181e260 "BODY.PEEK[ALL]", args = 0x1829978, error = 0x0}
         __FUNCTION__ = "imap_fetch_cmd_init_handler"
#10 0x000000000040e86d in fetch_parse_args (ctx=0x1847068, cmd=0x1846f60, 
arg=0x1829978, next_arg_r=0x7fffa3de6078) at cmd-fetch.c:69
         str = 0x181e260 "BODY.PEEK[ALL]"
         macro = 0x0
#11 0x000000000040eef3 in cmd_fetch (cmd=0x1846f60) at cmd-fetch.c:258
         client = 0x1846380
         ctx = 0x1847068
         args = 0x1829918
         next_arg = 0x7fa166e75130
         list_arg = 0x1847048
         search_args = 0x1850c30
         qresync_args = {qresync_sample_seqset = 0x1, qresync_sample_uidset 
= 0x41a22c}
         messageset = 0x1829a78 "1"
         send_vanished = false
         ret = 1
#12 0x000000000041a18f in command_exec (cmd=0x1846f60) at 
imap-commands.c:156
         hook = 0x1827d70
         ret = false
#13 0x00000000004190f2 in client_command_input (cmd=0x1846f60) at 
imap-client.c:775
         client = 0x1846380
         command = 0x20041a274
         __FUNCTION__ = "client_command_input"
#14 0x00000000004193f2 in client_command_input (cmd=0x1846f60) at 
imap-client.c:836
         client = 0x1846380
         command = 0x1827858
         __FUNCTION__ = "client_command_input"
#15 0x0000000000419512 in client_handle_next_command (client=0x1846380, 
remove_io_r=0x7fffa3de61bd) at imap-client.c:874
No locals.
#16 0x0000000000419592 in client_handle_input (client=0x1846380) at 
imap-client.c:886
         _data_stack_cur_id = 3
         ret = false
         remove_io = false
         handled_commands = false
         __FUNCTION__ = "client_handle_input"
#17 0x0000000000419725 in client_input (client=0x1846380) at 
imap-client.c:928
         cmd = 0x183c8a8
         output = 0x1846d98
         bytes = 26
         __FUNCTION__ = "client_input"
#18 0x00007fa167231e1b in io_loop_call_io (io=0x1846e60) at ioloop.c:387
         ioloop = 0x1826700
         t_id = 2
#19 0x00007fa167233aaa in io_loop_handler_run (ioloop=0x1826700) at 
ioloop-epoll.c:215
         ctx = 0x1826a80
         events = 0x1826af0
         event = 0x1826af0
         list = 0x1846eb0
         io = 0x1846e60
         tv = {tv_sec = 1725, tv_usec = 816704}
         events_count = 6
         msecs = 1725817
         ret = 1
         i = 0
         j = 0
         call = true
         __FUNCTION__ = "io_loop_handler_run"
#20 0x00007fa167231ebe in io_loop_run (ioloop=0x1826700) at ioloop.c:406
No locals.
#21 0x00007fa1671caa45 in master_service_run (service=0x18265a0, 
callback=0x4262c6 <client_connected>) at master-service.c:550
No locals.
#22 0x00000000004265df in main (argc=1, argv=0x1826390) at main.c:400
         set_roots = {0x42f700, 0x0}
         login_set = {auth_socket_path = 0x181e048 "\200\340\201\001", 
postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 
0x426078 <login_client_connected>,
           failure_callback = 0x426252 <login_client_failed>, 
request_auth_token = 1}
         service_flags = MASTER_SERVICE_FLAG_KEEP_CONFIG_OPEN

  -- 
Steffen 
Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEVAwUBUThQFl3r2wJMiz2NAQI+zwf8CLsphLKRsB2pgFAuoNT9UAcs74DVC5CT
JqNw1X4IOau9fY+m0fyZC/xOowjZiPn0yz8ZIYG/6l5dFZxNKzuyUBwh1pHVqcP7
WOrM71+ZW43gT6hibCtaxyW61BQ3XoK/nIDVZM67eVcy7G/DFuGd9RJsV4Bh3iuO
g3lXqaeFAeghukMKrvU/YwIXFVyjXsjjy8ZPm3QEtUEKWN8OXaveJ3O4VT/K0VWG
234D47rBT3KFt/kqwTn95LIp10DZzzch2i/QBe992acGi78Mz4F0+VT+lJFa6nlO
ZIzAeqhQRXoM8a86N0RJHri4xIMCzPHXjx/5lWL0TDe6N4ITfzEMCQ==
=PrvL
-----END PGP SIGNATURE-----