Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1025780

Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder

Show all headers | View raw

On Fri, Sep 18, 2020 at 12:05:09AM +0300, Timo Sirainen wrote:
> > One of my IMAP users reports failures when trying to do full-text
> > searches of a large (3G) mailbox; subject-only searches are OK.
> > 
> > The backtrace in syslog is:
> > 
> > Sep 15 11:51:37 aragorn dovecot: imap(atreic): Panic: file message-parser.c: line 174 (message_part_finish): assertion failed: (ctx->nested_parts_count > 0)
> 
> The original backported patch for v2.2 was accidentally wrong. Also I'm not sure if Debian backport had the "--" suffix boundary fix either? Attached anyway patches for both fixes.
> 

Thanks for looking at this, Timo. The 2.2 packages in Debian 9 (stretch
LTS) should have the latest patches.  See [1] and [2].

1. https://salsa.debian.org/debian/dovecot/-/blob/stable/stretch/debian/patches/CVE-2020-12100-14.patch#L57
2. https://salsa.debian.org/debian/dovecot/-/blob/stable/stretch/debian/patches/CVE-2020-12100-16.patch

Matthew, the stack trace doesn't include the most relevant symbols, so
the code path isn't entirely clear.  It's likely that the problem isn't
specifically related to a large mailbox, as originally suggested, but
rather a specific message in that mailbox.  It might be interesting if
we could get a copy of that message, if it can be identified and the
contents aren't sensitive. Feel free to provide it to me privately if
posting it to the BTS isn't desirable.  It'd help track this down, and
I'd be interested in testing the buster and sid dovecot packages against
it.

Thanks
noah

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Matthew Vernon <matthew@debian.org> - 2020-09-15 13:40 +0200
  Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Timo Sirainen <timo@sirainen.com> - 2020-09-17 23:30 +0200
    Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Noah Meyerhans <noahm@debian.org> - 2020-09-20 19:30 +0200
  Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Dimitry Andric <dimitry@andric.com> - 2020-09-21 15:50 +0200
    Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Noah Meyerhans <noahm@debian.org> - 2020-09-22 00:50 +0200
      Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Noah Meyerhans <noahm@debian.org> - 2020-09-22 20:10 +0200
    Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Timo Sirainen <timo@sirainen.com> - 2020-09-23 12:40 +0200
      Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Noah Meyerhans <noahm@debian.org> - 2020-09-23 17:50 +0200
        Bug#970386: dovecot-imapd: assertion failure in message_part_finish when searching large folder Noah Meyerhans <noahm@debian.org> - 2020-09-23 22:30 +0200

csiph-web