https://bugs.exim.org/show_bug.cgi?id=1671
--- Comment #2 from Wolfgang Breyha <[email protected]> --- I was able to produce coredumps with full debug info... I did that by adding iptables DROP for well known MX hosts of my own domains and queuing some mails caused by the timeouts. I had 3 emails for 2 domains in the queue. After removal of the iptables DROP the queuerunner came by and delivered 3 messages successfully.... after some minutes another, fresh, mail for the same destination arrived ... and crashed on delivery.... Program terminated with signal 11, Segmentation fault. #0 0x080c2923 in string_copy (s=0x0) at string.c:421 421 int len = Ustrlen(s) + 1; (gdb) bt #0 0x080c2923 in string_copy (s=0x0) at string.c:421 #1 0x080685fb in deliver_make_addr (address=0x0, copy=1) at deliver.c:106 #2 0x080ed936 in smtp_local_identity (sender=0x0, tblock=0x0) at smtp.c:1244 #3 0x080ed9f0 in smtp_are_same_identities (message_id=0x9aa21e0 "1ZRi1e-0008So-Oa", s_compare=0xbff1f2f4) at smtp.c:1282 #4 0x080c91e8 in transport_check_waiting (transport_name=0x999f460 "remote_smtp", hostname=0x99ae910 "zidmx3.univie.ac.at", local_message_max=500, new_message_id=0xbff23307 "", more=0xbff20300, oicf_func=0x80ed9b9 <smtp_are_same_identities>, oicf_data=0xbff1f2f4) at transport.c:1768 #5 0x080f09d7 in smtp_deliver (addrlist=0x99a3f90, host=0x99ae9e8, host_af=<value optimized out>, port=25, interface=0x99aeb08 "192.168.5.1", tblock=0x999f398, message_defer=0xbff23c00, suppress_tls=0) at smtp.c:2761 #6 0x080f1a7d in smtp_transport_entry (tblock=0x999f398, addrlist=0x99a3f90) at smtp.c:3587 #7 0x0806d218 in do_remote_deliveries (fallback=0) at deliver.c:4290 #8 0x08070a2b in deliver_message (id=0xbff65d2c "1ZRi86-0001Q1-50", forced=0, give_up=0) at deliver.c:6610 #9 0x0807bdca in main (argc=3, cargv=Cannot access memory at address 0x3 ) at exim.c:4565 The message which is referenced by smtp_are_same_identities() (1ZRi1e-0008So-Oa) came in while the DROP was active and got deferred by "retry time not reached for any host" Aug 18 16:38:12 moorhuhn exim[32538]: 2015-08-18 16:38:12 1ZRi1e-0008So-Oa <= ottoma.....@hidden_domain1 It was delivered by a queuerunner after the DROP was removed... Aug 18 16:41:08 moorhuhn exim[2667]: 2015-08-18 16:41:08 Start queue run: pid=2667 first another mail waiting for this host got delivered... Aug 18 16:41:10 moorhuhn exim[2669]: 2015-08-18 16:41:10 1ZRi0n-0008GX-MC => [email protected] ... Aug 18 16:41:10 moorhuhn exim[2669]: 2015-08-18 16:41:10 1ZRi0n-0008GX-MC Completed QT=3m57s then .... Aug 18 16:41:11 moorhuhn exim[2672]: 2015-08-18 16:41:11 1ZRi1e-0008So-Oa => u...@otherdomain Aug 18 16:41:11 moorhuhn exim[2672]: 2015-08-18 16:41:11 1ZRi1e-0008So-Oa Completed QT=3m5s and another one waiting... Aug 18 16:41:11 moorhuhn exim[2678]: 2015-08-18 16:41:11 1ZRhxs-0007dc-Bp => [email protected]... Aug 18 16:41:11 moorhuhn exim[2678]: 2015-08-18 16:41:11 1ZRhxs-0007dc-Bp Completed QT=6m59s Aug 18 16:41:11 moorhuhn exim[2667]: 2015-08-18 16:41:11 End queue run: pid=2667 Still everything went well... but minutes later a fresh email came in... Aug 18 16:44:48 moorhuhn exim[5457]: 2015-08-18 16:44:48 1ZRi86-0001Q1-50 <= chris...@hidden_domain1 Aug 18 16:44:49 moorhuhn exim[5468]: 2015-08-18 16:44:49 1ZRi86-0001Q1-50 Spool file 1ZRi1e-0008So-Oa-D not found Aug 18 16:44:49 moorhuhn exim[5466]: 2015-08-18 16:44:49 1ZRi86-0001Q1-50 == u...@otherdomain R=dnslookup T=remote_smtp defer (-1): smtp transport process returned non-zero status 0x008b: terminated by signal 11 Aug 18 16:44:49 moorhuhn exim[5466]: 2015-08-18 16:44:49 1ZRi86-0001Q1-50 Frozen and crashed after successfully delivering it to the destination (verified at the other end)! Meaning the "==" logentry is wrong. "exim -bp" output as well showing it not with a "D" for delivered. As already noticed on exim-users by somebody else.... the queue-ID in question and also the other two IDs delivered by the queuerunner are still in the wait-remote_smtp DB: # exim_dumpdb /var/spool/exim/ wait-remote_smtp|grep 1ZRi1e-0008So-Oa zidmx3.univie.ac.at 1ZRhxs-0007dc-Bp 1ZRi0n-0008GX-MC 1ZRi1e-0008So-Oa zidmx1.univie.ac.at 1ZRhxs-0007dc-Bp 1ZRi0n-0008GX-MC 1ZRi1e-0008So-Oa zidmx2.univie.ac.at 1ZRhxs-0007dc-Bp 1ZRi0n-0008GX-MC 1ZRi1e-0008So-Oa I'll keep exim binary coredumps, queue files, .... for a while -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
