I also just realised, that iRcptCount and iErrorsCount are both 
already have a count of 1. So it might be an issue when there is an 
error while receiving various RCPT commands. I have no logfiles at 
the moment, but with the next crash I should also have those.

> I am getting segmentation faults on a SLES10 system with 1.25 built 
> from the official sources. Here's the backtrace and some information:
> 
> Program terminated with signal 11, Segmentation fault.
> #0  0xb7b702b5 in vfprintf () from /lib/libc.so.6
> (gdb) bt
> #0  0xb7b702b5 in vfprintf () from /lib/libc.so.6
> #1  0xb7b79012 in fprintf () from /lib/libc.so.6
> #2  0x0808c298 in SMTPHandleCmd_RCPT (
>     pszCommand=0xb4c88e28 "RCPT TO: <eb8b...@evisionmail.com>",
>     hBSock=0x825fe10, smt...@0xb4c883d8) at SMTPSvr.cpp:1629
> #3  0x0808ec8a in SMTPHandleCommand (
>     pszCommand=0xb4c88e28 "RCPT TO: <eb8b...@evisionmail.com>",
>     hBSock=0x825fe10, smt...@0xb4c883d8) at SMTPSvr.cpp:1015
> #4  0x0808f1bc in SMTPHandleSession (pThCfg=0x80c2760, 
> hBSock=0x825fe10)
>     at SMTPSvr.cpp:942
> #5  0x0808f506 in SMTPClientThread (pThreadData=0xb6d20028) at 
> SMTPSvr.cpp:387
> #6  0x0804dee7 in SysThreadStartup (pThreadData=0xb6d1ec28)
>     at SysDepUnix.cpp:919
> #7  0xb7d7c2ab in start_thread () from /lib/libpthread.so.0
> #8  0xb7bf4dbe in clone () from /lib/libc.so.6
> 
> (gdb) print SMTPS
> $1 = (SMTPSession &) @0xb4c883d8: {iSMTPState = 4, pThCfg = 
> 0x80c2760,
>   pSMTPCfg = 0x82d04e0, hSvrConfig = 0x832ff00, PeerInfo = {iSize = 
> 16,
>     Addr = "\002\000\005\200z", '\0' <repeats 115 times>}, SockInfo = 
> {
>     iSize = 16, Addr = "\002\000\000\031>\025", '\0' <repeats 115 
> times>},
>   iCmdDelay = 0, ulMaxMsgSize = 0,
>   szSvrFQDN = "xmailserver.test", '\0' <repeats 239 times>,
>   szSvrDomain = "xmailserver.test", '\0' <repeats 239 times>,
>   szClientFQDN = '\0' <repeats 255 times>,
>   szClientDomain = "dsl-216-128-228-122.freedom.wy.silverstar.com", 
> '\0' <repeats 210 times>, szDestDomain = "evisionmail.com", '\0' 
> <repeats 240 times>,
>   szLogonUser = '\0' <repeats 127 times>,
>   szMsgFile = "/tmp/msrvb4c89ba0.2786ce.tmp", '\0' <repeats 227 
> times>,
>   pMsgFile = 0x0, pszFrom = 0x815e040 
> "skateboard...@edmontonmandir.com",
>   pszRcpt = 0x836d7c0 "eb8b...@evisionmail.com",
>   pszSendRcpt = 0x83b3b08 "eb8b...@evisionmail.com", pszRealRcpt = 
> 0x0,
>   iRcptCount = 1, iErrorsCount = 1, iErrorsMax = 0, ullMessageID = 
> 1108936,
>   szMessageID = "S10EBC8", '\0' <repeats 120 times>,
>   szTimeStamp = "<1241111205.3033045...@xmailserver.test>", '\0' 
> <repeats 215 times>, ulSetupFlags = 0, ulFlags = 0, pszCustMsg = 0x0,
>   szRejMapName = '\0' <repeats 255 times>, pszNoTLSAuths = 0x0}
> 
> The code in question looks like this:
> 
> 1628            fprintf(SMTPS.pMsgFile, "RCPT TO:<%s> {ra=%s}\r\n", 
> SMTPS.pszSendRcpt,
> 1629                    (SMTPS.pszRealRcpt != NULL) ? 
> SMTPS.pszRealRcpt: SMTPS.pszSendRcpt);
> 
> So it's pretty obvious, that pMsgFile being a NULL pointer is the 
> reason for the crash.
> _______________________________________________
> xmail mailing list
> xmail@xmailserver.org
> http://xmailserver.org/mailman/listinfo/xmail


_______________________________________________
xmail mailing list
xmail@xmailserver.org
http://xmailserver.org/mailman/listinfo/xmail

Reply via email to