Created attachment 196959 [details] Cyrus IMAPd core dump Backtrace of imapd.core: [New Thread 804c06400 (LWP 100222/<unknown>)] (gdb) bt #0 0x00000008017f60aa in EVP_DigestInit_ex () from /lib/libcrypto.so.7 #1 0x00000008017ed1e8 in HMAC_Init_ex () from /lib/libcrypto.so.7 #2 0x00000008086dac5d in V2 () from /usr/local/lib/sasl2/libntlm.so.3 #3 0x00000008086dc41d in ntlm_server_mech_step () from /usr/local/lib/sasl2/libntlm.so.3 #4 0x000000080127043e in sasl_server_step () from /usr/local/lib/libsasl2.so.3 #5 0x0000000800ac0074 in saslserver () from /usr/local/lib/libcyrus_imap.so.0 #6 0x000000000040dcd5 in shut_down () #7 0x000000000040cfcf in shut_down () #8 0x000000000042848c in cyrus_mutex_free () Packages involved: cyrus-imapd25-2.5.11_2 cyrus-sasl-2.1.26_13 Found the issue happening only with certain ciphers: Sep 8 07:09:20 mail imaps[50889]: inittls: Loading hard-coded DH parameters Sep 8 07:09:20 mail imaps[50889]: starttls: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits new) no authentication Sep 8 07:09:20 mail imaps[50889]: client id: "vendor" "Microsoft" "os" "Windows Mobile" "os-version" "10.0" "guid" "38443130353438433135343232414446454346424341393941453546314437354639343132353141" Sep 8 07:09:24 mail master[39154]: process type:SERVICE name:imaps path:/usr/local/cyrus/bin/imapd age:3.598s pid:50889 signaled to death by signal 11 (Segmentation fault, core dumped)
I just realized the core dump might contain info from the memory which is not wise to post publicly. Can anyone make the attachment private or just remove it? I'll just make it available to any dev who really needs it.
The content of attachment 196959 [details] has been deleted for the following reason: requested by the uploader
Any comment on this? I get this now daily/nightly in my logs: +pid 58509 (imapd), uid 60: exited on signal 10 (core dumped) +pid 58510 (imapd), uid 60: exited on signal 10 (core dumped) +pid 58597 (imapd), uid 60: exited on signal 11 (core dumped) +pid 58598 (imapd), uid 60: exited on signal 11 (core dumped) +pid 58599 (imapd), uid 60: exited on signal 10 (core dumped) +pid 58602 (imapd), uid 60: exited on signal 10 (core dumped) +pid 59786 (imapd), uid 60: exited on signal 11 (core dumped) +Failed to fully fault in a core file segment at VA 0x800741000 with size 0x10000 to be written at offset 0x100000 for process imapd +Failed to fully fault in a core file segment at VA 0x8044a9000 with size 0x2b6000 to be written at offset 0x1ea000 for process imapd +Failed to fully fault in a core file segment at VA 0x805000000 with size 0x2cb6000 to be written at offset 0xca0000 for process imapd +pid 59791 (imapd), uid 60: exited on signal 11 (core dumped) +Failed to fully fault in a core file segment at VA 0x800741000 with size 0x10000 to be written at offset 0x100000 for process imapd +Failed to fully fault in a core file segment at VA 0x8044a9000 with size 0x2b6000 to be written at offset 0x1ea000 for process imapd +Failed to fully fault in a core file segment at VA 0x805000000 with size 0x2cb6000 to be written at offset 0xca0000 for process imapd +pid 59792 (imapd), uid 60: exited on signal 10 (core dumped) +Failed to fully fault in a core file segment at VA 0x800741000 with size 0x10000 to be written at offset 0x100000 for process imapd +Failed to fully fault in a core file segment at VA 0x8044a9000 with size 0x2b6000 to be written at offset 0x1ea000 for process imapd +Failed to fully fault in a core file segment at VA 0x805000000 with size 0x2cb6000 to be written at offset 0xca0000 for process imapd +pid 59793 (imapd), uid 60: exited on signal 10 (core dumped)
If this is a problem with Outluk authentication, then there is a workaround. You can disable NTLM and recompile Cyrus-SASL. The problem is with FreeBSD 10.4 and 11.2 and with all new versions of Cyrus-imapd 2.4, 2.5, 3.0.8 and with cyrus-sasl-2.1.26_13
Outlook of course.
Thanks av, but it sounds like a mere workaround, not a solution.
Can you reproduce the issue on 11.x or 12.x/current?
Note that 10.x is on OpenSSL 1.0.1u (11.x is on 1.0.2x and 12/current are on 1.1.1) and 10.4 was EOL October 31, 2018, so if this does not reproduce on a supported version, we will probably close it.
Very convenient, going through the bugs after 10.4 EOL only and then expire them. I filed the issue 2 months ago.
(In reply to Conrad Meyer from comment #7) 11.2-RELEASE-p4 FreeBSD 11.2-RELEASE-p4 #0 r339426 cyrus-imapd30-3.0.8 cyrus-sasl-2.1.26_13 mail client Outlook 2016 (Win7) If NTLM enabled in cyrus-sasl-2.1.26_13 imaps[702]: starttls: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits reused) no authentication mail master[564]: process type:SERVICE name:imaps path:/usr/local/cyrus/libexec/imapd age:0.477s pid:702 signaled to death by signal 11 (Segmentation fault, core dumped)
(In reply to av from comment #10) Thanks av. Any chance you could set up a dummy configuration where the coredump would not be sensitive for you and send me the contents? I would have some difficulty finding a Windows Outlook client :-).
(In reply to Conrad Meyer from comment #11) (Or enable verbose logging, maybe?) I'll try to reproduce from the libntlm end on CURRENT.
Btw. the original bug was reproduced using the built-in Windows 10 Mail client, there is no need to obtain Outlook.
(In reply to fireball from comment #13) I don't have Windows at all :-).
(In reply to Conrad Meyer from comment #14) https://www.microsoft.com/en-us/evalcenter/evaluate-windows-10-enterprise You're welcome.
Created attachment 199148 [details] imapd.core ntlm
(In reply to av from comment #16) Thanks av.