[bug-mailutils] mailutils memory corruption error

[pete phillips]

Hi

I am having a problem with mailutils 1.0 and 1.1 on Ubuntu 7.04 on my
Asus S1300N laptop. Specifically with the MH utils.

I compile mailutils, including the mh packages and either with or
without gnutls, I get the core dump and back trace as appended below.

Interestingly, if I run them with valgrind:

        valgrind folders

the program runs to completion! I also enclose the output from this
below.  I have a more detailed valgrind log (by running it as per the
ubuntu launchpad site) , but I don't want to clutter up this list if it
is not appropriate.

Now I do not know enough about these things to understand if it is a
problem with the mailutils or the Ubuntu libraries.  Anyway, if the info
below is enough to tell you that it is not mailutils, let me know and I
will stop bothering you.

Many thanks,
Pete

----------output of running folders on its own --------------------------

/usr/local/bin/mu-mh/folder
*** glibc detected *** folders: malloc(): memory corruption: 0x08059e10 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7c24ef3]
/lib/tls/i686/cmov/libc.so.6(__libc_malloc+0x7e)[0xb7c2660e]
/lib/tls/i686/cmov/libc.so.6(vasprintf+0x23)[0xb7c1b7a3]
/lib/tls/i686/cmov/libc.so.6(asprintf+0x2e)[0xb7c0270e]
folders[0x804c0a6]
folders[0x804c51a]
folders[0x804b0cd]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7bd2ebc]
folders[0x804af51]
======= Memory map: ========
08048000-08058000 r-xp 00000000 08:01 5014099    /usr/local/bin/mu-mh/folder
08058000-08059000 rw-p 0000f000 08:01 5014099    /usr/local/bin/mu-mh/folder
08059000-0807a000 rw-p 08059000 00:00 0          [heap]
b7a00000-b7a21000 rw-p b7a00000 00:00 0 
b7a21000-b7b00000 ---p b7a21000 00:00 0 
b7baf000-b7bba000 r-xp 00000000 08:01 868843     /lib/libgcc_s.so.1
b7bba000-b7bbb000 rw-p 0000a000 08:01 868843     /lib/libgcc_s.so.1
b7bbb000-b7bbd000 rw-p b7bbb000 00:00 0 
b7bbd000-b7cf8000 r-xp 00000000 08:01 868634     /lib/tls/i686/cmov/libc-2.5.so
b7cf8000-b7cf9000 r--p 0013b000 08:01 868634     /lib/tls/i686/cmov/libc-2.5.so
b7cf9000-b7cfb000 rw-p 0013c000 08:01 868634     /lib/tls/i686/cmov/libc-2.5.so
b7cfb000-b7cfe000 rw-p b7cfb000 00:00 0 
b7cfe000-b7d11000 r-xp 00000000 08:01 868704     
/lib/tls/i686/cmov/libpthread-2.5.so
b7d11000-b7d13000 rw-p 00013000 08:01 868704     
/lib/tls/i686/cmov/libpthread-2.5.so
b7d13000-b7d15000 rw-p b7d13000 00:00 0 
b7d15000-b7d24000 r-xp 00000000 08:01 868705     
/lib/tls/i686/cmov/libresolv-2.5.so
b7d24000-b7d26000 rw-p 0000f000 08:01 868705     
/lib/tls/i686/cmov/libresolv-2.5.so
b7d26000-b7d28000 rw-p b7d26000 00:00 0 
b7d28000-b7d2d000 r-xp 00000000 08:01 868690     
/lib/tls/i686/cmov/libcrypt-2.5.so
b7d2d000-b7d2f000 rw-p 00004000 08:01 868690     
/lib/tls/i686/cmov/libcrypt-2.5.so
b7d2f000-b7d57000 rw-p b7d2f000 00:00 0 
b7d57000-b7d6a000 r-xp 00000000 08:01 868696     
/lib/tls/i686/cmov/libnsl-2.5.so
b7d6a000-b7d6c000 rw-p 00012000 08:01 868696     
/lib/tls/i686/cmov/libnsl-2.5.so
b7d6c000-b7d6e000 rw-p b7d6c000 00:00 0 
b7d6e000-b7d71000 r-xp 00000000 08:01 4277233    /usr/lib/libgpg-error.so.0.3.0
b7d71000-b7d72000 rw-p 00002000 08:01 4277233    /usr/lib/libgpg-error.so.0.3.0
b7d72000-b7dc1000 r-xp 00000000 08:01 4277240    /usr/lib/libgcrypt.so.11.2.2
b7dc1000-b7dc3000 rw-p 0004e000 08:01 4277240    /usr/lib/libgcrypt.so.11.2.2
b7dc3000-b7dd6000 r-xp 00000000 08:01 4277669    /usr/lib/libz.so.1.2.3
b7dd6000-b7dd7000 rw-p 00012000 08:01 4277669    /usr/lib/libz.so.1.2.3
b7dd7000-b7deb000 r-xp 00000000 08:01 4277245    /usr/lib/libtasn1.so.3.0.6
b7deb000-b7dec000 rw-p 00013000 08:01 4277245    /usr/lib/libtasn1.so.3.0.6
b7dec000-b7e56000 r-xp 00000000 08:01 4282975    /usr/lib/libgnutls.so.13.0.9
b7e56000-b7e5c000 rw-p 0006a000 08:01 4282975    /usr/lib/libgnutls.so.13.0.9
b7e5c000-b7e5d000 rw-p b7e5c000 00:00 0 
b7e6c000-b7ec5000 r-xp 00000000 08:01 4441108    
/usr/local/lib/libmailutils.so.1.0.0
b7ec5000-b7ec8000 rw-p 00058000 08:01 4441108    
/usr/local/lib/libmailutils.so.1.0.0
b7ec8000-b7ecb000 r-xp 00000000 08:01 5980169    
/usr/local/lib/libmu_maildir.so.1.0.0
b7ecb000-b7ecc000 rw-p 00002000 08:01 5980169    
/usr/local/lib/libmu_maildir.so.1.0.0
b7ecc000-b7ed5000 r-xp 00000000 08:01 4442174    
/usr/local/lib/libmu_nntp.so.1.0.0
b7ed5000-b7ed6000 rw-p 00008000 08:01 4442174    
/usr/local/lib/libmu_nntp.so.1.0.0
b7ed6000-b7ed8000 r-xp 00000000 08:01 5980164    
/usr/local/lib/libmu_mh.so.1.0.0
b7ed8000-b7ed9000 rw-p 00001000 08:01 5980164    
/usr/local/lib/libmu_mh.so.1.0.0
b7ed9000-b7edd000 r-xp 00000000 08:01 4442152    
/usr/local/lib/libmuauth.so.1.0.0
b7edd000-b7ede000 rw-p 00003000 08:01 4442152    
/usr/local/lib/libmuauth.so.1.0.0
b7ede000-b7ee9000 r-xp 00000000 08:01 4442169    
/usr/local/lib/libmu_pop.so.1.0.0
b7ee9000-b7eea000 rw-p 0000a000 08:01 4442169    
/usr/local/lib/libmu_pop.so.1.0.0
b7eea000-b7eeb000 rw-p b7eea000 00:00 0 
b7eeb000-b7ef8000 r-xp 00000000 08:01 4442179    
/usr/local/lib/libmu_imap.so.1.0.0
b7ef8000-b7ef9000 rw-p 0000c000 08:[1]    7703 abort (core dumped)  folders

-------------- running folders with valgrind --------------------------

valgrind /usr/bin/mu-mh/folders==8632== Memcheck, a memory error detector.
==8632== Copyright (C) 2002-2006, and GNU GPL'd, by Julian Seward et al.
==8632== Using LibVEX rev 1658, a library for dynamic binary translation.
==8632== Copyright (C) 2004-2006, and GNU GPL'd, by OpenWorks LLP.
==8632== Using valgrind-3.2.1-Debian, a dynamic binary instrumentation 
framework.
==8632== Copyright (C) 2000-2006, and GNU GPL'd, by Julian Seward et al.
==8632== For more details, rerun with: -v
==8632== 
==8632== Invalid write of size 1
==8632==    at 0x804D361: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804DBBC: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804DC4A: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804FADE: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804CDED: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804B043: (within /usr/bin/mu-mh/folder)
==8632==    by 0x455AEBB: (below main) (in /lib/tls/i686/cmov/libc-2.5.so)
==8632==  Address 0x46AE008 is 0 bytes after a block of size 32 alloc'd
==8632==    at 0x4021620: malloc (vg_replace_malloc.c:149)
==8632==    by 0x804D2BD: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804DBBC: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804DC4A: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804FADE: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804CDED: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804B043: (within /usr/bin/mu-mh/folder)
==8632==    by 0x455AEBB: (below main) (in /lib/tls/i686/cmov/libc-2.5.so)
==8632== 
==8632== Invalid write of size 1
==8632==    at 0x804D361: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C1A0: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C4D9: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804B08C: (within /usr/bin/mu-mh/folder)
==8632==    by 0x455AEBB: (below main) (in /lib/tls/i686/cmov/libc-2.5.so)
==8632==  Address 0x46CA60C is 0 bytes after a block of size 12 alloc'd
==8632==    at 0x4021620: malloc (vg_replace_malloc.c:149)
==8632==    by 0x804D2BD: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C1A0: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C4D9: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804B08C: (within /usr/bin/mu-mh/folder)
==8632==    by 0x455AEBB: (below main) (in /lib/tls/i686/cmov/libc-2.5.so)
==8632== 
==8632== Invalid write of size 1
==8632==    at 0x804D361: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C1A0: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C236: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C4D9: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804B08C: (within /usr/bin/mu-mh/folder)
==8632==    by 0x455AEBB: (below main) (in /lib/tls/i686/cmov/libc-2.5.so)
==8632==  Address 0x46F934F is 0 bytes after a block of size 15 alloc'd
==8632==    at 0x4021620: malloc (vg_replace_malloc.c:149)
==8632==    by 0x804D2BD: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C1A0: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C236: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804C4D9: (within /usr/bin/mu-mh/folder)
==8632==    by 0x804B08C: (within /usr/bin/mu-mh/folder)
==8632==    by 0x455AEBB: (below main) (in /lib/tls/i686/cmov/libc-2.5.so)
Folder                  # of messages     (  range  )  cur msg   (other files)
              Accounts  has no messages;           (others).
                   BSI  has    4 messages (   1-   4); cur=   2; (others).
             Computing  has no messages;           (others).
              Contacts  has no messages;           (others).

                [STUFF DELETED]

                  SPAM  has  565 messages (   1- 571); cur= 570.
              Security  has    7 messages (   1-   7).
              Services  has no messages;           (others).
           SuspectMail  has    1 message  (   1-   1); cur=   1.
                 Trust  has  480 messages (   1- 480); cur= 421; (others).
                   WHS  has  333 messages (   1- 333); cur= 331; (others).
          WWW-comments  has  217 messages (   1- 217); cur= 156.
                zaurus  has  940 messages (   1- 940); cur= 940.
                  zope  has    3 messages (   1-   3); cur=   1.

                   TOTAL=17750 messages in  111 folders
==8632== 
==8632== ERROR SUMMARY: 66 errors from 3 contexts (suppressed: 69 from 1)
==8632== malloc/free: in use at exit: 650,793 bytes in 21,022 blocks.
==8632== malloc/free: 45,995 allocs, 24,973 frees, 13,050,862 bytes allocated.
==8632== For counts of detected errors, rerun with: -v
==8632== searching for pointers to 21,022 not-freed blocks.
==8632== checked 740,404 bytes.
==8632== 
==8632== LEAK SUMMARY:
==8632==    definitely lost: 640,753 bytes in 20,822 blocks.
==8632==      possibly lost: 3,093 bytes in 125 blocks.
==8632==    still reachable: 6,947 bytes in 75 blocks.
==8632==         suppressed: 0 bytes in 0 blocks.
==8632== Use --leak-check=full to see details of leaked memory.