Mailing List Archive

[Bug 3005] New: segfault while SMTP error from remote mail server after RCPT TO handling
https://bugs.exim.org/show_bug.cgi?id=3005

Bug ID: 3005
Summary: segfault while SMTP error from remote mail server
after RCPT TO handling
Product: Exim
Version: 4.94
Hardware: x86-64
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Transports
Assignee: unallocated@exim.org
Reporter: lkazankin@yandex.ru
CC: exim-dev@lists.exim.org

/var/log/messages

May 22 08:57:47 <host> kernel: exim[4587]: segfault at 17c ip 00000000004bca6a
sp 00007fff069acbe0 error 4 in exim-4.94.2-2[400000+115000]

/var/log/exim/exim_paniclog

2023-05-22 08:57:47.158 1pzxEL-0004JR-AX Delivery status for
non-existing-mailbox@example.com: got 0 of 7 bytes (pipeheader) from transport
process 4587 for transport smtp

exim -Mvl 1pzxEL-0004JR-AX

2023-05-22 08:57:32.091 H=mail.example.com [<IP>] SMTP error from remote mail
server after RCPT TO:<non-existing-mailbox@example.com>: 550 5.1.1 Bad
destination mailbox address (non-existing-mailbox@example.com).
2023-05-22 08:57:32.092 H=mail.example.com [<IP>]: SMTP error from remote mail
server after RCPT TO:<non-existing-mailbox@example.com>: 550 5.1.1 Bad
destination mailbox address (non-existing-mailbox@example.com).
2023-05-22 08:57:47.160 non-existing-mailbox@example.com
<non-existing-mailbox@example.com> R=dnslookup T=remote_smtp defer (-1)
DT=0.000s: smtp transport process returned non-zero status 0x008b: terminated
by signal 11
*** Frozen


exim -d+all -M 1pzxEL-0004JR-AX

09:51:50.327 50171 Connecting to mail.example.com [<IP>]:25 ... <IP> in
hosts_try_fastopen? yes (matched "*")
09:51:50.327 50171 TFO mode sendto, no data: EINPROGRESS
09:51:50.327 50171 connected
09:51:50.327 50171 ?considering: $primary_hostname
09:51:50.327 50171 ???expanding: $primary_hostname
09:51:50.327 50171 ??????result: <host>
09:52:05.348 50171 SMTP(Connection timed out)<<
09:52:05.348 50171 SMTP(close)>>
09:52:05.375 50164 reading pipe for subprocess 50171 (not ended yet)
09:52:05.375 50164 expect 7 bytes (pipeheader) from tpt process 50171
09:52:05.375 50164 LOG: MAIN PANIC
09:52:05.375 50164 Delivery status for non-existing-mailbox@example.com: got
0 of 7 bytes (pipeheader) from transport process 50171 for transport smtp
09:52:05.375 50164
09:52:05.375 50164 fresh-exec forking for logfile-open
09:52:05.376 50164 fresh-exec forked for logfile-open: 51706
09:52:05.376 51706 postfork: logfile-open
09:52:05.376 50164 fresh-exec forking for logfile-open
09:52:05.376 50164 fresh-exec forked for logfile-open: 51707
09:52:05.376 51707 postfork: logfile-open
09:52:05.377 50164 remote delivery process 50171 ended: status=008b
09:52:05.377 50164 set_process_info: 50164 delivering 1pzxEL-0004JR-AX
09:52:05.377 50164 post-process non-existing-mailbox@example.com (1)
09:52:05.378 50164 LOG: MAIN
09:52:05.378 50164 == non-existing-mailbox@example.com
<non-existing-mailbox@example.com> R=dnslookup T=remote_smtp defer (-1)
DT=0.000s: smtp transport process returned non-zero status 0x008b: terminated
by signal 11

/etc/centos-release

CentOS Linux release 7.6.1810 (Core)

=======

Hello,
Are there any ideas what else I can check to help fix this segfault?

--
You are receiving this mail because:
You are on the CC list for the bug.

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-dev.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-dev-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: [Bug 3005] New: segfault while SMTP error from remote mail server after RCPT TO handling [ In reply to ]
On Mon, 22 May 2023, Exim Bugzilla via Exim-dev wrote:

> https://bugs.exim.org/show_bug.cgi?id=3005
>
> Bug ID: 3005
> Summary: segfault while SMTP error from remote mail server
> after RCPT TO handling
> Product: Exim
> Version: 4.94
> Hardware: x86-64
> OS: Linux
> Status: NEW
> Severity: bug
> Priority: medium
> Component: Transports
> Assignee: unallocated@exim.org
> Reporter: lkazankin@yandex.ru
> CC: exim-dev@lists.exim.org

I note TFO mode in the debug log.
Which kernel are you using ?
Is the recipient @google/gmail ?

Debian had a similar issue with exim, TCP fastopen (TFO) and Google last year.
The bug and fix ended up being in the kernel.

Also exim 4.94 is not current.
I would upgrade to 4.96 before looking at seg-faults.

> /var/log/messages
>
> May 22 08:57:47 <host> kernel: exim[4587]: segfault at 17c ip 00000000004bca6a
> sp 00007fff069acbe0 error 4 in exim-4.94.2-2[400000+115000]
>
> /var/log/exim/exim_paniclog
>
> 2023-05-22 08:57:47.158 1pzxEL-0004JR-AX Delivery status for
> non-existing-mailbox@example.com: got 0 of 7 bytes (pipeheader) from transport
> process 4587 for transport smtp

> exim -d+all -M 1pzxEL-0004JR-AX
>
> 09:51:50.327 50171 Connecting to mail.example.com [<IP>]:25 ... <IP> in
> hosts_try_fastopen? yes (matched "*")
> 09:51:50.327 50171 TFO mode sendto, no data: EINPROGRESS
> 09:51:50.327 50171 connected
> 09:51:50.327 50171 ?considering: $primary_hostname
> 09:51:50.327 50171 ???expanding: $primary_hostname
> 09:51:50.327 50171 ??????result: <host>
> 09:52:05.348 50171 SMTP(Connection timed out)<<
> 09:52:05.348 50171 SMTP(close)>>
> 09:52:05.375 50164 reading pipe for subprocess 50171 (not ended yet)
> 09:52:05.375 50164 expect 7 bytes (pipeheader) from tpt process 50171
> 09:52:05.375 50164 LOG: MAIN PANIC
> 09:52:05.375 50164 Delivery status for non-existing-mailbox@example.com: got
> 0 of 7 bytes (pipeheader) from transport process 50171 for transport smtp


--
Andrew C. Aitchison Kendal, UK
andrew@aitchison.me.uk

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-dev.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-dev-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/