Log snippet:

2019-08-09 14:58:27.60818 #13077(controller) <7bbcea>; csession; rspamd_message_parse: loaded message; id: <0e35d16962499c6f4cb345161dc9f20e2dd14b4186@posag.de>; queue-id: <undef>; size: 2336; checksum: <d0f2fc3985ff4fc585be8d8ebc2389bc>
2019-08-09 14:58:27.60832 #13077(controller) <7bbcea>; lua; settings.lua:358: check for settings
2019-08-09 14:58:27.60994 #13077(controller) <7bbcea>; csession; rspamd_mime_part_detect_language: detected part language: it
2019-08-09 14:58:27.62376 #13077(controller) rspamd_crash_sig_handler: caught fatal signal 11(Segmentation fault), pid: 13077, trace: 
2019-08-09 14:58:27.62420 #13077(controller) rspamd_print_crash: 0: 00007F64A19BA676: strlen()+0x26
2019-08-09 14:58:27.62447 #13077(controller) rspamd_print_crash: 1: 00005629E7071806: redisvFormatCommand()+0x8a6
2019-08-09 14:58:27.62470 #13077(controller) rspamd_print_crash: 2: 00005629E7071D0F: redisvAsyncCommand()+0x2f
2019-08-09 14:58:27.62490 #13077(controller) rspamd_print_crash: 3: 00005629E7071DEA: redisAsyncCommand()+0x8a
2019-08-09 14:58:27.62511 #13077(controller) rspamd_print_crash: 4: 00005629E713E636: rspamd_redis_process_tokens()+0xa6
2019-08-09 14:58:27.62532 #13077(controller) rspamd_print_crash: 5: 00005629E709F92F: rspamd_stat_classify()+0x40f
2019-08-09 14:58:27.62552 #13077(controller) rspamd_print_crash: 6: 00005629E7131746: rspamd_task_process()+0x4b6
2019-08-09 14:58:27.62573 #13077(controller) rspamd_print_crash: 7: 00005629E71314CD: rspamd_task_process()+0x23d
2019-08-09 14:58:27.62592 #13077(controller) rspamd_print_crash: 8: 00005629E71314CD: rspamd_task_process()+0x23d
2019-08-09 14:58:27.62612 #13077(controller) rspamd_print_crash: 9: 00005629E71B5913: init_controller_worker()+0x693
2019-08-09 14:58:27.62634 #13077(controller) rspamd_print_crash: 10: 00005629E70BB795: rspamd_session_pending()+0x55
2019-08-09 14:58:27.62653 #13077(controller) rspamd_print_crash: 11: 00005629E70C1B22: rspamd_session_remove_event_full()+0x222
2019-08-09 14:58:27.62672 #13077(controller) rspamd_print_crash: 12: 00005629E701968C: rdns_process_read()+0x3ec
2019-08-09 14:58:27.62704 #13077(controller) rspamd_print_crash: 13: 00007F64A0F645A0: event_base_loop()+0x6a0
2019-08-09 14:58:27.62725 #13077(controller) rspamd_print_crash: 14: 00005629E71B4B65: start_controller_worker()+0x6c5
2019-08-09 14:58:27.62745 #13077(controller) rspamd_print_crash: 15: 00005629E70A50D0: rspamd_fork_worker()+0x2b0
2019-08-09 14:58:27.62765 #13077(controller) rspamd_print_crash: 16: 00005629E7181363: rspamd_task_timeout()+0xba3
2019-08-09 14:58:27.62784 #13077(controller) rspamd_print_crash: 17: 00005629E718163E: rspamd_task_timeout()+0xe7e
2019-08-09 14:58:27.62803 #13077(controller) rspamd_print_crash: 18: 00005629E6FF953A: main()+0x9fa
2019-08-09 14:58:27.62834 #13077(controller) rspamd_print_crash: 19: 00007F64A195A2E1: __libc_start_main()+0xf1
2019-08-09 14:58:27.62853 #13077(controller) rspamd_print_crash: 20: 00005629E6FFA38A: _start()+0x2a
2019-08-09 14:58:27.62888 #13077(controller) rspamd_print_crash: 21: 0000000000000000: <unknown>
2019-08-09 14:58:27.69960 #13073(main) <f8e78f>; main; rspamd_cld_handler: catch SIGCHLD signal, finding terminated workers
2019-08-09 14:58:27.69985 #13073(main) <f8e78f>; main; rspamd_cld_handler: controller process 13077 terminated abnormally by signal: Segmentation fault and created core file



GDB output:

GNU gdb (Debian 7.12-6) 7.12.0.20161007-git
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/bin/rspamd...Reading symbols from /usr/lib/debug/.build-id/5f/20bdac35679dd02e7d851afcb3104d339345c4.debug...done.
done.
[New LWP 13077]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `rspamd: controller process (0.0.0.0:11334)   '.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  strlen () at ../sysdeps/x86_64/strlen.S:106
106	../sysdeps/x86_64/strlen.S: No such file or directory.
(gdb) bt full
#0  strlen () at ../sysdeps/x86_64/strlen.S:106
No locals.
#1  0x00005629e7071806 in redisvFormatCommand (target=target@entry=0x7fff53a5cf00, format=<optimized out>, ap=ap@entry=0x7fff53a5cf30) at ./contrib/hiredis/hiredis.c:262
        size = <optimized out>
        c = 0x5629e789eafb "%s %s"
        cmd = 0x0
        pos = <optimized out>
        curarg = 0x7f649b532448 ""
        newarg = 0x7f649b532448 ""
        touched = <optimized out>
        curargv = 0x7f649b570628
        newargv = <optimized out>
        argc = 1
        totlen = 10
        error_type = 0
        j = <optimized out>
        __PRETTY_FUNCTION__ = "redisvFormatCommand"
#2  0x00005629e7071d0f in redisvAsyncCommand (ac=0x7f649cd0a980, fn=0x5629e713e8c0 <rspamd_redis_connected>, privdata=0x7f64999e55f0, format=<optimized out>, ap=ap@entry=0x7fff53a5cf30)
    at ./contrib/hiredis/async.c:657
        cmd = 0xb6 <error: Cannot access memory at address 0xb6>
        len = <optimized out>
        status = <optimized out>
#3  0x00005629e7071dea in redisAsyncCommand (ac=<optimized out>, fn=<optimized out>, privdata=<optimized out>, format=<optimized out>) at ./contrib/hiredis/async.c:672
        ap = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7fff53a5d010, reg_save_area = 0x7fff53a5cf50}}
        status = <optimized out>
---Type <return> to continue, or q <return> to quit---
#4  0x00005629e713e636 in rspamd_redis_process_tokens (task=<optimized out>, tokens=<optimized out>, id=<optimized out>, p=<optimized out>, p=<optimized out>, id=<optimized out>, tokens=<optimized out>, 
    task=<optimized out>) at ./src/libstat/backends/redis_backend.c:1596
        tv = {tv_sec = 140070080310480, tv_usec = 140070080310344}
        ret = <optimized out>
        learned_key = <optimized out>
        query = <optimized out>
        p = 0x7f64999e55f0
        id = 0
        tokens = 0x7f649b4af100
        task = 0x7f649cca6e80
        rt = 0x7f64999e55f0
        learned_key = 0x5629e78b0a5e "learns"
        __func__ = "rspamd_redis_process_tokens"
#5  0x00005629e709f92f in rspamd_stat_backends_process.isra.0 (task=0x7f649cca6e80) at ./src/libstat/stat_process.c:269
        i = 0
        st = <optimized out>
        cl = <optimized out>
        bk_run = <optimized out>
#6  rspamd_stat_classify (task=0x7f649cca6e80, L=<optimized out>, stage=128, err=<optimized out>) at ./src/libstat/stat_process.c:435
        st_ctx = 0x7f649b178480
        __func__ = "rspamd_stat_classify"
#7  0x00005629e7131746 in rspamd_task_process (task=task@entry=0x7f649cca6e80, stages=stages@entry=131071) at ./src/libserver/task.c:783
        ret = 1
        stat_error = 0x0
        __func__ = "rspamd_task_process"
---Type <return> to continue, or q <return> to quit---
#8  0x00005629e71314cd in rspamd_task_process (task=task@entry=0x7f649cca6e80, stages=stages@entry=131071) at ./src/libserver/task.c:888
        ret = <optimized out>
        stat_error = 0x0
        __func__ = "rspamd_task_process"
#9  0x00005629e71314cd in rspamd_task_process (task=0x7f649cca6e80, stages=131071) at ./src/libserver/task.c:888
        ret = <optimized out>
        stat_error = 0x0
        __func__ = "rspamd_task_process"
#10 0x00005629e71b5913 in rspamd_controller_check_fin_task (ud=<optimized out>, ud=<optimized out>) at ./src/controller.c:1968
        ud = 0x7f649cca6e80
        task = 0x7f649cca6e80
        conn_ent = <optimized out>
        __func__ = "rspamd_controller_check_fin_task"
#11 0x00005629e70bb795 in rspamd_session_pending (session=<optimized out>, session=<optimized out>) at ./src/libserver/events.c:304
        __func__ = "rspamd_session_pending"
#12 0x00005629e70c1b22 in rspamd_session_remove_event_full (session=<optimized out>, fin=<optimized out>, ud=<optimized out>, loc=<optimized out>, loc=<optimized out>, ud=<optimized out>, fin=<optimized out>, 
    session=<optimized out>) at ./src/libserver/events.c:244
        search_ev = {subsystem = 0x0, loc = 0x5629e7017190 <rdns_request_reply_cmp+368> "\205\300u\234M\211\360L+D$\020H\213D$\030I\203\300\004L\211@PH\203\304(I\215G\004[]A\\A]A^A_\303\017\037@", 
          fin = 0x5629e70c4c60 <rspamd_dns_fin_cb>, user_data = 0x7f6499a09360}
        found_ev = <optimized out>
        loc = 0x5629e788fe50 "/rspamd-1.8.3/src/libserver/dns.c:109"
        ud = 0x7f6499a09360
        fin = 0x5629e70c4c60 <rspamd_dns_fin_cb>
        session = 0x7f6499a0d090
        __func__ = "rspamd_session_remove_event_full"
---Type <return> to continue, or q <return> to quit---
#13 0x00005629e701968c in rdns_process_read (fd=<optimized out>, arg=<optimized out>) at ./contrib/librdns/resolver.c:281
        ioc = <optimized out>
        resolver = <optimized out>
        req = 0x7f649af34800
        r = <optimized out>
        rep = 0x7f6499a1b6a0
        in = "a\247\201\202\000\001\000\000\000\000\000\001 xym1xs49hw3uy5bmqparj6cq6jc6398k\005uribl\006rspamd\003com\000\000\001\000\001\000\000)\020\000\000\000\000\000\000\000ster\300<q\273)y\000\000\016\020\000\000\002X\000\006\227\200\000\000\000\001\000\000)\020\000\000\000\000\000\000\000S\377\177\000\000:\322\001\347)V\000\000\000\000\000\000\000\000\360?:\322\001\347\005\000\000\000\200\207\027\233d\177\000\000\061\000\000\000d\177\000\000\220ӥS\377\177\000\000\002\000\000\000\061\000\000\000\200\207\027\233d\177\000\000\061\000\000\000\000\000\000\000\001\000\000\000d\177\000\000\230"...
#14 0x00007f64a0f645a0 in event_base_loop () from /usr/lib/x86_64-linux-gnu/libevent-2.0.so.5
No symbol table info available.
#15 0x00005629e71b4b65 in start_controller_worker (worker=0x7f649b615ac0) at ./src/controller.c:3901
        ctx = 0x7f649c00ce70
        mctx = <optimized out>
        iter = {dummy1 = 0x7f649cc4b520, dummy2 = 0x7f64a278e399 <__libc_fcntl+57>, dummy3 = 0x7fff53b5ec18 <clock_gettime+536>, dummy4 = 8, dummy5 = 32767, dummy6 = 0x200000003}
        key = 0x5629e7878acc
        value = 0x7f6499951040
        i = <optimized out>
        cache = <optimized out>
        stv = {tv_sec = 60, tv_usec = 0}
        m = <optimized out>
        __func__ = "start_controller_worker"
#16 0x00005629e70a50d0 in rspamd_fork_worker (rspamd_main=0x7f649cc67080, cf=0x7f649cda4c00, index=3, ev_base=<optimized out>) at ./src/libserver/worker_util.c:688
        wrk = 0x7f649b615ac0
        rc = <optimized out>
---Type <return> to continue, or q <return> to quit---
        rlim = {rlim_cur = 104857600, rlim_max = 104857600}
        __func__ = "rspamd_fork_worker"
#17 0x00005629e7181363 in spawn_worker_type (rspamd_main=0x7f649cc67080, ev_base=0x7f649cca6c00, cf=0x7f649cda4c00) at ./src/rspamd.c:539
        i = 3
        __func__ = "spawn_worker_type"
#18 0x00005629e718163e in spawn_workers (rspamd_main=0x7f649cc67080, ev_base=0x7f649cca6c00) at ./src/rspamd.c:632
        cur = <optimized out>
        ls = <optimized out>
        cf = <optimized out>
        p = <optimized out>
        bcf = <optimized out>
        listen_ok = <optimized out>
        seen_mandatory_workers = 0x7f649b4ac520
        cw = <optimized out>
        wrk = <optimized out>
        i = <optimized out>
        __func__ = "spawn_workers"
#19 0x00005629e6ff953a in main (argc=<optimized out>, argv=<optimized out>, env=<optimized out>) at ./src/rspamd.c:1485
        i = <optimized out>
        res = 0
        signals = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {0 <repeats 16 times>}}, sa_flags = 0, sa_restorer = 0x0}
        sigpipe_act = {__sigaction_handler = {sa_handler = 0x1, sa_sigaction = 0x1}, sa_mask = {__val = {4096, 0 <repeats 15 times>}}, sa_flags = 0, sa_restorer = 0x0}
        pworker = <optimized out>
        type = <optimized out>
        control_addr = 0x7f649afe26d0
---Type <return> to continue, or q <return> to quit---
        ev_base = 0x7f649cca6c00
        term_ev = {ev_active_next = {tqe_next = 0x0, tqe_prev = 0x0}, ev_next = {tqe_next = 0x7fff53a5e900, tqe_prev = 0x7f649cca6d60}, ev_timeout_pos = {ev_next_with_common_timeout = {tqe_next = 0xffffffff, 
              tqe_prev = 0x0}, min_heap_idx = -1}, ev_fd = 15, ev_base = 0x7f649cca6c00, _ev = {ev_io = {ev_io_next = {tqe_next = 0x0, tqe_prev = 0x7f649b532fe0}, ev_timeout = {tv_sec = -4609434218613702656, 
                tv_usec = 0}}, ev_signal = {ev_signal_next = {tqe_next = 0x0, tqe_prev = 0x7f649b532fe0}, ev_ncalls = 0, ev_pncalls = 0x0}}, ev_events = 24, ev_res = 0, ev_flags = 128, ev_pri = 0 '\000', 
          ev_closure = 1 '\001', ev_timeout = {tv_sec = 0, tv_usec = 0}, ev_callback = 0x5629e7180ce0 <rspamd_term_handler>, ev_arg = 0x7f649cc67080}
        int_ev = {ev_active_next = {tqe_next = 0x7fff53a5eca0, tqe_prev = 0x7fff53a5ec78}, ev_next = {tqe_next = 0x7fff53a5e7e0, tqe_prev = 0x7f649cca6d60}, ev_timeout_pos = {ev_next_with_common_timeout = {
              tqe_next = 0xffffffff, tqe_prev = 0x0}, min_heap_idx = -1}, ev_fd = 2, ev_base = 0x7f649cca6c00, _ev = {ev_io = {ev_io_next = {tqe_next = 0x0, tqe_prev = 0x7f649ce2b050}, ev_timeout = {
                tv_sec = 0, tv_usec = 0}}, ev_signal = {ev_signal_next = {tqe_next = 0x0, tqe_prev = 0x7f649ce2b050}, ev_ncalls = 0, ev_pncalls = 0x0}}, ev_events = 24, ev_res = 0, ev_flags = 128, 
          ev_pri = 0 '\000', ev_closure = 1 '\001', ev_timeout = {tv_sec = 0, tv_usec = 0}, ev_callback = 0x5629e7180ce0 <rspamd_term_handler>, ev_arg = 0x7f649cc67080}
        cld_ev = {ev_active_next = {tqe_next = 0x0, tqe_prev = 0x0}, ev_next = {tqe_next = 0x7fff53a5e750, tqe_prev = 0x7f649cca6d60}, ev_timeout_pos = {ev_next_with_common_timeout = {
              tqe_next = 0x5629ffffffff, tqe_prev = 0x7fff53a5eca0}, min_heap_idx = -1}, ev_fd = 17, ev_base = 0x7f649cca6c00, _ev = {ev_io = {ev_io_next = {tqe_next = 0x0, tqe_prev = 0x7f649ce2b040}, 
              ev_timeout = {tv_sec = 0, tv_usec = 0}}, ev_signal = {ev_signal_next = {tqe_next = 0x0, tqe_prev = 0x7f649ce2b040}, ev_ncalls = 0, ev_pncalls = 0x0}}, ev_events = 24, ev_res = 0, ev_flags = 128, 
          ev_pri = 0 '\000', ev_closure = 1 '\001', ev_timeout = {tv_sec = 140070193867160, tv_usec = 140734596770608}, ev_callback = 0x5629e7180d40 <rspamd_cld_handler>, ev_arg = 0x7f649cc67080}
        hup_ev = {ev_active_next = {tqe_next = 0x7fff53a5e820, tqe_prev = 0x100000011}, ev_next = {tqe_next = 0x7fff53a5e870, tqe_prev = 0x7f649cca6d60}, ev_timeout_pos = {ev_next_with_common_timeout = {
              tqe_next = 0x5629ffffffff, tqe_prev = 0xb889e1b}, min_heap_idx = -1}, ev_fd = 1, ev_base = 0x7f649cca6c00, _ev = {ev_io = {ev_io_next = {tqe_next = 0x0, tqe_prev = 0x7f649b532fd0}, ev_timeout = {
                tv_sec = 0, tv_usec = 0}}, ev_signal = {ev_signal_next = {tqe_next = 0x0, tqe_prev = 0x7f649b532fd0}, ev_ncalls = 0, ev_pncalls = 0x0}}, ev_events = 24, ev_res = 0, ev_flags = 128, 
          ev_pri = 0 '\000', ev_closure = 1 '\001', ev_timeout = {tv_sec = 0, tv_usec = 0}, ev_callback = 0x5629e7181c70 <rspamd_hup_handler>, ev_arg = 0x7f649cc67080}
        usr1_ev = {ev_active_next = {tqe_next = 0x7fff53a5e8a8, tqe_prev = 0x7f64a2df74c8}, ev_next = {tqe_next = 0x7f649b615628, tqe_prev = 0x7f649cca6d60}, ev_timeout_pos = {ev_next_with_common_timeout = {
              tqe_next = 0xffffffff, tqe_prev = 0x0}, min_heap_idx = -1}, ev_fd = 10, ev_base = 0x7f649cca6c00, _ev = {ev_io = {ev_io_next = {tqe_next = 0x0, tqe_prev = 0x7f649b532ff0}, ev_timeout = {
                tv_sec = 0, tv_usec = 0}}, ev_signal = {ev_signal_next = {tqe_next = 0x0, tqe_prev = 0x7f649b532ff0}, ev_ncalls = 0, ev_pncalls = 0x0}}, ev_events = 24, ev_res = 0, ev_flags = 128, 
          ev_pri = 0 '\000', ev_closure = 1 '\001', ev_timeout = {tv_sec = 140070206009712, tv_usec = 140070206009712}, ev_callback = 0x5629e7181170 <rspamd_usr1_handler>, ev_arg = 0x7f649cc67080}
        control_ev = {ev_active_next = {tqe_next = 0x7fff53a5e744, tqe_prev = 0x7f64a2bdb46b <do_lookup_x+347>}, ev_next = {tqe_next = 0x5629e6f7b224, tqe_prev = 0x5629e6f68868}, ev_timeout_pos = {
            ev_next_with_common_timeout = {tqe_next = 0x7fff53a5e748, tqe_prev = 0xb889e1b}, min_heap_idx = 1403381576}, ev_fd = 3023480, ev_base = 0x7f64a2262f98, _ev = {ev_io = {ev_io_next = {
                tqe_next = 0x7fff53a5e820, tqe_prev = 0x7f64a2260730}, ev_timeout = {tv_sec = 140734596769604, tv_usec = 140734596769808}}, ev_signal = {ev_signal_next = {tqe_next = 0x7fff53a5e820, 
                tqe_prev = 0x7f64a2260730}, ev_ncalls = -6332, ev_pncalls = 0x7fff53a5e810}}, ev_events = 16592, ev_res = -23842, ev_flags = 32612, ev_pri = 0 '\000', ev_closure = 0 '\000', ev_timeout = {
---Type <return> to continue, or q <return> to quit---
            tv_sec = 25, tv_usec = 1403381888}, ev_callback = 0x0, ev_arg = 0x1}
        term_tv = {tv_sec = 140070205968104, tv_usec = 140734596769608}
        skip_pid = 1
        valgrind_mode = 0
        __func__ = "main"