d1808f883d0da0e9740616695618924e8278fce1 |
|
01-Feb-2016 |
Timo Sirainen <timo.sirainen@dovecot.fi> |
sdbox: Failing after saved mails' UIDs were already assigned caused unlink()ing garbage
Mainly with dsync when it fails, the transaction is still committed and
mails are given UIDs. If the transaction commit still fails, it attempts to
rollback the saved mails by unlink()ing them, but at that point the path
pointed to an already freed memory. This caused unlink() errors with some
garbage strings as the path (and hopefully no actually valid paths).
The easiest way to reproduce this was to fill up the filesystem with dsync. |