Segfault when tagging results of to: query

Segfault when tagging results of to: query

[Hugh Williams]

When trying to tag all messages to a particular address using the query
`notmuch tag +College to:example@example.com` I get a segfault. The
backtrace from gdb is shown below.

```
#0  0x00007ffff78deee4 in  () at /usr/lib/libxapian.so.30
#1  0x00007ffff78e26fe in  () at /usr/lib/libxapian.so.30
#2  0x00007ffff78e90a2 in  () at /usr/lib/libxapian.so.30
#3  0x00007ffff78081f8 in Xapian::Enquire::Internal::get_mset(unsigned int, unsigned int, unsigned int, Xapian::RSet const*, Xapian::MatchDecider const*) const () at /usr/lib/libxapian.so.30
#4  0x00007ffff7808466 in Xapian::Enquire::get_mset(unsigned int, unsigned int, unsigned int, Xapian::RSet const*, Xapian::MatchDecider const*) const () at /usr/lib/libxapian.so.30
#5  0x00007ffff7fb69ca in  () at /usr/lib/libnotmuch.so.5
#6  0x000055555556bca2 in  ()
#7  0x000055555556c21a in  ()
#8  0x000055555555c12c in  ()
#9  0x00007ffff79c9153 in __libc_start_main () at /usr/lib/libc.so.6
#10 0x000055555555c2ee in  ()
```

Thanks,

Hugh

Re: Segfault when tagging results of to: query

[Suvayu Ali]

Hi,

On Mon, Nov 11, 2019 at 8:54 PM Hugh Williams <hugh@hmlw.uk> wrote:
>
> When trying to tag all messages to a particular address using the query
> `notmuch tag +College to:example@example.com` I get a segfault. The
> backtrace from gdb is shown below.
>
> ```
> #0  0x00007ffff78deee4 in  () at /usr/lib/libxapian.so.30
> #1  0x00007ffff78e26fe in  () at /usr/lib/libxapian.so.30
> #2  0x00007ffff78e90a2 in  () at /usr/lib/libxapian.so.30
> #3  0x00007ffff78081f8 in Xapian::Enquire::Internal::get_mset(unsigned int, unsigned int, unsigned int, Xapian::RSet const*, Xapian::MatchDecider const*) const () at /usr/lib/libxapian.so.30
> #4  0x00007ffff7808466 in Xapian::Enquire::get_mset(unsigned int, unsigned int, unsigned int, Xapian::RSet const*, Xapian::MatchDecider const*) const () at /usr/lib/libxapian.so.30
> #5  0x00007ffff7fb69ca in  () at /usr/lib/libnotmuch.so.5
> #6  0x000055555556bca2 in  ()
> #7  0x000055555556c21a in  ()
> #8  0x000055555555c12c in  ()
> #9  0x00007ffff79c9153 in __libc_start_main () at /usr/lib/libc.so.6
> #10 0x000055555555c2ee in  ()
> ```

I see the same issue as well!  I'm on Fedora 30, using the package
available in the repos.
5.1.20-300.fc30.x86_64
notmuch-0.29.1-1.fc30.x86_64

Here's an example stack trace:

Stack trace of thread 26982:
#0  0x00007f6a3f4c42b8 _ZNK14AndNotPostList10get_weightEv (libxapian.so.30)
#1  0x00007f6a3f4c7d06 _ZNK14SelectPostList10get_weightEv (libxapian.so.30)
#2  0x00007f6a3f4cf62a
_ZN10MultiMatch8get_msetEjjjRN6Xapian4MSetERNS0_6Weight8InternalEPKNS0_12MatchDeciderEPKNS0_8KeyMakerE
(libxapian.so.30)
#3  0x00007f6a3f3e50e6
_ZNK6Xapian7Enquire8Internal8get_msetEjjjPKNS_4RSetEPKNS_12MatchDeciderE
(libxapian.so.30)
#4  0x00007f6a3f3e5359
_ZNK6Xapian7Enquire8get_msetEjjjPKNS_4RSetEPKNS_12MatchDeciderE
(libxapian.so.30)
#5  0x00007f6a3f9a6da0 n/a (libnotmuch.so.5)
#6  0x0000000000419468 tag_query (notmuch)
#7  0x00000000004199d2 notmuch_tag_command (notmuch)
#8  0x0000000000409efb main (notmuch)
#9  0x00007f6a3f5b2f43 __libc_start_main (libc.so.6)
#10 0x000000000040a0ae _start (notmuch)

Query that triggered the segfault is: notmuch tag +fedora --
path:Gmail/** and to:lists.fedoraproject.org and is:new

-- 
Suvayu

Open source is the future. It sets us free.

Re: Segfault when tagging results of to: query

[Reto]

That's most probably xapians fault.
Xapian 1.4.13 has a bug in it, there's a patch available but no new version
has been released yet.

You can find the issue here: https://trac.xapian.org/ticket/796#no1