On Tue, 2008-01-15 at 14:51 +0100, Wolfram Schlich wrote: > this happens since a few days on a Gentoo hardened system using a > grsecurity enabled kernel running Dovecot 1.0.10, only to 2 of 10 > users though: > > --8<-- > > kernel: grsec: From 192.168.0.1: denied resource overstep by \ > requesting 537325568 for RLIMIT_AS against limit 536870912 \
If it's trying to allocate 500MB of memory, there's a bug somewhere. Could you get gdb backtrace of this? The attached patch changes Dovecot to call abort() so it should write core files to user's home dir. See http://dovecot.org/bugreport.html
diff -r 05b7ea05c426 src/lib/mempool-alloconly.c --- a/src/lib/mempool-alloconly.c Sat Jan 19 08:29:04 2008 +0200 +++ b/src/lib/mempool-alloconly.c Sun Jan 20 09:48:05 2008 +0200 @@ -206,7 +206,7 @@ static void block_alloc(struct alloconly block = GC_malloc(size); #endif if (block == NULL) - i_fatal_status(FATAL_OUTOFMEM, "block_alloc(): Out of memory"); + i_panic(FATAL_OUTOFMEM, "block_alloc(): Out of memory"); block->prev = apool->block; apool->block = block;
signature.asc
Description: This is a digitally signed message part
