imapd crashing

Good afternoon.

Our version is:
imta version
Sun Java(tm) System Messaging Server 6.3-1.04 (built May  9 2007; 32bit)
libimta.so 6.3-1.04 (built 00:41:36, May  9 2007; 32bit)
SunOS mbox 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Fire-V490


I have opened a ticket because our imapd keeps coring.
While waiting for a callback from sun, I was wondering if anyone, on this list, 
had an idea on the reason of the crashes.

I send a pstack

I have noticed that a particular UA was causing these crashes.
I put the telemetry on for this user and I have catched the ip packets with 
ethereal.
But unfortunately, I can not put these files on this list.


pstack imapd.mbox.4799.core
core 'imapd.mbox.4799.core' of 4799:    /opt/SUNWmsgsr/lib/imapd -0 -d 0 -D 1
-----------------  lwp# 1 / thread# 1  --------------------
fd54017c ___nanosleep (ffbff1ac, 0, fd56cbc0, fe372000, 5756dc, 0) + 8
fe6bc490 GDispCx_DispatchLoop (575664, 1c740, 1, 1, 1, 1) + 108
0001ef70 imap_main (a0d88, 185, b81665, 0, 80808080, 1010101) + 1e30
ff07bbe8 service_start (4ef07, 4ef1c, 6, ffbffafc, 1d140, 1c6a8) + 390
0001f244 main     (6, ffbffafc, ffbffb18, 64400, fe370380, fe3703c0) + 4c
00018de8 _start   (0, 0, 0, 0, 0, 0) + 108
-----------------  lwp# 2 / thread# 2  --------------------
fd53fe40 __lwp_park (46a130, 8c198, fcb7bcd0, 1, 0, 0) + 14
fd539ec8 cond_wait_queue (46a130, 8c198, fcb7bcd0, 0, 0, 0) + 28
fd53a340 cond_wait_common (46a130, 8c198, fcb7bcd0, 0, 0, 0) + 298
fd53a4d8 _cond_timedwait (46a130, 8c198, fcb7be60, fffffff8, ffffffe0, 0) + 34
fd53a5cc cond_timedwait (46a130, 8c198, fcb7be60, 0, 0, c350) + 14
fd53a60c pthread_cond_timedwait (46a130, 8c198, fcb7be60, 4714aae0, 0, 
353a7ed0) + c
fe1d7af4 PR_WaitCondVar (46a128, 1e, 272220, 0, 353a7ed0, 0) + 170
fe1ded0c PR_Sleep (2dc6c0, 1, fe1fa900, fe1f8518, 5fc, 400) + 94
fe4ced98 LockPoller (fe4eefb0, 272220, 51, fcc01748, 4f, 0) + 30
fe1de024 _pt_root (272220, fe4ced68, 400, fe1f6ba4, 0, fe1f891c) + d4
fd53fd9c _lwp_start (0, 0, 0, 0, 0, 0)
-----------------  lwp# 3 / thread# 3  --------------------
fd540318 _so_accept (0, 4a0660, 0, ffffffff, 0, 1) + 8
fe1de024 _pt_root (4a0660, 1c740, 400, fe1f6ba4, 1, fe1f891c) + d4
fd53fd9c _lwp_start (0, 0, 0, 0, 0, 0)
-----------------  lwp# 4 / thread# 4  --------------------
fd540318 _so_accept (1, 4a06e8, 0, ffffffff, 0, 1) + 8
fe1de024 _pt_root (4a06e8, 1c740, 400, fe1f6ba4, 1, fe1f891c) + d4
fd53fd9c _lwp_start (0, 0, 0, 0, 0, 0)
-----------------  lwp# 6 / thread# 6  --------------------
fd53fe40 __lwp_park (575764, 5756d4, fbb53e50, 1, 0, 0) + 14
fd539ec8 cond_wait_queue (575764, 5756d4, fbb53e50, 0, 0, 0) + 28
fd53a340 cond_wait_common (575764, 5756d4, fbb53e50, 0, 0, 0) + 298
fd53a4d8 _cond_timedwait (575764, 5756d4, fbb53f7c, 0, 0, 0) + 34
fd53a5cc cond_timedwait (575764, 5756d4, fbb53f7c, ff000000, 0, 0) + 14
fd53a60c pthread_cond_timedwait (575764, 5756d4, fbb53f7c, fc7d0c00, 575754, 0) 
+ c
fe6bae60 GDispCx_InternalWork (4a0804, fbb54000, 0, 0, fe6babf8, 1) + 268
fd53fd9c _lwp_start (0, 0, 0, 0, 0, 0)
-----------------  lwp# 7 / thread# 7  --------------------
fd53fe40 __lwp_park (575764, 5756d4, fba53e50, 1, 0, 0) + 14
fd539ec8 cond_wait_queue (575764, 5756d4, fba53e50, 0, 0, 0) + 28
fd53a340 cond_wait_common (575764, 5756d4, fba53e50, 0, 0, 0) + 298
fd53a4d8 _cond_timedwait (575764, 5756d4, fba53f7c, 0, 0, 0) + 34
fd53a5cc cond_timedwait (575764, 5756d4, fba53f7c, ff000000, 0, 0) + 14
fd53a60c pthread_cond_timedwait (575764, 5756d4, fba53f7c, fc7d1000, 575754, 0) 
+ c
fe6bae60 GDispCx_InternalWork (4a088c, fba54000, 0, 0, fe6babf8, 1) + 268
fd53fd9c _lwp_start (0, 0, 0, 0, 0, 0)
-----------------  lwp# 8 / thread# 8  --------------------
fd4b0bf0 strlen   (ff261497, fba21364, fba20bc1, 0, 0, 0) + 50
fd518400 snprintf (fba2138b, 100, ff261490, 0, fba2148c, 80808080) + 7c
ff21d24c mailbox_location_pattern (e46a7e, b90b8c, 0, 66870, 1, fba21708) + 39c
000303d8 __1cIcmd_list6FpnIimap_ctx_pcipkc22_v_ (b90ae8, e46a74, 0, e46a7b, 
e46a7e, 0) + 4a8
000221a4 __1cLprocess_cmd6FpnIimap_ctx_ipGpv_v2_i_ (b90ae8, 20, 24d80, b90ae8, 
ff00, 80808080) + 14ac
00024cfc firstcmdline (b90ae8, 1000, fd56cbc0, fc7d1400, 5756dc, 0) + 63c
fe6ba9c4 GDispCx_Dispatch (575664, e36a8c, 4a0914, fc7d1400, 575754, 0) + 174
fe6bafd8 GDispCx_InternalWork (4a0914, fba24000, 0, 0, fe6babf8, 1) + 3e0
fd53fd9c _lwp_start (0, 0, 0, 0, 0, 0)

Thanks in advance for your help. 
--
_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

     Benoit Schmid              Tel: (++41-22) 379-7209
     UNIGE Postmaster

     University of Geneva - Information Technology Division

_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/