[dkim-milter-discuss] Crash problem with dkim-filter 2.4.0 on Linux

[Steve R. <sre...@sp...>]

I'm experiencing a crashing problem with dkim-milter 2.4.0 on Centos 5
(kernel 2.6.18-8.1.14.el5, sendmail 8.13.8), and I'm looking for some
guidance.

In the last day and a half, I've collected 43 core dumps from
dkim-filter crashes.  All 43 have this backtrace:

------------------------------------------------------------------
Core was generated by `dkim-filter -v -x /etc/mail/dkim/dkim-filter.conf'.
Program terminated with signal 11, Segmentation fault.
(gdb) bt
#0  0x00c6ff28 in sha1_block_data_order () from /lib/libcrypto.so.4
#1  0x00c72293 in SHA1_Update () from /lib/libcrypto.so.4
#2  0x00cc3cee in EVP_sha1 () from /lib/libcrypto.so.4
#3  0x00cc04af in EVP_DigestUpdate () from /lib/libcrypto.so.4
#4  0x00cbb3ae in RAND_SSLeay () from /lib/libcrypto.so.4
#5  0x00cbbbbc in RAND_bytes () from /lib/libcrypto.so.4
#6  0x00c8c6cf in BN_rand_range () from /lib/libcrypto.so.4
#7  0x00c8c41d in BN_bn2dec () from /lib/libcrypto.so.4
#8  0x00c969c7 in RSA_blinding_on () from /lib/libcrypto.so.4
#9  0x00c94c15 in RSA_PKCS1_SSLeay () from /lib/libcrypto.so.4
#10 0x00c95602 in RSA_PKCS1_SSLeay () from /lib/libcrypto.so.4
#11 0x00c9670e in RSA_private_encrypt () from /lib/libcrypto.so.4
#12 0x00c97792 in RSA_sign () from /lib/libcrypto.so.4
#13 0x0805e1da in dkim_eom ()
#14 0x0804df85 in mlfi_eom ()
#15 0x080578bb in st_bodyend ()
#16 0x08057060 in mi_engine ()
#17 0x08055456 in mi_handle_session ()
#18 0x08054b14 in mi_thread_handle_wrapper ()
#19 0x006122db in start_thread () from /lib/libpthread.so.0
#20 0x001dd12e in clone () from /lib/libc.so.6
------------------------------------------------------------------

I had a crashing problem with version 2.3.2.  Unfortunately, I don't
have any debugging information for the 2.3.2 crashes.  Once I realized
that 2.3.2 was crashing frequently, I just upgraded to 2.4.0.

Here are a few things that could be relevant:

   * This dkim-filter is installed on an outbound mail relay.  It
     only signs messages (no verification).  Signing occurs for one
     domain only.

   * All of the outbound messages are nearly identical (it's a
     newsletter distribution).

   * The crashes seem to occur more frequently under load.  Say, 10K
     messages/hour or so.

Has anyone else experienced similar problems?  Any suggestions for
things to try?

Thanks in advance.

Steve