Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12347

Valgrind reports invalid read errors in Item_field_row::element_index_by_name

    XMLWordPrintable

    Details

      Description

      "mtr --valgrind compat/oracle.sp-row" reports the following problem in the bb-10.2-compatibility branch:

      ==30963== Thread 6:
      ==30963== Invalid read of size 1
      ==30963==    at 0x4C2BA12: strlen (vg_replace_strmem.c:454)
      ==30963==    by 0x9A7C43: Item_field_row::element_index_by_name(unsigned int*, st_mysql_lex_string const&) const (item.cc:7443)
      ==30963==    by 0xAFDDA2: sp_instr_set_row_field_by_name::exec_core(THD*, unsigned int*) (sp_head.cc:3504)
      ==30963==    by 0xAFCDB5: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*) (sp_head.cc:3120)
      ==30963==    by 0xAFD8A2: sp_instr_set::execute(THD*, unsigned int*) (sp_head.cc:3394)
      ==30963==    by 0xAF7C54: sp_head::execute(THD*, bool) (sp_head.cc:1267)
      ==30963==    by 0xAF9DC6: sp_head::execute_procedure(THD*, List<Item>*) (sp_head.cc:2092)
      ==30963==    by 0x6DF400: do_execute_sp(THD*, sp_head*) (sql_parse.cc:2890)
      ==30963==    by 0x6E8B02: mysql_execute_command(THD*) (sql_parse.cc:5919)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963==    by 0x6DC743: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1822)
      ==30963==    by 0x6DB090: do_command(THD*) (sql_parse.cc:1370)
      ==30963==    by 0x824A6F: do_handle_one_connection(CONNECT*) (sql_connect.cc:1358)
      ==30963==    by 0x8247EF: handle_one_connection (sql_connect.cc:1264)
      ==30963==    by 0x102216B: pfs_spawn_thread (pfs.cc:1862)
      ==30963==    by 0x4E3C619: start_thread (in /usr/lib64/libpthread-2.22.so)
      ==30963==  Address 0xd0ceeb9 is 281 bytes inside a block of size 1,100 free'd
      ==30963==    at 0x4C29CF0: free (vg_replace_malloc.c:530)
      ==30963==    by 0x1100EE3: free_memory (safemalloc.c:279)
      ==30963==    by 0x1100B98: sf_free (safemalloc.c:197)
      ==30963==    by 0x10EE623: my_free (my_malloc.c:217)
      ==30963==    by 0x10E21C5: free_root (my_alloc.c:395)
      ==30963==    by 0x7D796C: TABLE_SHARE::destroy() (table.cc:473)
      ==30963==    by 0x7D7A22: free_table_share(TABLE_SHARE*) (table.cc:489)
      ==30963==    by 0x8CB44B: tdc_delete_share_from_hash(TDC_element*) (table_cache.cc:534)
      ==30963==    by 0x8CC9A9: tdc_release_share(TABLE_SHARE*) (table_cache.cc:976)
      ==30963==    by 0x8CA5B5: intern_close_table(TABLE*) (table_cache.cc:223)
      ==30963==    by 0x8CA746: tc_remove_table(TABLE*) (table_cache.cc:260)
      ==30963==    by 0x8CAF64: tc_release_table(TABLE*) (table_cache.cc:460)
      ==30963==    by 0x6647E3: close_thread_table(THD*, TABLE**) (sql_base.cc:900)
      ==30963==    by 0x66413A: close_all_tables_for_name(THD*, TABLE_SHARE*, ha_extra_function, TABLE*) (sql_base.cc:674)
      ==30963==    by 0x7B27FE: mysql_alter_table(THD*, char*, char*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool) (sql_table.cc:9311)
      ==30963==    by 0x829D14: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:324)
      ==30963==  Block was alloc'd at
      ==30963==    at 0x4C28BF6: malloc (vg_replace_malloc.c:299)
      ==30963==    by 0x11008DE: sf_malloc (safemalloc.c:118)
      ==30963==    by 0x10EE19D: my_malloc (my_malloc.c:101)
      ==30963==    by 0x10E1BFB: alloc_root (my_alloc.c:237)
      ==30963==    by 0x10E2411: memdup_root (my_alloc.c:457)
      ==30963==    by 0x7D9A15: TABLE_SHARE::init_from_binary_frm_image(THD*, bool, unsigned char const*, unsigned long) (table.cc:1258)
      ==30963==    by 0x7D7FB1: open_table_def(THD*, TABLE_SHARE*, unsigned int) (table.cc:669)
      ==30963==    by 0x8CC11E: tdc_acquire_share(THD*, TABLE_LIST*, unsigned int, TABLE**) (table_cache.cc:825)
      ==30963==    by 0x665FAD: open_table(THD*, TABLE_LIST*, Open_table_context*) (sql_base.cc:1742)
      ==30963==    by 0x668F10: open_and_process_table(THD*, LEX*, TABLE_LIST*, unsigned int*, unsigned int, Prelocking_strategy*, bool, Open_table_context*) (sql_base.cc:3409)
      ==30963==    by 0x66A0AB: open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) (sql_base.cc:3928)
      ==30963==    by 0x66B85B: open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) (sql_base.cc:4681)
      ==30963==    by 0x65ED2D: open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) (sql_base.h:495)
      ==30963==    by 0x6B25B8: mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) (sql_insert.cc:757)
      ==30963==    by 0x6E423A: mysql_execute_command(THD*) (sql_parse.cc:4676)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963== Invalid read of size 1
      ==30963==    at 0x4C2BA24: strlen (vg_replace_strmem.c:454)
      ==30963==    by 0x9A7C43: Item_field_row::element_index_by_name(unsigned int*, st_mysql_lex_string const&) const (item.cc:7443)
      ==30963==    by 0xAFDDA2: sp_instr_set_row_field_by_name::exec_core(THD*, unsigned int*) (sp_head.cc:3504)
      ==30963==    by 0xAFCDB5: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*) (sp_head.cc:3120)
      ==30963==    by 0xAFD8A2: sp_instr_set::execute(THD*, unsigned int*) (sp_head.cc:3394)
      ==30963==    by 0xAF7C54: sp_head::execute(THD*, bool) (sp_head.cc:1267)
      ==30963==    by 0xAF9DC6: sp_head::execute_procedure(THD*, List<Item>*) (sp_head.cc:2092)
      ==30963==    by 0x6DF400: do_execute_sp(THD*, sp_head*) (sql_parse.cc:2890)
      ==30963==    by 0x6E8B02: mysql_execute_command(THD*) (sql_parse.cc:5919)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963==    by 0x6DC743: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1822)
      ==30963==    by 0x6DB090: do_command(THD*) (sql_parse.cc:1370)
      ==30963==    by 0x824A6F: do_handle_one_connection(CONNECT*) (sql_connect.cc:1358)
      ==30963==    by 0x8247EF: handle_one_connection (sql_connect.cc:1264)
      ==30963==    by 0x102216B: pfs_spawn_thread (pfs.cc:1862)
      ==30963==    by 0x4E3C619: start_thread (in /usr/lib64/libpthread-2.22.so)
      ==30963==  Address 0xd0ceeba is 282 bytes inside a block of size 1,100 free'd
      ==30963==    at 0x4C29CF0: free (vg_replace_malloc.c:530)
      ==30963==    by 0x1100EE3: free_memory (safemalloc.c:279)
      ==30963==    by 0x1100B98: sf_free (safemalloc.c:197)
      ==30963==    by 0x10EE623: my_free (my_malloc.c:217)
      ==30963==    by 0x10E21C5: free_root (my_alloc.c:395)
      ==30963==    by 0x7D796C: TABLE_SHARE::destroy() (table.cc:473)
      ==30963==    by 0x7D7A22: free_table_share(TABLE_SHARE*) (table.cc:489)
      ==30963==    by 0x8CB44B: tdc_delete_share_from_hash(TDC_element*) (table_cache.cc:534)
      ==30963==    by 0x8CC9A9: tdc_release_share(TABLE_SHARE*) (table_cache.cc:976)
      ==30963==    by 0x8CA5B5: intern_close_table(TABLE*) (table_cache.cc:223)
      ==30963==    by 0x8CA746: tc_remove_table(TABLE*) (table_cache.cc:260)
      ==30963==    by 0x8CAF64: tc_release_table(TABLE*) (table_cache.cc:460)
      ==30963==    by 0x6647E3: close_thread_table(THD*, TABLE**) (sql_base.cc:900)
      ==30963==    by 0x66413A: close_all_tables_for_name(THD*, TABLE_SHARE*, ha_extra_function, TABLE*) (sql_base.cc:674)
      ==30963==    by 0x7B27FE: mysql_alter_table(THD*, char*, char*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool) (sql_table.cc:9311)
      ==30963==    by 0x829D14: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:324)
      ==30963==  Block was alloc'd at
      ==30963==    at 0x4C28BF6: malloc (vg_replace_malloc.c:299)
      ==30963==    by 0x11008DE: sf_malloc (safemalloc.c:118)
      ==30963==    by 0x10EE19D: my_malloc (my_malloc.c:101)
      ==30963==    by 0x10E1BFB: alloc_root (my_alloc.c:237)
      ==30963==    by 0x10E2411: memdup_root (my_alloc.c:457)
      ==30963==    by 0x7D9A15: TABLE_SHARE::init_from_binary_frm_image(THD*, bool, unsigned char const*, unsigned long) (table.cc:1258)
      ==30963==    by 0x7D7FB1: open_table_def(THD*, TABLE_SHARE*, unsigned int) (table.cc:669)
      ==30963==    by 0x8CC11E: tdc_acquire_share(THD*, TABLE_LIST*, unsigned int, TABLE**) (table_cache.cc:825)
      ==30963==    by 0x665FAD: open_table(THD*, TABLE_LIST*, Open_table_context*) (sql_base.cc:1742)
      ==30963==    by 0x668F10: open_and_process_table(THD*, LEX*, TABLE_LIST*, unsigned int*, unsigned int, Prelocking_strategy*, bool, Open_table_context*) (sql_base.cc:3409)
      ==30963==    by 0x66A0AB: open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) (sql_base.cc:3928)
      ==30963==    by 0x66B85B: open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) (sql_base.cc:4681)
      ==30963==    by 0x65ED2D: open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) (sql_base.h:495)
      ==30963==    by 0x6B25B8: mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) (sql_insert.cc:757)
      ==30963==    by 0x6E423A: mysql_execute_command(THD*) (sql_parse.cc:4676)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963== Invalid read of size 1
      ==30963==    at 0x113C0EF: my_scan_weight_utf8_general_ci (strcoll.ic:89)
      ==30963==    by 0x113C2A1: my_strnncoll_utf8_general_ci (strcoll.ic:174)
      ==30963==    by 0x9A7C69: Item_field_row::element_index_by_name(unsigned int*, st_mysql_lex_string const&) const (item.cc:7443)
      ==30963==    by 0xAFDDA2: sp_instr_set_row_field_by_name::exec_core(THD*, unsigned int*) (sp_head.cc:3504)
      ==30963==    by 0xAFCDB5: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*) (sp_head.cc:3120)
      ==30963==    by 0xAFD8A2: sp_instr_set::execute(THD*, unsigned int*) (sp_head.cc:3394)
      ==30963==    by 0xAF7C54: sp_head::execute(THD*, bool) (sp_head.cc:1267)
      ==30963==    by 0xAF9DC6: sp_head::execute_procedure(THD*, List<Item>*) (sp_head.cc:2092)
      ==30963==    by 0x6DF400: do_execute_sp(THD*, sp_head*) (sql_parse.cc:2890)
      ==30963==    by 0x6E8B02: mysql_execute_command(THD*) (sql_parse.cc:5919)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963==    by 0x6DC743: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1822)
      ==30963==    by 0x6DB090: do_command(THD*) (sql_parse.cc:1370)
      ==30963==    by 0x824A6F: do_handle_one_connection(CONNECT*) (sql_connect.cc:1358)
      ==30963==    by 0x8247EF: handle_one_connection (sql_connect.cc:1264)
      ==30963==    by 0x102216B: pfs_spawn_thread (pfs.cc:1862)
      ==30963==  Address 0xd0ceeb9 is 281 bytes inside a block of size 1,100 free'd
      ==30963==    at 0x4C29CF0: free (vg_replace_malloc.c:530)
      ==30963==    by 0x1100EE3: free_memory (safemalloc.c:279)
      ==30963==    by 0x1100B98: sf_free (safemalloc.c:197)
      ==30963==    by 0x10EE623: my_free (my_malloc.c:217)
      ==30963==    by 0x10E21C5: free_root (my_alloc.c:395)
      ==30963==    by 0x7D796C: TABLE_SHARE::destroy() (table.cc:473)
      ==30963==    by 0x7D7A22: free_table_share(TABLE_SHARE*) (table.cc:489)
      ==30963==    by 0x8CB44B: tdc_delete_share_from_hash(TDC_element*) (table_cache.cc:534)
      ==30963==    by 0x8CC9A9: tdc_release_share(TABLE_SHARE*) (table_cache.cc:976)
      ==30963==    by 0x8CA5B5: intern_close_table(TABLE*) (table_cache.cc:223)
      ==30963==    by 0x8CA746: tc_remove_table(TABLE*) (table_cache.cc:260)
      ==30963==    by 0x8CAF64: tc_release_table(TABLE*) (table_cache.cc:460)
      ==30963==    by 0x6647E3: close_thread_table(THD*, TABLE**) (sql_base.cc:900)
      ==30963==    by 0x66413A: close_all_tables_for_name(THD*, TABLE_SHARE*, ha_extra_function, TABLE*) (sql_base.cc:674)
      ==30963==    by 0x7B27FE: mysql_alter_table(THD*, char*, char*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool) (sql_table.cc:9311)
      ==30963==    by 0x829D14: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:324)
      ==30963==  Block was alloc'd at
      ==30963==    at 0x4C28BF6: malloc (vg_replace_malloc.c:299)
      ==30963==    by 0x11008DE: sf_malloc (safemalloc.c:118)
      ==30963==    by 0x10EE19D: my_malloc (my_malloc.c:101)
      ==30963==    by 0x10E1BFB: alloc_root (my_alloc.c:237)
      ==30963==    by 0x10E2411: memdup_root (my_alloc.c:457)
      ==30963==    by 0x7D9A15: TABLE_SHARE::init_from_binary_frm_image(THD*, bool, unsigned char const*, unsigned long) (table.cc:1258)
      ==30963==    by 0x7D7FB1: open_table_def(THD*, TABLE_SHARE*, unsigned int) (table.cc:669)
      ==30963==    by 0x8CC11E: tdc_acquire_share(THD*, TABLE_LIST*, unsigned int, TABLE**) (table_cache.cc:825)
      ==30963==    by 0x665FAD: open_table(THD*, TABLE_LIST*, Open_table_context*) (sql_base.cc:1742)
      ==30963==    by 0x668F10: open_and_process_table(THD*, LEX*, TABLE_LIST*, unsigned int*, unsigned int, Prelocking_strategy*, bool, Open_table_context*) (sql_base.cc:3409)
      ==30963==    by 0x66A0AB: open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) (sql_base.cc:3928)
      ==30963==    by 0x66B85B: open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) (sql_base.cc:4681)
      ==30963==    by 0x65ED2D: open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) (sql_base.h:495)
      ==30963==    by 0x6B25B8: mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) (sql_insert.cc:757)
      ==30963==    by 0x6E423A: mysql_execute_command(THD*) (sql_parse.cc:4676)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963== Invalid read of size 1
      ==30963==    at 0x113C11D: my_scan_weight_utf8_general_ci (strcoll.ic:102)
      ==30963==    by 0x113C2A1: my_strnncoll_utf8_general_ci (strcoll.ic:174)
      ==30963==    by 0x9A7C69: Item_field_row::element_index_by_name(unsigned int*, st_mysql_lex_string const&) const (item.cc:7443)
      ==30963==    by 0xAFDDA2: sp_instr_set_row_field_by_name::exec_core(THD*, unsigned int*) (sp_head.cc:3504)
      ==30963==    by 0xAFCDB5: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*) (sp_head.cc:3120)
      ==30963==    by 0xAFD8A2: sp_instr_set::execute(THD*, unsigned int*) (sp_head.cc:3394)
      ==30963==    by 0xAF7C54: sp_head::execute(THD*, bool) (sp_head.cc:1267)
      ==30963==    by 0xAF9DC6: sp_head::execute_procedure(THD*, List<Item>*) (sp_head.cc:2092)
      ==30963==    by 0x6DF400: do_execute_sp(THD*, sp_head*) (sql_parse.cc:2890)
      ==30963==    by 0x6E8B02: mysql_execute_command(THD*) (sql_parse.cc:5919)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963==    by 0x6DC743: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1822)
      ==30963==    by 0x6DB090: do_command(THD*) (sql_parse.cc:1370)
      ==30963==    by 0x824A6F: do_handle_one_connection(CONNECT*) (sql_connect.cc:1358)
      ==30963==    by 0x8247EF: handle_one_connection (sql_connect.cc:1264)
      ==30963==    by 0x102216B: pfs_spawn_thread (pfs.cc:1862)
      ==30963==  Address 0xd0ceeb9 is 281 bytes inside a block of size 1,100 free'd
      ==30963==    at 0x4C29CF0: free (vg_replace_malloc.c:530)
      ==30963==    by 0x1100EE3: free_memory (safemalloc.c:279)
      ==30963==    by 0x1100B98: sf_free (safemalloc.c:197)
      ==30963==    by 0x10EE623: my_free (my_malloc.c:217)
      ==30963==    by 0x10E21C5: free_root (my_alloc.c:395)
      ==30963==    by 0x7D796C: TABLE_SHARE::destroy() (table.cc:473)
      ==30963==    by 0x7D7A22: free_table_share(TABLE_SHARE*) (table.cc:489)
      ==30963==    by 0x8CB44B: tdc_delete_share_from_hash(TDC_element*) (table_cache.cc:534)
      ==30963==    by 0x8CC9A9: tdc_release_share(TABLE_SHARE*) (table_cache.cc:976)
      ==30963==    by 0x8CA5B5: intern_close_table(TABLE*) (table_cache.cc:223)
      ==30963==    by 0x8CA746: tc_remove_table(TABLE*) (table_cache.cc:260)
      ==30963==    by 0x8CAF64: tc_release_table(TABLE*) (table_cache.cc:460)
      ==30963==    by 0x6647E3: close_thread_table(THD*, TABLE**) (sql_base.cc:900)
      ==30963==    by 0x66413A: close_all_tables_for_name(THD*, TABLE_SHARE*, ha_extra_function, TABLE*) (sql_base.cc:674)
      ==30963==    by 0x7B27FE: mysql_alter_table(THD*, char*, char*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool) (sql_table.cc:9311)
      ==30963==    by 0x829D14: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:324)
      ==30963==  Block was alloc'd at
      ==30963==    at 0x4C28BF6: malloc (vg_replace_malloc.c:299)
      ==30963==    by 0x11008DE: sf_malloc (safemalloc.c:118)
      ==30963==    by 0x10EE19D: my_malloc (my_malloc.c:101)
      ==30963==    by 0x10E1BFB: alloc_root (my_alloc.c:237)
      ==30963==    by 0x10E2411: memdup_root (my_alloc.c:457)
      ==30963==    by 0x7D9A15: TABLE_SHARE::init_from_binary_frm_image(THD*, bool, unsigned char const*, unsigned long) (table.cc:1258)
      ==30963==    by 0x7D7FB1: open_table_def(THD*, TABLE_SHARE*, unsigned int) (table.cc:669)
      ==30963==    by 0x8CC11E: tdc_acquire_share(THD*, TABLE_LIST*, unsigned int, TABLE**) (table_cache.cc:825)
      ==30963==    by 0x665FAD: open_table(THD*, TABLE_LIST*, Open_table_context*) (sql_base.cc:1742)
      ==30963==    by 0x668F10: open_and_process_table(THD*, LEX*, TABLE_LIST*, unsigned int*, unsigned int, Prelocking_strategy*, bool, Open_table_context*) (sql_base.cc:3409)
      ==30963==    by 0x66A0AB: open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) (sql_base.cc:3928)
      ==30963==    by 0x66B85B: open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) (sql_base.cc:4681)
      ==30963==    by 0x65ED2D: open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) (sql_base.h:495)
      ==30963==    by 0x6B25B8: mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) (sql_insert.cc:757)
      ==30963==    by 0x6E423A: mysql_execute_command(THD*) (sql_parse.cc:4676)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963== Invalid read of size 1
      ==30963==    at 0x113C232: my_scan_weight_utf8_general_ci (strcoll.ic:141)
      ==30963==    by 0x113C2A1: my_strnncoll_utf8_general_ci (strcoll.ic:174)
      ==30963==    by 0x9A7C69: Item_field_row::element_index_by_name(unsigned int*, st_mysql_lex_string const&) const (item.cc:7443)
      ==30963==    by 0xAFDDA2: sp_instr_set_row_field_by_name::exec_core(THD*, unsigned int*) (sp_head.cc:3504)
      ==30963==    by 0xAFCDB5: sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*) (sp_head.cc:3120)
      ==30963==    by 0xAFD8A2: sp_instr_set::execute(THD*, unsigned int*) (sp_head.cc:3394)
      ==30963==    by 0xAF7C54: sp_head::execute(THD*, bool) (sp_head.cc:1267)
      ==30963==    by 0xAF9DC6: sp_head::execute_procedure(THD*, List<Item>*) (sp_head.cc:2092)
      ==30963==    by 0x6DF400: do_execute_sp(THD*, sp_head*) (sql_parse.cc:2890)
      ==30963==    by 0x6E8B02: mysql_execute_command(THD*) (sql_parse.cc:5919)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      ==30963==    by 0x6DC743: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1822)
      ==30963==    by 0x6DB090: do_command(THD*) (sql_parse.cc:1370)
      ==30963==    by 0x824A6F: do_handle_one_connection(CONNECT*) (sql_connect.cc:1358)
      ==30963==    by 0x8247EF: handle_one_connection (sql_connect.cc:1264)
      ==30963==    by 0x102216B: pfs_spawn_thread (pfs.cc:1862)
      ==30963==  Address 0xd0ceeb9 is 281 bytes inside a block of size 1,100 free'd
      ==30963==    at 0x4C29CF0: free (vg_replace_malloc.c:530)
      ==30963==    by 0x1100EE3: free_memory (safemalloc.c:279)
      ==30963==    by 0x1100B98: sf_free (safemalloc.c:197)
      ==30963==    by 0x10EE623: my_free (my_malloc.c:217)
      ==30963==    by 0x10E21C5: free_root (my_alloc.c:395)
      ==30963==    by 0x7D796C: TABLE_SHARE::destroy() (table.cc:473)
      ==30963==    by 0x7D7A22: free_table_share(TABLE_SHARE*) (table.cc:489)
      ==30963==    by 0x8CB44B: tdc_delete_share_from_hash(TDC_element*) (table_cache.cc:534)
      ==30963==    by 0x8CC9A9: tdc_release_share(TABLE_SHARE*) (table_cache.cc:976)
      ==30963==    by 0x8CA5B5: intern_close_table(TABLE*) (table_cache.cc:223)
      ==30963==    by 0x8CA746: tc_remove_table(TABLE*) (table_cache.cc:260)
      ==30963==    by 0x8CAF64: tc_release_table(TABLE*) (table_cache.cc:460)
      ==30963==    by 0x6647E3: close_thread_table(THD*, TABLE**) (sql_base.cc:900)
      ==30963==    by 0x66413A: close_all_tables_for_name(THD*, TABLE_SHARE*, ha_extra_function, TABLE*) (sql_base.cc:674)
      ==30963==    by 0x7B27FE: mysql_alter_table(THD*, char*, char*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool) (sql_table.cc:9311)
      ==30963==    by 0x829D14: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:324)
      ==30963==  Block was alloc'd at
      ==30963==    at 0x4C28BF6: malloc (vg_replace_malloc.c:299)
      ==30963==    by 0x11008DE: sf_malloc (safemalloc.c:118)
      ==30963==    by 0x10EE19D: my_malloc (my_malloc.c:101)
      ==30963==    by 0x10E1BFB: alloc_root (my_alloc.c:237)
      ==30963==    by 0x10E2411: memdup_root (my_alloc.c:457)
      ==30963==    by 0x7D9A15: TABLE_SHARE::init_from_binary_frm_image(THD*, bool, unsigned char const*, unsigned long) (table.cc:1258)
      ==30963==    by 0x7D7FB1: open_table_def(THD*, TABLE_SHARE*, unsigned int) (table.cc:669)
      ==30963==    by 0x8CC11E: tdc_acquire_share(THD*, TABLE_LIST*, unsigned int, TABLE**) (table_cache.cc:825)
      ==30963==    by 0x665FAD: open_table(THD*, TABLE_LIST*, Open_table_context*) (sql_base.cc:1742)
      ==30963==    by 0x668F10: open_and_process_table(THD*, LEX*, TABLE_LIST*, unsigned int*, unsigned int, Prelocking_strategy*, bool, Open_table_context*) (sql_base.cc:3409)
      ==30963==    by 0x66A0AB: open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) (sql_base.cc:3928)
      ==30963==    by 0x66B85B: open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) (sql_base.cc:4681)
      ==30963==    by 0x65ED2D: open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) (sql_base.h:495)
      ==30963==    by 0x6B25B8: mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) (sql_insert.cc:757)
      ==30963==    by 0x6E423A: mysql_execute_command(THD*) (sql_parse.cc:4676)
      ==30963==    by 0x6EEFAF: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:8010)
      

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              bar Alexander Barkov
              Reporter:
              bar Alexander Barkov
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: