Server crashes in __memcpy_sse2_unaligned / String::copy on JSON_SEARCH with variables

SET @str = 'foo', @path = '$';

SELECT JSON_SEARCH('{"foo":"bar"}', 'all' , @str, '%', @path);

#3  <signal handler called>

#4  __memcpy_sse2_unaligned () at ../sysdeps/x86_64/multiarch/memcpy-sse2-unaligned.S:142

#5  0x00007f3f28b4d9d0 in String::copy (this=0x7f3f1d465878, str=0x7f3f1d5e0370 "$", arg_length=1, cs=0x7f3f29ebabc0 <my_charset_latin1>) at /data/src/10.2/sql/sql_string.cc:188

#6  0x00007f3f28d8740c in user_var_entry::val_str (this=0x7f3f1d5e0330, null_value=0x7f3f1d4645aa, str=0x7f3f1d465878, decimals=39) at /data/src/10.2/sql/item_func.cc:4962

#7  0x00007f3f28d889c8 in Item_func_get_user_var::val_str (this=0x7f3f1d464538, str=0x7f3f1d465878) at /data/src/10.2/sql/item_func.cc:5392

#8  0x00007f3f28ee6288 in Item_func_json_search::val_str (this=0x7f3f1d464648, str=0x7f3f29c2d750) at /data/src/10.2/sql/item_jsonfunc.cc:2901

#9  0x00007f3f28d2704b in Item::send (this=0x7f3f1d464648, protocol=0x7f3f1d416608, buffer=0x7f3f29c2d750) at /data/src/10.2/sql/item.cc:6887

#10 0x00007f3f289d0166 in Protocol::send_result_set_row (this=0x7f3f1d416608, row_items=0x7f3f1d41a3a8) at /data/src/10.2/sql/protocol.cc:979

#11 0x00007f3f28a50f12 in select_send::send_data (this=0x7f3f1d464d40, items=...) at /data/src/10.2/sql/sql_class.cc:2760

#12 0x00007f3f28adf021 in JOIN::exec_inner (this=0x7f3f1d464d60) at /data/src/10.2/sql/sql_select.cc:3346

#13 0x00007f3f28adeabc in JOIN::exec (this=0x7f3f1d464d60) at /data/src/10.2/sql/sql_select.cc:3266

#14 0x00007f3f28adfc2f in mysql_select (thd=0x7f3f1d416070, tables=0x0, wild_num=0, fields=..., conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2147748608, result=0x7f3f1d464d40, unit=0x7f3f1d419b50, select_lex=0x7f3f1d41a280) at /data/src/10.2/sql/sql_select.cc:3658

#15 0x00007f3f28ad4710 in handle_select (thd=0x7f3f1d416070, lex=0x7f3f1d419a88, result=0x7f3f1d464d40, setup_tables_done_option=0) at /data/src/10.2/sql/sql_select.cc:373

#16 0x00007f3f28aa0b59 in execute_sqlcom_select (thd=0x7f3f1d416070, all_tables=0x0) at /data/src/10.2/sql/sql_parse.cc:6415

#17 0x00007f3f28a96b86 in mysql_execute_command (thd=0x7f3f1d416070) at /data/src/10.2/sql/sql_parse.cc:3448

#18 0x00007f3f28aa452c in mysql_parse (thd=0x7f3f1d416070, rawbuf=0x7f3f1d464088 "SELECT JSON_SEARCH('{\"foo\":\"bar\"}', 'all' , @str, '%', @path)", length=61, parser_state=0x7f3f29c2edd0, is_com_multi=false, is_next_command=false) at /data/src/10.2/sql/sql_parse.cc:7858

#19 0x00007f3f28a925f2 in dispatch_command (command=COM_QUERY, thd=0x7f3f1d416070, packet=0x7f3f1d458071 "", packet_length=61, is_com_multi=false, is_next_command=false) at /data/src/10.2/sql/sql_parse.cc:1812

#20 0x00007f3f28a90f62 in do_command (thd=0x7f3f1d416070) at /data/src/10.2/sql/sql_parse.cc:1362

#21 0x00007f3f28bd9f3f in do_handle_one_connection (connect=0x7f3f25865410) at /data/src/10.2/sql/sql_connect.cc:1358

#22 0x00007f3f28bd9ccc in handle_one_connection (arg=0x7f3f25865410) at /data/src/10.2/sql/sql_connect.cc:1264

#23 0x00007f3f28ff2658 in pfs_spawn_thread (arg=0x7f3f258499f0) at /data/src/10.2/storage/perfschema/pfs.cc:1862

#24 0x00007f3f280bb064 in start_thread (arg=0x7f3f29c30300) at pthread_create.c:309

#25 0x00007f3f2627362d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111