The functions innobase_commit_by_xid() and innobase_rollback_by_xid(), which implement XA ROLLBACK and XA COMMIT for XA PREPARE transactions that are no longer attached to a connection, are freeing the transaction object to the pool prematurely, and then modifying the trx_t::in_depth and trx::in_innodb fields of the freed object. While the object is already free in the pool, it could be reused by trx_create_low() by some other connection. This could cause memory corruption and cause bugs like MDEV-14128 and MDEV-13935.
This bug was caught after adding AddressSanitizer poisoning to the transaction Pool.
There are no comments yet on this issue.
{"report":{"fcp":753.7999999523163,"ttfb":172.79999995231628,"pageVisibility":"visible","entityId":65377,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"31dcb380-9b53-4d3a-b6ec-581a2e193894","navigationType":0,"readyForUser":822.5999999046326,"redirectCount":0,"resourceLoadedEnd":314.5,"resourceLoadedStart":178.19999980926514,"resourceTiming":[{"duration":6.200000047683716,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":178.19999980926514,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":178.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":184.39999985694885,"responseStart":0,"secureConnectionStart":0},{"duration":6.400000095367432,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":178.39999985694885,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":178.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":184.79999995231628,"responseStart":0,"secureConnectionStart":0},{"duration":98.70000004768372,"initiatorType":"script","name":"https://jira.mariadb.org/s/0917945aaa57108d00c5076fea35e069-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":178.59999990463257,"connectEnd":178.59999990463257,"connectStart":178.59999990463257,"domainLookupEnd":178.59999990463257,"domainLookupStart":178.59999990463257,"fetchStart":178.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":188.29999995231628,"responseEnd":277.2999999523163,"responseStart":209.09999990463257,"secureConnectionStart":178.59999990463257},{"duration":135.70000004768372,"initiatorType":"script","name":"https://jira.mariadb.org/s/2d8175ec2fa4c816e8023260bd8c1786-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":178.79999995231628,"connectEnd":178.79999995231628,"connectStart":178.79999995231628,"domainLookupEnd":178.79999995231628,"domainLookupStart":178.79999995231628,"fetchStart":178.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":191.39999985694885,"responseEnd":314.5,"responseStart":249.69999980926514,"secureConnectionStart":178.79999995231628},{"duration":66.39999985694885,"initiatorType":"script","name":"https://jira.mariadb.org/s/a9324d6758d385eb45c462685ad88f1d-CDN/lu2cib/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":179,"connectEnd":179,"connectStart":179,"domainLookupEnd":179,"domainLookupStart":179,"fetchStart":179,"redirectEnd":0,"redirectStart":0,"requestStart":191.59999990463257,"responseEnd":245.39999985694885,"responseStart":244.5,"secureConnectionStart":179},{"duration":81.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":179.09999990463257,"connectEnd":179.09999990463257,"connectStart":179.09999990463257,"domainLookupEnd":179.09999990463257,"domainLookupStart":179.09999990463257,"fetchStart":179.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":193.29999995231628,"responseEnd":260.5,"responseStart":259.7999999523163,"secureConnectionStart":179.09999990463257},{"duration":86.70000004768372,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":179.29999995231628,"connectEnd":179.29999995231628,"connectStart":179.29999995231628,"domainLookupEnd":179.29999995231628,"domainLookupStart":179.29999995231628,"fetchStart":179.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":194.29999995231628,"responseEnd":266,"responseStart":265.59999990463257,"secureConnectionStart":179.29999995231628},{"duration":13.799999952316284,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2cib/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":179.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":179.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":193.29999995231628,"responseStart":0,"secureConnectionStart":0},{"duration":87.10000014305115,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":179.69999980926514,"connectEnd":179.69999980926514,"connectStart":179.69999980926514,"domainLookupEnd":179.69999980926514,"domainLookupStart":179.69999980926514,"fetchStart":179.69999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":196.5,"responseEnd":266.7999999523163,"responseStart":266.19999980926514,"secureConnectionStart":179.69999980926514},{"duration":15.700000047683716,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":179.79999995231628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":179.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":195.5,"responseStart":0,"secureConnectionStart":0},{"duration":85.39999985694885,"initiatorType":"script","name":"https://jira.mariadb.org/s/5d5e8fe91fbc506585e83ea3b62ccc4b-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":180,"connectEnd":180,"connectStart":180,"domainLookupEnd":180,"domainLookupStart":180,"fetchStart":180,"redirectEnd":0,"redirectStart":0,"requestStart":197.29999995231628,"responseEnd":265.39999985694885,"responseStart":263.7999999523163,"secureConnectionStart":180},{"duration":30.100000143051147,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":191.39999985694885,"connectEnd":204.09999990463257,"connectStart":204.09999990463257,"domainLookupEnd":204.09999990463257,"domainLookupStart":204.09999990463257,"fetchStart":191.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":204.19999980926514,"responseEnd":221.5,"responseStart":217.69999980926514,"secureConnectionStart":204.09999990463257},{"duration":30.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":191.39999985694885,"connectEnd":191.39999985694885,"connectStart":191.39999985694885,"domainLookupEnd":191.39999985694885,"domainLookupStart":191.39999985694885,"fetchStart":191.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":205.39999985694885,"responseEnd":221.89999985694885,"responseStart":218.69999980926514,"secureConnectionStart":191.39999985694885},{"duration":195.89999985694885,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":500,"connectEnd":500,"connectStart":500,"domainLookupEnd":500,"domainLookupStart":500,"fetchStart":500,"redirectEnd":0,"redirectStart":0,"requestStart":662.0999999046326,"responseEnd":695.8999998569489,"responseStart":695.1999998092651,"secureConnectionStart":500}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":19,"responseStart":172,"responseEnd":190,"domLoading":176,"domInteractive":880,"domContentLoadedEventStart":880,"domContentLoadedEventEnd":926,"domComplete":1303,"loadEventStart":1303,"loadEventEnd":1304,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":863.1999998092651},{"name":"bigPipe.sidebar-id.end","time":864},{"name":"bigPipe.activity-panel-pipe-id.start","time":864.1999998092651},{"name":"bigPipe.activity-panel-pipe-id.end","time":864.5999999046326},{"name":"activityTabFullyLoaded","time":935.5999999046326}],"measures":[],"correlationId":"549cf60d9b7989","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":91,"dbReadsTimeInMs":13,"dbConnsTimeInMs":25,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Bug
Major
MDEV-15030 Add ASAN instrumentation