The functions innobase_commit_by_xid() and innobase_rollback_by_xid(), which implement XA ROLLBACK and XA COMMIT for XA PREPARE transactions that are no longer attached to a connection, are freeing the transaction object to the pool prematurely, and then modifying the trx_t::in_depth and trx::in_innodb fields of the freed object. While the object is already free in the pool, it could be reused by trx_create_low() by some other connection. This could cause memory corruption and cause bugs like MDEV-14128 and MDEV-13935.
This bug was caught after adding AddressSanitizer poisoning to the transaction Pool.
There are no comments yet on this issue.
{"report":{"fcp":685.2999999523163,"ttfb":154.70000004768372,"pageVisibility":"visible","entityId":65377,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"b58014e6-c068-4d0e-aa4c-ab8501bfad5b","navigationType":0,"readyForUser":743.2000000476837,"redirectCount":0,"resourceLoadedEnd":578.5999999046326,"resourceLoadedStart":163.20000004768372,"resourceTiming":[{"duration":46,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":163.20000004768372,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":163.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":209.20000004768372,"responseStart":0,"secureConnectionStart":0},{"duration":45.90000009536743,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":163.39999985694885,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":163.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":209.29999995231628,"responseStart":0,"secureConnectionStart":0},{"duration":61.90000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":163.59999990463257,"connectEnd":163.59999990463257,"connectStart":163.59999990463257,"domainLookupEnd":163.59999990463257,"domainLookupStart":163.59999990463257,"fetchStart":163.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":163.59999990463257,"responseEnd":225.5,"responseStart":225.5,"secureConnectionStart":163.59999990463257},{"duration":138.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":164.09999990463257,"connectEnd":164.09999990463257,"connectStart":164.09999990463257,"domainLookupEnd":164.09999990463257,"domainLookupStart":164.09999990463257,"fetchStart":164.09999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":164.09999990463257,"responseEnd":302.59999990463257,"responseStart":302.59999990463257,"secureConnectionStart":164.09999990463257},{"duration":142.09999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":164.20000004768372,"connectEnd":164.20000004768372,"connectStart":164.20000004768372,"domainLookupEnd":164.20000004768372,"domainLookupStart":164.20000004768372,"fetchStart":164.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":164.20000004768372,"responseEnd":306.2999999523163,"responseStart":306.2999999523163,"secureConnectionStart":164.20000004768372},{"duration":142.79999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":164.29999995231628,"connectEnd":164.29999995231628,"connectStart":164.29999995231628,"domainLookupEnd":164.29999995231628,"domainLookupStart":164.29999995231628,"fetchStart":164.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":164.29999995231628,"responseEnd":307.09999990463257,"responseStart":307.09999990463257,"secureConnectionStart":164.29999995231628},{"duration":143,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":164.39999985694885,"connectEnd":164.39999985694885,"connectStart":164.39999985694885,"domainLookupEnd":164.39999985694885,"domainLookupStart":164.39999985694885,"fetchStart":164.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":164.39999985694885,"responseEnd":307.39999985694885,"responseStart":307.39999985694885,"secureConnectionStart":164.39999985694885},{"duration":143.29999995231628,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":164.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":164.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":307.7999999523163,"responseStart":0,"secureConnectionStart":0},{"duration":143.29999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":164.59999990463257,"connectEnd":164.59999990463257,"connectStart":164.59999990463257,"domainLookupEnd":164.59999990463257,"domainLookupStart":164.59999990463257,"fetchStart":164.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":164.59999990463257,"responseEnd":307.89999985694885,"responseStart":307.89999985694885,"secureConnectionStart":164.59999990463257},{"duration":143.59999990463257,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":164.70000004768372,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":164.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":308.2999999523163,"responseStart":0,"secureConnectionStart":0},{"duration":143.59999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":164.79999995231628,"connectEnd":164.79999995231628,"connectStart":164.79999995231628,"domainLookupEnd":164.79999995231628,"domainLookupStart":164.79999995231628,"fetchStart":164.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":164.79999995231628,"responseEnd":308.39999985694885,"responseStart":308.39999985694885,"secureConnectionStart":164.79999995231628},{"duration":407.2000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":170.59999990463257,"connectEnd":170.59999990463257,"connectStart":170.59999990463257,"domainLookupEnd":170.59999990463257,"domainLookupStart":170.59999990463257,"fetchStart":170.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":170.59999990463257,"responseEnd":577.7999999523163,"responseStart":577.7999999523163,"secureConnectionStart":170.59999990463257},{"duration":406.7999999523163,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":171.79999995231628,"connectEnd":171.79999995231628,"connectStart":171.79999995231628,"domainLookupEnd":171.79999995231628,"domainLookupStart":171.79999995231628,"fetchStart":171.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":171.79999995231628,"responseEnd":578.5999999046326,"responseStart":578.5999999046326,"secureConnectionStart":171.79999995231628},{"duration":128,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":438.7999999523163,"connectEnd":438.7999999523163,"connectStart":438.7999999523163,"domainLookupEnd":438.7999999523163,"domainLookupStart":438.7999999523163,"fetchStart":438.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":438.7999999523163,"responseEnd":566.7999999523163,"responseStart":566.7999999523163,"secureConnectionStart":438.7999999523163},{"duration":185.5,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":633.2000000476837,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":633.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":818.7000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":185.90000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":634.0999999046326,"connectEnd":634.0999999046326,"connectStart":634.0999999046326,"domainLookupEnd":634.0999999046326,"domainLookupStart":634.0999999046326,"fetchStart":634.0999999046326,"redirectEnd":0,"redirectStart":0,"requestStart":634.0999999046326,"responseEnd":820,"responseStart":820,"secureConnectionStart":634.0999999046326},{"duration":191.20000004768372,"initiatorType":"script","name":"https://jira.mariadb.org/s/f51ef5507eea4c158f257c66c93b2a3f-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":634.5,"connectEnd":634.5,"connectStart":634.5,"domainLookupEnd":634.5,"domainLookupStart":634.5,"fetchStart":634.5,"redirectEnd":0,"redirectStart":0,"requestStart":634.5,"responseEnd":825.7000000476837,"responseStart":825.7000000476837,"secureConnectionStart":634.5}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":8,"responseStart":154,"responseEnd":171,"domLoading":158,"domInteractive":790,"domContentLoadedEventStart":790,"domContentLoadedEventEnd":822,"domComplete":1074,"loadEventStart":1074,"loadEventEnd":1075,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":775.2999999523163},{"name":"bigPipe.sidebar-id.end","time":776.2999999523163},{"name":"bigPipe.activity-panel-pipe-id.start","time":776.3999998569489},{"name":"bigPipe.activity-panel-pipe-id.end","time":776.8999998569489},{"name":"activityTabFullyLoaded","time":831.2999999523163}],"measures":[],"correlationId":"ec348edfdb2664","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":89,"dbReadsTimeInMs":14,"dbConnsTimeInMs":22,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Bug
Major
MDEV-15030 Add ASAN instrumentation