-
Bug
-
-
Critical
-
Resolution:
Fixed
-
5.5(EOL), 10.0(EOL), 10.1(EOL), 10.2(EOL), 10.3(EOL)
-
-
-
In ha_recover() array of XA transactions is allocated as following:
#define MAX_XID_LIST_SIZE (1024*128)
|
#define MIN_XID_LIST_SIZE 128
|
|
for (info.len= MAX_XID_LIST_SIZE ;
|
info.list==0 && info.len > MIN_XID_LIST_SIZE; info.len/=2)
|
{
|
info.list=(XID *)my_malloc(info.len*sizeof(XID), MYF(0));
|
}
|
if (!info.list)
|
{
|
sql_print_error(ER(ER_OUTOFMEMORY),
|
static_cast<int>(info.len*sizeof(XID)));
|
DBUG_RETURN(1);
|
}
|
Then each storage engine fills this array. However at least InnoDB (trx_recover_for_mysql()) doesn't check for boundaries and may overrun this array.
- relates to
-
MDEV-19408
Assertion `trx->state == TRX_STATE_ACTIVE || trx->state == TRX_STATE_PREPARED' failed in ReadView::copy_trx_ids, innodb.xa_debug, innodb.innodb fail in buildbot
-
-
Closed
{"report":{"fcp":947.1000001430511,"ttfb":162.40000009536743,"pageVisibility":"visible","entityId":66660,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"e7a33f36-bfd4-4e2a-a78f-5caf72f8461f","navigationType":0,"readyForUser":1008.5,"redirectCount":0,"resourceLoadedEnd":812.4000000953674,"resourceLoadedStart":167.90000009536743,"resourceTiming":[{"duration":271.39999985694885,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":167.90000009536743,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":167.90000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":439.2999999523163,"responseStart":0,"secureConnectionStart":0},{"duration":271.59999990463257,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":168.20000004768372,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":168.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":439.7999999523163,"responseStart":0,"secureConnectionStart":0},{"duration":324,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":168.40000009536743,"connectEnd":168.40000009536743,"connectStart":168.40000009536743,"domainLookupEnd":168.40000009536743,"domainLookupStart":168.40000009536743,"fetchStart":168.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":443.2000000476837,"responseEnd":492.40000009536743,"responseStart":455,"secureConnectionStart":168.40000009536743},{"duration":340,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":168.40000009536743,"connectEnd":168.40000009536743,"connectStart":168.40000009536743,"domainLookupEnd":168.40000009536743,"domainLookupStart":168.40000009536743,"fetchStart":168.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":444.10000014305115,"responseEnd":508.40000009536743,"responseStart":458.90000009536743,"secureConnectionStart":168.40000009536743},{"duration":289.19999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":168.60000014305115,"connectEnd":168.60000014305115,"connectStart":168.60000014305115,"domainLookupEnd":168.60000014305115,"domainLookupStart":168.60000014305115,"fetchStart":168.60000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":445,"responseEnd":457.7999999523163,"responseStart":457,"secureConnectionStart":168.60000014305115},{"duration":293.2000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":168.70000004768372,"connectEnd":168.70000004768372,"connectStart":168.70000004768372,"domainLookupEnd":168.70000004768372,"domainLookupStart":168.70000004768372,"fetchStart":168.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":446.2000000476837,"responseEnd":461.90000009536743,"responseStart":461.10000014305115,"secureConnectionStart":168.70000004768372},{"duration":303.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":168.79999995231628,"connectEnd":168.79999995231628,"connectStart":168.79999995231628,"domainLookupEnd":168.79999995231628,"domainLookupStart":168.79999995231628,"fetchStart":168.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":448.10000014305115,"responseEnd":472.2000000476837,"responseStart":471.40000009536743,"secureConnectionStart":168.79999995231628},{"duration":277.7999999523163,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":168.90000009536743,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":168.90000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":446.7000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":307,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":169,"connectEnd":169,"connectStart":169,"domainLookupEnd":169,"domainLookupStart":169,"fetchStart":169,"redirectEnd":0,"redirectStart":0,"requestStart":450,"responseEnd":476,"responseStart":475.10000014305115,"secureConnectionStart":169},{"duration":279.39999985694885,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":169.10000014305115,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":169.10000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":448.5,"responseStart":0,"secureConnectionStart":0},{"duration":314.59999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":169.20000004768372,"connectEnd":169.20000004768372,"connectStart":169.20000004768372,"domainLookupEnd":169.20000004768372,"domainLookupStart":169.20000004768372,"fetchStart":169.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":451.40000009536743,"responseEnd":483.7999999523163,"responseStart":482.7999999523163,"secureConnectionStart":169.20000004768372},{"duration":626.6000001430511,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":179.79999995231628,"connectEnd":179.79999995231628,"connectStart":179.79999995231628,"domainLookupEnd":179.79999995231628,"domainLookupStart":179.79999995231628,"fetchStart":179.79999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":581.7000000476837,"responseEnd":806.4000000953674,"responseStart":800,"secureConnectionStart":179.79999995231628},{"duration":632.1000001430511,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":180.29999995231628,"connectEnd":180.29999995231628,"connectStart":180.29999995231628,"domainLookupEnd":180.29999995231628,"domainLookupStart":180.29999995231628,"fetchStart":180.29999995231628,"redirectEnd":0,"redirectStart":0,"requestStart":690.1000001430511,"responseEnd":812.4000000953674,"responseStart":809.2999999523163,"secureConnectionStart":180.29999995231628},{"duration":201.70000004768372,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":688.2000000476837,"connectEnd":688.2000000476837,"connectStart":688.2000000476837,"domainLookupEnd":688.2000000476837,"domainLookupStart":688.2000000476837,"fetchStart":688.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":856.2000000476837,"responseEnd":889.9000000953674,"responseStart":888.5,"secureConnectionStart":688.2000000476837},{"duration":100.70000004768372,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":921.7999999523163,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":921.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1022.5,"responseStart":0,"secureConnectionStart":0},{"duration":120.90000009536743,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":940.5,"connectEnd":940.5,"connectStart":940.5,"domainLookupEnd":940.5,"domainLookupStart":940.5,"fetchStart":940.5,"redirectEnd":0,"redirectStart":0,"requestStart":1025.1000001430511,"responseEnd":1061.4000000953674,"responseStart":1060.6000001430511,"secureConnectionStart":940.5}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":39,"responseStart":162,"responseEnd":180,"domLoading":166,"domInteractive":1061,"domContentLoadedEventStart":1061,"domContentLoadedEventEnd":1100,"domComplete":1656,"loadEventStart":1656,"loadEventEnd":1656,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1041.6000001430511},{"name":"bigPipe.sidebar-id.end","time":1042.5},{"name":"bigPipe.activity-panel-pipe-id.start","time":1042.6000001430511},{"name":"bigPipe.activity-panel-pipe-id.end","time":1045.1000001430511},{"name":"activityTabFullyLoaded","time":1109.9000000953674}],"measures":[],"correlationId":"9ff2ae218da5a1","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":70,"dbReadsTimeInMs":11,"dbConnsTimeInMs":20,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}