Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-21834

Server crashes in key_copy upon INSERT into table with long unique multi-part key and auto-increment

Details

    Description

      CREATE TABLE t1 (a INT AUTO_INCREMENT, b VARCHAR(1024), UNIQUE (b,a)) ENGINE=MyISAM;
      INSERT INTO t1 () VALUES ();
       
      # Cleanup
      DROP TABLE t1;
      

      10.4 a17a327f

      #3  <signal handler called>
      #4  0x0000560f03088abe in key_copy (to_key=0x7fbae4a47ce9 "\230\202\003\017V", from_record=0x7fbad412a0f8 "\377", key_info=0x7fbad400bc88, key_length=1016, with_zerofill=false) at /data/src/10.4/sql/key.cc:150
      #5  0x0000560f036ed3e8 in ha_myisam::get_auto_increment (this=0x7fbad4132b78, offset=1, increment=1, nb_desired_values=1, first_value=0x7fbae4a48108, nb_reserved_values=0x7fbae4a48110) at /data/src/10.4/storage/myisam/ha_myisam.cc:2306
      #6  0x0000560f02f727d1 in handler::update_auto_increment (this=0x7fbad4132b78) at /data/src/10.4/sql/handler.cc:3377
      #7  0x0000560f036e8958 in ha_myisam::write_row (this=0x7fbad4132b78, buf=0x7fbad412a0f8 "\377") at /data/src/10.4/storage/myisam/ha_myisam.cc:946
      #8  0x0000560f02f7bdaa in handler::ha_write_row (this=0x7fbad4132b78, buf=0x7fbad412a0f8 "\377") at /data/src/10.4/sql/handler.cc:6675
      #9  0x0000560f02bc125c in write_record (thd=0x7fbad4000af0, table=0x7fbad400ae20, info=0x7fbae4a48490) at /data/src/10.4/sql/sql_insert.cc:2056
      #10 0x0000560f02bbe1c7 in mysql_insert (thd=0x7fbad4000af0, table_list=0x7fbad4013280, fields=..., values_list=..., update_fields=..., update_values=..., duplic=DUP_ERROR, ignore=false) at /data/src/10.4/sql/sql_insert.cc:1078
      #11 0x0000560f02c0c6dd in mysql_execute_command (thd=0x7fbad4000af0) at /data/src/10.4/sql/sql_parse.cc:4528
      #12 0x0000560f02c18e67 in mysql_parse (thd=0x7fbad4000af0, rawbuf=0x7fbad4013198 "INSERT INTO t1 () VALUES ()", length=27, parser_state=0x7fbae4a49160, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:7900
      #13 0x0000560f02c0404a in dispatch_command (command=COM_QUERY, thd=0x7fbad4000af0, packet=0x7fbad4136221 "INSERT INTO t1 () VALUES ()", packet_length=27, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:1842
      #14 0x0000560f02c026d7 in do_command (thd=0x7fbad4000af0) at /data/src/10.4/sql/sql_parse.cc:1360
      #15 0x0000560f02d8b943 in do_handle_one_connection (connect=0x560f05898ce0) at /data/src/10.4/sql/sql_connect.cc:1412
      #16 0x0000560f02d8b692 in handle_one_connection (arg=0x560f05898ce0) at /data/src/10.4/sql/sql_connect.cc:1316
      #17 0x0000560f03792585 in pfs_spawn_thread (arg=0x560f058b4c80) at /data/src/10.4/storage/perfschema/pfs.cc:1869
      #18 0x00007fbaec8284a4 in start_thread (arg=0x7fbae4a4a700) at pthread_create.c:456
      #19 0x00007fbaea95cd0f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97
      

      Reproducible on 10.4, 10.5. Upd: Fixed in 10.5, but not in 10.4
      Reproducible on all of debug, ASAN, and non-debug with similarly looking stack traces. On non-debug build the crash is sporadic, though.

      The failure appeared in 10.4 tree with this commit:

      commit bd7f7b14163d0696aa92c90deeab16d63ae6bbd6
      Author: Sergei Golubchik
      Date:   Thu Feb 21 22:42:00 2019 +0100
       
          MDEV-371 Unique Index for long columns
      

      Attachments

        Issue Links

          Activity

            presumably fixed in bb-10.5-monty, needs to be rechecked when the fix is pushed into the main branch

            serg Sergei Golubchik added a comment - presumably fixed in bb-10.5-monty, needs to be rechecked when the fix is pushed into the main branch

            Fixed in 10.5

            sachin.setiya.007 Sachin Setiya (Inactive) added a comment - Fixed in 10.5

            MDEV-22747 will also fix this in 10.4 (bb-10.4-sachin2)

            sachin.setiya.007 Sachin Setiya (Inactive) added a comment - MDEV-22747 will also fix this in 10.4 (bb-10.4-sachin2)
            elenst Elena Stepanova added a comment - - edited

            For the sake of JIRA search, a very similar test case with a slightly different stack trace and extra debug assertion, also fixed in 10.5+, apparently by the same patch, but still fails in 10.4:

            CREATE TABLE t1 (id INT AUTO_INCREMENT, a VARBINARY(1024), UNIQUE(a,id), KEY(a)) ENGINE=MyISAM;
            INSERT INTO t1 (a) VALUES ('foo');
            

            10.4 7ae37ff7 non-debug ASAN

            ==748798==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ff159825398 at pc 0x7ff163858f2d bp 0x7ff159824de0 sp 0x7ff159824588
            WRITE of size 997 at 0x7ff159825398 thread T5
                #0 0x7ff163858f2c  (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c)
                #1 0x55ce8227139b in Field_varstring::get_key_image(unsigned char*, unsigned int, Field::imagetype) /data/src/10.4/sql/field.cc:8118
                #2 0x55ce82664efc in key_copy(unsigned char*, unsigned char const*, st_key*, unsigned int, bool) /data/src/10.4/sql/key.cc:149
                #3 0x55ce83249e82 in ha_myisam::get_auto_increment(unsigned long long, unsigned long long, unsigned long long, unsigned long long*, unsigned long long*) /data/src/10.4/storage/myisam/ha_myisam.cc:2318
                #4 0x55ce8230b827 in handler::update_auto_increment() /data/src/10.4/sql/handler.cc:3419
                #5 0x55ce83242c0b in ha_myisam::write_row(unsigned char const*) /data/src/10.4/storage/myisam/ha_myisam.cc:951
                #6 0x55ce8231cd02 in handler::ha_write_row(unsigned char const*) /data/src/10.4/sql/handler.cc:6755
                #7 0x55ce81adb40c in write_record(THD*, TABLE*, st_copy_info*) /data/src/10.4/sql/sql_insert.cc:2060
                #8 0x55ce81b032fb in mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) /data/src/10.4/sql/sql_insert.cc:1078
                #9 0x55ce81ba2da5 in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:4597
                #10 0x55ce81bba2df in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:7989
                #11 0x55ce81bc32aa in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1855
                #12 0x55ce81bc8df4 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1373
                #13 0x55ce81f34016 in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1412
                #14 0x55ce81f3459e in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1316
                #15 0x55ce833a7528 in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
                #16 0x7ff1636a4608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
                #17 0x7ff162f0f292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
             
            Address 0x7ff159825398 is located in stack of thread T5 at offset 1048 in frame
                #0 0x55ce83249bdf in ha_myisam::get_auto_increment(unsigned long long, unsigned long long, unsigned long long, unsigned long long*, unsigned long long*) /data/src/10.4/storage/myisam/ha_myisam.cc:2300
             
              This frame has 1 object(s):
                [48, 1048) 'key' (line 2303) <== Memory access at offset 1048 overflows this variable
            HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
                  (longjmp and C++ exceptions *are* supported)
            Thread T5 created by T0 here:
                #0 0x7ff16382b805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805)
                #1 0x55ce833af07e in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919
                #2 0x55ce8191c3de in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275
                #3 0x55ce8191c3de in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6243
                #4 0x55ce81928802 in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6313
                #5 0x55ce81928e22 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6411
                #6 0x55ce81929f3d in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6569
                #7 0x55ce8192b9ac in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5901
                #8 0x7ff162e140b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
             
            SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c) 
            Shadow bytes around the buggy address:
              0x0ffeab2fca20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              0x0ffeab2fca30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              0x0ffeab2fca40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              0x0ffeab2fca50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              0x0ffeab2fca60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
            =>0x0ffeab2fca70: 00 00 00[f3]f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3
              0x0ffeab2fca80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
              0x0ffeab2fca90: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2
              0x0ffeab2fcaa0: f2 f2 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00
              0x0ffeab2fcab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              0x0ffeab2fcac0: 00 00 00 00 f1 f1 f1 f1 f1 f1 00 00 00 00 00 00
            Shadow byte legend (one shadow byte represents 8 application bytes):
              Addressable:           00
              Partially addressable: 01 02 03 04 05 06 07 
              Heap left redzone:       fa
              Freed heap region:       fd
              Stack left redzone:      f1
              Stack mid redzone:       f2
              Stack right redzone:     f3
              Stack after return:      f5
              Stack use after scope:   f8
              Global redzone:          f9
              Global init order:       f6
              Poisoned by user:        f7
              Container overflow:      fc
              Array cookie:            ac
              Intra object redzone:    bb
              ASan internal:           fe
              Left alloca redzone:     ca
              Right alloca redzone:    cb
              Shadow gap:              cc
            ==748798==ABORTING
            210401  3:10:22 [ERROR] mysqld got signal 6 ;
            This could be because you hit a bug. It is also possible that this binary
            or one of the libraries it was linked against is corrupt, improperly built,
            or misconfigured. This error can also be caused by malfunctioning hardware.
             
            To report this bug, see https://mariadb.com/kb/en/reporting-bugs
             
            We will try our best to scrape up some info that will hopefully help
            diagnose the problem, but since we have already crashed, 
            something is definitely wrong and this may fail.
             
            Server version: 10.4.19-MariaDB-log
            key_buffer_size=1048576
            read_buffer_size=131072
            max_used_connections=1
            max_threads=153
            thread_count=1
            It is possible that mysqld could use up to 
            key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63542 K  bytes of memory
            Hope that's ok; if not, decrease some variables in the equation.
             
            Thread pointer: 0x62b00005b208
            Attempting backtrace. You can use the following information to find out
            where mysqld died. If you see no messages after this, something went
            terribly wrong...
            stack_bottom = 0x7ff15982b950 thread_stack 0x5fc00
            /lib/x86_64-linux-gnu/libasan.so.5(+0x6cd30)[0x7ff16385dd30]
            /mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld(my_print_stacktrace+0xf6)[0x55ce83481856]
            /mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld(handle_fatal_signal+0xbc8)[0x55ce822ef0a8]
            sigaction.c:0(__restore_rt)[0x7ff1636b03c0]
            /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xcb)[0x7ff162e3318b]
            /lib/x86_64-linux-gnu/libc.so.6(abort+0x12b)[0x7ff162e12859]
            /lib/x86_64-linux-gnu/libasan.so.5(+0x12b6a2)[0x7ff16391c6a2]
            /lib/x86_64-linux-gnu/libasan.so.5(+0x13624c)[0x7ff16392724c]
            /lib/x86_64-linux-gnu/libasan.so.5(+0x1178ec)[0x7ff1639088ec]
            /lib/x86_64-linux-gnu/libasan.so.5(+0x117363)[0x7ff163908363]
            /lib/x86_64-linux-gnu/libasan.so.5(+0x67f4f)[0x7ff163858f4f]
            sql/field.cc:8118(Field_varstring::get_key_image(unsigned char*, unsigned int, Field::imagetype))[0x55ce8227139c]
            sql/key.cc:151(key_copy(unsigned char*, unsigned char const*, st_key*, unsigned int, bool))[0x55ce82664efd]
            myisam/ha_myisam.cc:2322(ha_myisam::get_auto_increment(unsigned long long, unsigned long long, unsigned long long, unsigned long long*, unsigned long long*))[0x55ce83249e83]
            sql/handler.cc:3423(handler::update_auto_increment())[0x55ce8230b828]
            myisam/ha_myisam.cc:951(ha_myisam::write_row(unsigned char const*))[0x55ce83242c0c]
            sql/handler.cc:6755(handler::ha_write_row(unsigned char const*))[0x55ce8231cd03]
            sql/sql_insert.cc:2060(write_record(THD*, TABLE*, st_copy_info*))[0x55ce81adb40d]
            sql/sql_insert.cc:1078(mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool))[0x55ce81b032fc]
            sql/sql_parse.cc:4597(mysql_execute_command(THD*))[0x55ce81ba2da6]
            sql/sql_parse.cc:8006(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55ce81bba2e0]
            sql/sql_parse.cc:1858(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55ce81bc32ab]
            sql/sql_parse.cc:1373(do_command(THD*))[0x55ce81bc8df5]
            sql/sql_connect.cc:1412(do_handle_one_connection(CONNECT*))[0x55ce81f34017]
            sql/sql_connect.cc:1318(handle_one_connection)[0x55ce81f3459f]
            perfschema/pfs.cc:1872(pfs_spawn_thread)[0x55ce833a7529]
            nptl/pthread_create.c:478(start_thread)[0x7ff1636a4609]
            /lib/x86_64-linux-gnu/libc.so.6(clone+0x43)[0x7ff162f0f293]
             
            Trying to get some variables.
            Some pointers may be invalid and cause the dump to abort.
            Query (0x62b000062228): INSERT INTO t1 (a) VALUES ('foo')
             
            Connection ID (thread ID): 4
            Status: NOT_KILLED
             
            Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on
             
            The manual page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mysqld/ contains
            information that should help you find out what is causing the crash.
            Writing a core file...
            Working directory at /dev/shm/var_auto_Fqdx/mysqld.1/data
            Resource Limits:
            Limit                     Soft Limit           Hard Limit           Units     
            Max cpu time              unlimited            unlimited            seconds   
            Max file size             unlimited            unlimited            bytes     
            Max data size             unlimited            unlimited            bytes     
            Max stack size            8388608              unlimited            bytes     
            Max core file size        unlimited            unlimited            bytes     
            Max resident set          unlimited            unlimited            bytes     
            Max processes             385874               385874               processes 
            Max open files            1024                 1024                 files     
            Max locked memory         67108864             67108864             bytes     
            Max address space         unlimited            unlimited            bytes     
            Max file locks            unlimited            unlimited            locks     
            Max pending signals       385874               385874               signals   
            Max msgqueue size         819200               819200               bytes     
            Max nice priority         0                    0                    
            Max realtime priority     0                    0                    
            Max realtime timeout      unlimited            unlimited            us        
            Core pattern: |/usr/share/apport/apport %p %s %c %d %P %E
             
            ----------SERVER LOG END-------------
             
             
             - found 'core' (0/5)
             
            Trying 'dbx' to get a backtrace
             
            Trying 'gdb' to get a backtrace from coredump /mnt-hd8t/bld/10.4-rel-asan-nightly/mysql-test/var/log/bug.keyimage1/mysqld.1/data/core
            Core generated by '/mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld'
            Output from gdb follows. The first stack trace is from the failing thread.
            The following stack traces are from all threads (so the failing one is
            duplicated).
            --------------------------
            [New LWP 748805]
            [New LWP 748798]
            [New LWP 748800]
            [New LWP 748802]
            [New LWP 748799]
            [New LWP 748801]
            [Thread debugging using libthread_db enabled]
            Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
            Core was generated by `/mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld --defaults-group-suffix=.1 --def'.
            Program terminated with signal SIGABRT, Aborted.
            #0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56
            56	../sysdeps/unix/sysv/linux/pthread_kill.c: No such file or directory.
            [Current thread is 1 (Thread 0x7ff15982c300 (LWP 748805))]
            #0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56
            #1  0x000055ce8348140f in my_write_core (sig=sig@entry=6) at /data/src/10.4/mysys/stacktrace.c:386
            #2  0x000055ce822ef0db in handle_fatal_signal (sig=<optimized out>) at /data/src/10.4/sql/signal_handler.cc:344
            #3  <signal handler called>
            #4  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
            #5  0x00007ff162e12859 in __GI_abort () at abort.c:79
            #6  0x00007ff16391c6a2 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #7  0x00007ff16392724c in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #8  0x00007ff1639088ec in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #9  0x00007ff163908363 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #10 0x00007ff163858f4f in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #11 0x000055ce8227139c in Field_varstring::get_key_image (this=<optimized out>, buff=0x7ff159824fba "\003", length=<optimized out>, type_arg=<optimized out>) at /data/src/10.4/sql/sql_string.h:206
            #12 0x000055ce82664efd in key_copy (to_key=0x7ff159824fba "\003", to_key@entry=0x7ff159824fb0 "", from_record=0x61d0000780a8 "\374", key_info=0x619000085ca8, key_length=1015, with_zerofill=with_zerofill@entry=false) at /data/src/10.4/sql/key.cc:149
            #13 0x000055ce83249e83 in ha_myisam::get_auto_increment (this=0x61c00002e0a8, offset=<optimized out>, increment=<optimized out>, nb_desired_values=<optimized out>, first_value=<optimized out>, nb_reserved_values=<optimized out>) at /data/src/10.4/storage/myisam/ha_myisam.cc:2318
            #14 0x000055ce8230b828 in handler::update_auto_increment (this=this@entry=0x61c00002e0a8) at /data/src/10.4/sql/handler.cc:3419
            #15 0x000055ce83242c0c in ha_myisam::write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/storage/myisam/ha_myisam.cc:951
            #16 0x000055ce8231cd03 in handler::ha_write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/sql/handler.cc:6755
            #17 0x000055ce81adb40d in write_record (thd=thd@entry=0x62b00005b208, table=table@entry=0x620000043088, info=info@entry=0x7ff159825d00) at /data/src/10.4/sql/sql_insert.cc:2060
            #18 0x000055ce81b032fc in mysql_insert (thd=thd@entry=0x62b00005b208, table_list=<optimized out>, fields=..., values_list=..., update_fields=..., update_values=..., duplic=<optimized out>, ignore=<optimized out>) at /data/src/10.4/sql/sql_insert.cc:1078
            #19 0x000055ce81ba2da6 in mysql_execute_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:4597
            #20 0x000055ce81bba2e0 in mysql_parse (thd=thd@entry=0x62b00005b208, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7ff15982a0d0, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /data/src/10.4/sql/sql_parse.cc:7989
            #21 0x000055ce81bc32ab in dispatch_command (command=COM_QUERY, thd=0x62b00005b208, packet=<optimized out>, packet_length=<optimized out>, is_com_multi=<optimized out>, is_next_command=<optimized out>) at /data/src/10.4/sql/sql_class.h:1183
            #22 0x000055ce81bc8df5 in do_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:1373
            #23 0x000055ce81f34017 in do_handle_one_connection (connect=connect@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1412
            #24 0x000055ce81f3459f in handle_one_connection (arg=arg@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1316
            #25 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000004908) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #26 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #27 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
             
            Thread 6 (Thread 0x7ff159916300 (LWP 748801)):
            #0  0x00007ff162e34322 in __GI___sigtimedwait (set=0x7ff159915870, info=0x7ff159915910, timeout=0x0) at ../sysdeps/unix/sysv/linux/sigtimedwait.c:29
            #1  0x00007ff163878111 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #2  0x000055ce81915279 in my_sigwait (code=<synthetic pointer>, sig=0x7ff159915670, set=0x7ff159915870) at /data/src/10.4/include/my_pthread.h:196
            #3  signal_hand (arg=arg@entry=0x0) at /data/src/10.4/sql/mysqld.cc:3224
            #4  0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000003a08) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #5  0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #6  0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
             
            Thread 5 (Thread 0x7ff15b818700 (LWP 748799)):
            #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7ff15b817d20, clockid=<optimized out>, expected=0, futex_word=0x55ce84a96a88 <COND_timer+40>) at ../sysdeps/nptl/futex-internal.h:320
            #1  __pthread_cond_wait_common (abstime=0x7ff15b817d20, clockid=<optimized out>, mutex=0x55ce84a96ac0 <LOCK_timer>, cond=0x55ce84a96a60 <COND_timer>) at pthread_cond_wait.c:520
            #2  __pthread_cond_timedwait (cond=cond@entry=0x55ce84a96a60 <COND_timer>, mutex=mutex@entry=0x55ce84a96ac0 <LOCK_timer>, abstime=abstime@entry=0x7ff15b817d20) at pthread_cond_wait.c:656
            #3  0x000055ce8348e7bd in inline_mysql_cond_timedwait (that=0x55ce84a96a60 <COND_timer>, mutex=0x55ce84a96ac0 <LOCK_timer>, src_file=0x55ce8398de00 "/data/src/10.4/mysys/thr_timer.c", src_line=292, abstime=0x7ff15b817d20) at /data/src/10.4/include/mysql/psi/mysql_thread.h:1211
            #4  timer_handler (arg=arg@entry=0x0) at /data/src/10.4/mysys/thr_timer.c:292
            #5  0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000001c08) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #6  0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #7  0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
             
            Thread 4 (Thread 0x7ff1598a4300 (LWP 748802)):
            #0  futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55ce841e454c <COND_manager+44>) at ../sysdeps/nptl/futex-internal.h:183
            #1  __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55ce841e4580 <LOCK_manager>, cond=0x55ce841e4520 <COND_manager>) at pthread_cond_wait.c:508
            #2  __pthread_cond_wait (cond=cond@entry=0x55ce841e4520 <COND_manager>, mutex=mutex@entry=0x55ce841e4580 <LOCK_manager>) at pthread_cond_wait.c:638
            #3  0x000055ce81b7db0e in inline_mysql_cond_wait (that=0x55ce841e4520 <COND_manager>, mutex=0x55ce841e4580 <LOCK_manager>, src_file=0x55ce83639320 "/data/src/10.4/sql/sql_manager.cc", src_line=102) at /data/src/10.4/include/mysql/psi/mysql_thread.h:1174
            #4  handle_manager (arg=arg@entry=0x0) at /data/src/10.4/sql/sql_manager.cc:102
            #5  0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000004408) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #6  0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #7  0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
             
            Thread 3 (Thread 0x7ff15a117700 (LWP 748800)):
            #0  futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7ff15a116c20, clockid=<optimized out>, expected=0, futex_word=0x55ce84a80488 <COND_checkpoint+40>) at ../sysdeps/nptl/futex-internal.h:320
            #1  __pthread_cond_wait_common (abstime=0x7ff15a116c20, clockid=<optimized out>, mutex=0x55ce84a804c0 <LOCK_checkpoint>, cond=0x55ce84a80460 <COND_checkpoint>) at pthread_cond_wait.c:520
            #2  __pthread_cond_timedwait (cond=cond@entry=0x55ce84a80460 <COND_checkpoint>, mutex=mutex@entry=0x55ce84a804c0 <LOCK_checkpoint>, abstime=abstime@entry=0x7ff15a116c20) at pthread_cond_wait.c:656
            #3  0x000055ce8313c34c in inline_mysql_cond_timedwait (src_file=0x55ce8394b9a0 "/data/src/10.4/storage/maria/ma_servicethread.c", src_line=115, abstime=0x7ff15a116c20, mutex=0x55ce84a804c0 <LOCK_checkpoint>, that=0x55ce84a80460 <COND_checkpoint>) at /data/src/10.4/include/mysql/psi/mysql_thread.h:1211
            #4  my_service_thread_sleep (control=control@entry=0x55ce840ee620 <checkpoint_control>, sleep_time=<optimized out>) at /data/src/10.4/storage/maria/ma_servicethread.c:115
            #5  0x000055ce83128465 in ma_checkpoint_background (arg=arg@entry=0x1e) at /data/src/10.4/storage/maria/ma_checkpoint.c:707
            #6  0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000001e88) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #7  0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #8  0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
             
            Thread 2 (Thread 0x7ff162ddf480 (LWP 748798)):
            #0  0x00007ff162f02aff in __GI___poll (fds=0x7fff5b7cfb20, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29
            #1  0x00007ff16382d5ba in poll () from /lib/x86_64-linux-gnu/libasan.so.5
            #2  0x000055ce819298f6 in handle_connections_sockets () at /data/src/10.4/sql/mysqld.cc:6465
            #3  0x000055ce8192b9ad in mysqld_main (argc=<optimized out>, argv=<optimized out>) at /data/src/10.4/sql/mysqld.cc:5901
            #4  0x00007ff162e140b3 in __libc_start_main (main=0x55ce818c0e50 <main(int, char**)>, argc=6, argv=0x7fff5b7d0aa8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff5b7d0a98) at ../csu/libc-start.c:308
            #5  0x000055ce8190ea0e in _start () at /data/src/10.4/sql/mysqld.cc:4653
             
            Thread 1 (Thread 0x7ff15982c300 (LWP 748805)):
            #0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56
            #1  0x000055ce8348140f in my_write_core (sig=sig@entry=6) at /data/src/10.4/mysys/stacktrace.c:386
            #2  0x000055ce822ef0db in handle_fatal_signal (sig=<optimized out>) at /data/src/10.4/sql/signal_handler.cc:344
            #3  <signal handler called>
            #4  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
            #5  0x00007ff162e12859 in __GI_abort () at abort.c:79
            #6  0x00007ff16391c6a2 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #7  0x00007ff16392724c in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #8  0x00007ff1639088ec in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #9  0x00007ff163908363 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #10 0x00007ff163858f4f in ?? () from /lib/x86_64-linux-gnu/libasan.so.5
            #11 0x000055ce8227139c in Field_varstring::get_key_image (this=<optimized out>, buff=0x7ff159824fba "\003", length=<optimized out>, type_arg=<optimized out>) at /data/src/10.4/sql/sql_string.h:206
            #12 0x000055ce82664efd in key_copy (to_key=0x7ff159824fba "\003", to_key@entry=0x7ff159824fb0 "", from_record=0x61d0000780a8 "\374", key_info=0x619000085ca8, key_length=1015, with_zerofill=with_zerofill@entry=false) at /data/src/10.4/sql/key.cc:149
            #13 0x000055ce83249e83 in ha_myisam::get_auto_increment (this=0x61c00002e0a8, offset=<optimized out>, increment=<optimized out>, nb_desired_values=<optimized out>, first_value=<optimized out>, nb_reserved_values=<optimized out>) at /data/src/10.4/storage/myisam/ha_myisam.cc:2318
            #14 0x000055ce8230b828 in handler::update_auto_increment (this=this@entry=0x61c00002e0a8) at /data/src/10.4/sql/handler.cc:3419
            #15 0x000055ce83242c0c in ha_myisam::write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/storage/myisam/ha_myisam.cc:951
            #16 0x000055ce8231cd03 in handler::ha_write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/sql/handler.cc:6755
            #17 0x000055ce81adb40d in write_record (thd=thd@entry=0x62b00005b208, table=table@entry=0x620000043088, info=info@entry=0x7ff159825d00) at /data/src/10.4/sql/sql_insert.cc:2060
            #18 0x000055ce81b032fc in mysql_insert (thd=thd@entry=0x62b00005b208, table_list=<optimized out>, fields=..., values_list=..., update_fields=..., update_values=..., duplic=<optimized out>, ignore=<optimized out>) at /data/src/10.4/sql/sql_insert.cc:1078
            #19 0x000055ce81ba2da6 in mysql_execute_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:4597
            #20 0x000055ce81bba2e0 in mysql_parse (thd=thd@entry=0x62b00005b208, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7ff15982a0d0, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /data/src/10.4/sql/sql_parse.cc:7989
            #21 0x000055ce81bc32ab in dispatch_command (command=COM_QUERY, thd=0x62b00005b208, packet=<optimized out>, packet_length=<optimized out>, is_com_multi=<optimized out>, is_next_command=<optimized out>) at /data/src/10.4/sql/sql_class.h:1183
            #22 0x000055ce81bc8df5 in do_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:1373
            #23 0x000055ce81f34017 in do_handle_one_connection (connect=connect@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1412
            #24 0x000055ce81f3459f in handle_one_connection (arg=arg@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1316
            #25 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000004908) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #26 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #27 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
            

            10.4 7ae37ff7 debug

            mysqld: /data/src/10.4/sql/field.cc:7786: virtual String* Field_varstring::val_str(String*, String*): Assertion `marked_for_read()' failed.
            210401  3:11:13 [ERROR] mysqld got signal 6 ;
             
            #7  0x00007f8fb0b66f36 in __GI___assert_fail (assertion=0x55822306d2a5 "marked_for_read()", file=0x55822306ccdb "/data/src/10.4/sql/field.cc", line=7786, function=0x55822306fa60 "virtual String* Field_varstring::val_str(String*, String*)") at assert.c:101
            #8  0x000055822251454d in Field_varstring::val_str (this=0x7f8f9818df38, val_buffer=0x7f8f981a5390, val_ptr=0x7f8f981a5390) at /data/src/10.4/sql/field.cc:7786
            #9  0x0000558222561686 in Item_field::val_str (this=0x7f8f981a5360, str=0x7f8f981a5390) at /data/src/10.4/sql/item.cc:3170
            #10 0x0000558222268928 in Item::val_str (this=0x7f8f981a5360) at /data/src/10.4/sql/item.h:903
            #11 0x00005582225ce4cb in Item_func_hash::val_int (this=0x7f8f98194398) at /data/src/10.4/sql/item_func.cc:1744
            #12 0x000055822256c01e in Item::save_int_in_field (this=0x7f8f98194398, field=0x7f8f9818e020, no_conversions=false) at /data/src/10.4/sql/item.cc:6580
            #13 0x00005582223f6036 in Type_handler_int_result::Item_save_in_field (this=0x55822376cbb0 <type_handler_long>, item=0x7f8f98194398, field=0x7f8f9818e020, no_conversions=false) at /data/src/10.4/sql/sql_type.cc:3749
            #14 0x000055822256c0d1 in Item::save_in_field (this=0x7f8f98194398, field=0x7f8f9818e020, no_conversions=false) at /data/src/10.4/sql/item.cc:6590
            #15 0x000055822230ea83 in TABLE::update_virtual_fields (this=0x7f8f981a39f0, h=0x7f8f981a7178, update_mode=VCOL_UPDATE_FOR_WRITE) at /data/src/10.4/sql/table.cc:8376
            #16 0x000055822213685c in fill_record (thd=0x7f8f98000d90, table_arg=0x7f8f981a39f0, fields=..., values=..., ignore_errors=false, update=false) at /data/src/10.4/sql/sql_base.cc:8606
            #17 0x0000558222136cfc in fill_record_n_invoke_before_triggers (thd=0x7f8f98000d90, table=0x7f8f981a39f0, fields=..., values=..., ignore_errors=false, event=TRG_EVENT_INSERT) at /data/src/10.4/sql/sql_base.cc:8734
            #18 0x0000558222181503 in mysql_insert (thd=0x7f8f98000d90, table_list=0x7f8f98014870, fields=..., values_list=..., update_fields=..., update_values=..., duplic=DUP_ERROR, ignore=false) at /data/src/10.4/sql/sql_insert.cc:974
            #19 0x00005582221d0916 in mysql_execute_command (thd=0x7f8f98000d90) at /data/src/10.4/sql/sql_parse.cc:4597
            #20 0x00005582221dc19d in mysql_parse (thd=0x7f8f98000d90, rawbuf=0x7f8f98014788 "INSERT INTO t1 (a) VALUES ('foo')", length=33, parser_state=0x7f8faab37550, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:7989
            #21 0x00005582221c83f9 in dispatch_command (command=COM_QUERY, thd=0x7f8f98000d90, packet=0x7f8f9800abe1 "INSERT INTO t1 (a) VALUES ('foo')", packet_length=33, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:1855
            #22 0x00005582221c6c61 in do_command (thd=0x7f8f98000d90) at /data/src/10.4/sql/sql_parse.cc:1373
            #23 0x00005582223569c1 in do_handle_one_connection (connect=0x5582249b6c50) at /data/src/10.4/sql/sql_connect.cc:1412
            #24 0x000055822235670a in handle_one_connection (arg=0x5582249b6c50) at /data/src/10.4/sql/sql_connect.cc:1316
            #25 0x0000558222d7de1e in pfs_spawn_thread (arg=0x55822498fcc0) at /data/src/10.4/storage/perfschema/pfs.cc:1869
            #26 0x00007f8fb13e7609 in start_thread (arg=<optimized out>) at pthread_create.c:477
            #27 0x00007f8fb0c52293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
            

            elenst Elena Stepanova added a comment - - edited For the sake of JIRA search, a very similar test case with a slightly different stack trace and extra debug assertion, also fixed in 10.5+, apparently by the same patch, but still fails in 10.4: CREATE TABLE t1 (id INT AUTO_INCREMENT, a VARBINARY(1024), UNIQUE (a,id), KEY (a)) ENGINE=MyISAM; INSERT INTO t1 (a) VALUES ( 'foo' ); 10.4 7ae37ff7 non-debug ASAN ==748798==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ff159825398 at pc 0x7ff163858f2d bp 0x7ff159824de0 sp 0x7ff159824588 WRITE of size 997 at 0x7ff159825398 thread T5 #0 0x7ff163858f2c (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c) #1 0x55ce8227139b in Field_varstring::get_key_image(unsigned char*, unsigned int, Field::imagetype) /data/src/10.4/sql/field.cc:8118 #2 0x55ce82664efc in key_copy(unsigned char*, unsigned char const*, st_key*, unsigned int, bool) /data/src/10.4/sql/key.cc:149 #3 0x55ce83249e82 in ha_myisam::get_auto_increment(unsigned long long, unsigned long long, unsigned long long, unsigned long long*, unsigned long long*) /data/src/10.4/storage/myisam/ha_myisam.cc:2318 #4 0x55ce8230b827 in handler::update_auto_increment() /data/src/10.4/sql/handler.cc:3419 #5 0x55ce83242c0b in ha_myisam::write_row(unsigned char const*) /data/src/10.4/storage/myisam/ha_myisam.cc:951 #6 0x55ce8231cd02 in handler::ha_write_row(unsigned char const*) /data/src/10.4/sql/handler.cc:6755 #7 0x55ce81adb40c in write_record(THD*, TABLE*, st_copy_info*) /data/src/10.4/sql/sql_insert.cc:2060 #8 0x55ce81b032fb in mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool) /data/src/10.4/sql/sql_insert.cc:1078 #9 0x55ce81ba2da5 in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:4597 #10 0x55ce81bba2df in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:7989 #11 0x55ce81bc32aa in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1855 #12 0x55ce81bc8df4 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1373 #13 0x55ce81f34016 in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1412 #14 0x55ce81f3459e in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1316 #15 0x55ce833a7528 in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869 #16 0x7ff1636a4608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477 #17 0x7ff162f0f292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)   Address 0x7ff159825398 is located in stack of thread T5 at offset 1048 in frame #0 0x55ce83249bdf in ha_myisam::get_auto_increment(unsigned long long, unsigned long long, unsigned long long, unsigned long long*, unsigned long long*) /data/src/10.4/storage/myisam/ha_myisam.cc:2300   This frame has 1 object(s): [48, 1048) 'key' (line 2303) <== Memory access at offset 1048 overflows this variable HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork (longjmp and C++ exceptions *are* supported) Thread T5 created by T0 here: #0 0x7ff16382b805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805) #1 0x55ce833af07e in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919 #2 0x55ce8191c3de in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275 #3 0x55ce8191c3de in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6243 #4 0x55ce81928802 in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6313 #5 0x55ce81928e22 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6411 #6 0x55ce81929f3d in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6569 #7 0x55ce8192b9ac in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5901 #8 0x7ff162e140b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)   SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c) Shadow bytes around the buggy address: 0x0ffeab2fca20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0ffeab2fca30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0ffeab2fca40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0ffeab2fca50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0ffeab2fca60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0ffeab2fca70: 00 00 00[f3]f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 f3 0x0ffeab2fca80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 0x0ffeab2fca90: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f2 0x0ffeab2fcaa0: f2 f2 00 f2 f2 f2 00 00 f3 f3 00 00 00 00 00 00 0x0ffeab2fcab0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0ffeab2fcac0: 00 00 00 00 f1 f1 f1 f1 f1 f1 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==748798==ABORTING 210401 3:10:22 [ERROR] mysqld got signal 6 ; This could be because you hit a bug. It is also possible that this binary or one of the libraries it was linked against is corrupt, improperly built, or misconfigured. This error can also be caused by malfunctioning hardware.   To report this bug, see https://mariadb.com/kb/en/reporting-bugs   We will try our best to scrape up some info that will hopefully help diagnose the problem, but since we have already crashed, something is definitely wrong and this may fail.   Server version: 10.4.19-MariaDB-log key_buffer_size=1048576 read_buffer_size=131072 max_used_connections=1 max_threads=153 thread_count=1 It is possible that mysqld could use up to key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63542 K bytes of memory Hope that's ok; if not, decrease some variables in the equation.   Thread pointer: 0x62b00005b208 Attempting backtrace. You can use the following information to find out where mysqld died. If you see no messages after this, something went terribly wrong... stack_bottom = 0x7ff15982b950 thread_stack 0x5fc00 /lib/x86_64-linux-gnu/libasan.so.5(+0x6cd30)[0x7ff16385dd30] /mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld(my_print_stacktrace+0xf6)[0x55ce83481856] /mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld(handle_fatal_signal+0xbc8)[0x55ce822ef0a8] sigaction.c:0(__restore_rt)[0x7ff1636b03c0] /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xcb)[0x7ff162e3318b] /lib/x86_64-linux-gnu/libc.so.6(abort+0x12b)[0x7ff162e12859] /lib/x86_64-linux-gnu/libasan.so.5(+0x12b6a2)[0x7ff16391c6a2] /lib/x86_64-linux-gnu/libasan.so.5(+0x13624c)[0x7ff16392724c] /lib/x86_64-linux-gnu/libasan.so.5(+0x1178ec)[0x7ff1639088ec] /lib/x86_64-linux-gnu/libasan.so.5(+0x117363)[0x7ff163908363] /lib/x86_64-linux-gnu/libasan.so.5(+0x67f4f)[0x7ff163858f4f] sql/field.cc:8118(Field_varstring::get_key_image(unsigned char*, unsigned int, Field::imagetype))[0x55ce8227139c] sql/key.cc:151(key_copy(unsigned char*, unsigned char const*, st_key*, unsigned int, bool))[0x55ce82664efd] myisam/ha_myisam.cc:2322(ha_myisam::get_auto_increment(unsigned long long, unsigned long long, unsigned long long, unsigned long long*, unsigned long long*))[0x55ce83249e83] sql/handler.cc:3423(handler::update_auto_increment())[0x55ce8230b828] myisam/ha_myisam.cc:951(ha_myisam::write_row(unsigned char const*))[0x55ce83242c0c] sql/handler.cc:6755(handler::ha_write_row(unsigned char const*))[0x55ce8231cd03] sql/sql_insert.cc:2060(write_record(THD*, TABLE*, st_copy_info*))[0x55ce81adb40d] sql/sql_insert.cc:1078(mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool))[0x55ce81b032fc] sql/sql_parse.cc:4597(mysql_execute_command(THD*))[0x55ce81ba2da6] sql/sql_parse.cc:8006(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55ce81bba2e0] sql/sql_parse.cc:1858(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55ce81bc32ab] sql/sql_parse.cc:1373(do_command(THD*))[0x55ce81bc8df5] sql/sql_connect.cc:1412(do_handle_one_connection(CONNECT*))[0x55ce81f34017] sql/sql_connect.cc:1318(handle_one_connection)[0x55ce81f3459f] perfschema/pfs.cc:1872(pfs_spawn_thread)[0x55ce833a7529] nptl/pthread_create.c:478(start_thread)[0x7ff1636a4609] /lib/x86_64-linux-gnu/libc.so.6(clone+0x43)[0x7ff162f0f293]   Trying to get some variables. Some pointers may be invalid and cause the dump to abort. Query (0x62b000062228): INSERT INTO t1 (a) VALUES ('foo')   Connection ID (thread ID): 4 Status: NOT_KILLED   Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on   The manual page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mysqld/ contains information that should help you find out what is causing the crash. Writing a core file... Working directory at /dev/shm/var_auto_Fqdx/mysqld.1/data Resource Limits: Limit Soft Limit Hard Limit Units Max cpu time unlimited unlimited seconds Max file size unlimited unlimited bytes Max data size unlimited unlimited bytes Max stack size 8388608 unlimited bytes Max core file size unlimited unlimited bytes Max resident set unlimited unlimited bytes Max processes 385874 385874 processes Max open files 1024 1024 files Max locked memory 67108864 67108864 bytes Max address space unlimited unlimited bytes Max file locks unlimited unlimited locks Max pending signals 385874 385874 signals Max msgqueue size 819200 819200 bytes Max nice priority 0 0 Max realtime priority 0 0 Max realtime timeout unlimited unlimited us Core pattern: |/usr/share/apport/apport %p %s %c %d %P %E   ----------SERVER LOG END-------------     - found 'core' (0/5)   Trying 'dbx' to get a backtrace   Trying 'gdb' to get a backtrace from coredump /mnt-hd8t/bld/10.4-rel-asan-nightly/mysql-test/var/log/bug.keyimage1/mysqld.1/data/core Core generated by '/mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld' Output from gdb follows. The first stack trace is from the failing thread. The following stack traces are from all threads (so the failing one is duplicated). -------------------------- [New LWP 748805] [New LWP 748798] [New LWP 748800] [New LWP 748802] [New LWP 748799] [New LWP 748801] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/mnt-hd8t/bld/10.4-rel-asan-nightly/bin/mysqld --defaults-group-suffix=.1 --def'. Program terminated with signal SIGABRT, Aborted. #0 __pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56 56 ../sysdeps/unix/sysv/linux/pthread_kill.c: No such file or directory. [Current thread is 1 (Thread 0x7ff15982c300 (LWP 748805))] #0 __pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56 #1 0x000055ce8348140f in my_write_core (sig=sig@entry=6) at /data/src/10.4/mysys/stacktrace.c:386 #2 0x000055ce822ef0db in handle_fatal_signal (sig=<optimized out>) at /data/src/10.4/sql/signal_handler.cc:344 #3 <signal handler called> #4 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #5 0x00007ff162e12859 in __GI_abort () at abort.c:79 #6 0x00007ff16391c6a2 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #7 0x00007ff16392724c in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #8 0x00007ff1639088ec in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #9 0x00007ff163908363 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #10 0x00007ff163858f4f in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #11 0x000055ce8227139c in Field_varstring::get_key_image (this=<optimized out>, buff=0x7ff159824fba "\003", length=<optimized out>, type_arg=<optimized out>) at /data/src/10.4/sql/sql_string.h:206 #12 0x000055ce82664efd in key_copy (to_key=0x7ff159824fba "\003", to_key@entry=0x7ff159824fb0 "", from_record=0x61d0000780a8 "\374", key_info=0x619000085ca8, key_length=1015, with_zerofill=with_zerofill@entry=false) at /data/src/10.4/sql/key.cc:149 #13 0x000055ce83249e83 in ha_myisam::get_auto_increment (this=0x61c00002e0a8, offset=<optimized out>, increment=<optimized out>, nb_desired_values=<optimized out>, first_value=<optimized out>, nb_reserved_values=<optimized out>) at /data/src/10.4/storage/myisam/ha_myisam.cc:2318 #14 0x000055ce8230b828 in handler::update_auto_increment (this=this@entry=0x61c00002e0a8) at /data/src/10.4/sql/handler.cc:3419 #15 0x000055ce83242c0c in ha_myisam::write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/storage/myisam/ha_myisam.cc:951 #16 0x000055ce8231cd03 in handler::ha_write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/sql/handler.cc:6755 #17 0x000055ce81adb40d in write_record (thd=thd@entry=0x62b00005b208, table=table@entry=0x620000043088, info=info@entry=0x7ff159825d00) at /data/src/10.4/sql/sql_insert.cc:2060 #18 0x000055ce81b032fc in mysql_insert (thd=thd@entry=0x62b00005b208, table_list=<optimized out>, fields=..., values_list=..., update_fields=..., update_values=..., duplic=<optimized out>, ignore=<optimized out>) at /data/src/10.4/sql/sql_insert.cc:1078 #19 0x000055ce81ba2da6 in mysql_execute_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:4597 #20 0x000055ce81bba2e0 in mysql_parse (thd=thd@entry=0x62b00005b208, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7ff15982a0d0, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /data/src/10.4/sql/sql_parse.cc:7989 #21 0x000055ce81bc32ab in dispatch_command (command=COM_QUERY, thd=0x62b00005b208, packet=<optimized out>, packet_length=<optimized out>, is_com_multi=<optimized out>, is_next_command=<optimized out>) at /data/src/10.4/sql/sql_class.h:1183 #22 0x000055ce81bc8df5 in do_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:1373 #23 0x000055ce81f34017 in do_handle_one_connection (connect=connect@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1412 #24 0x000055ce81f3459f in handle_one_connection (arg=arg@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1316 #25 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000004908) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #26 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #27 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95   Thread 6 (Thread 0x7ff159916300 (LWP 748801)): #0 0x00007ff162e34322 in __GI___sigtimedwait (set=0x7ff159915870, info=0x7ff159915910, timeout=0x0) at ../sysdeps/unix/sysv/linux/sigtimedwait.c:29 #1 0x00007ff163878111 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #2 0x000055ce81915279 in my_sigwait (code=<synthetic pointer>, sig=0x7ff159915670, set=0x7ff159915870) at /data/src/10.4/include/my_pthread.h:196 #3 signal_hand (arg=arg@entry=0x0) at /data/src/10.4/sql/mysqld.cc:3224 #4 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000003a08) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #5 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #6 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95   Thread 5 (Thread 0x7ff15b818700 (LWP 748799)): #0 futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7ff15b817d20, clockid=<optimized out>, expected=0, futex_word=0x55ce84a96a88 <COND_timer+40>) at ../sysdeps/nptl/futex-internal.h:320 #1 __pthread_cond_wait_common (abstime=0x7ff15b817d20, clockid=<optimized out>, mutex=0x55ce84a96ac0 <LOCK_timer>, cond=0x55ce84a96a60 <COND_timer>) at pthread_cond_wait.c:520 #2 __pthread_cond_timedwait (cond=cond@entry=0x55ce84a96a60 <COND_timer>, mutex=mutex@entry=0x55ce84a96ac0 <LOCK_timer>, abstime=abstime@entry=0x7ff15b817d20) at pthread_cond_wait.c:656 #3 0x000055ce8348e7bd in inline_mysql_cond_timedwait (that=0x55ce84a96a60 <COND_timer>, mutex=0x55ce84a96ac0 <LOCK_timer>, src_file=0x55ce8398de00 "/data/src/10.4/mysys/thr_timer.c", src_line=292, abstime=0x7ff15b817d20) at /data/src/10.4/include/mysql/psi/mysql_thread.h:1211 #4 timer_handler (arg=arg@entry=0x0) at /data/src/10.4/mysys/thr_timer.c:292 #5 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000001c08) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #6 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #7 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95   Thread 4 (Thread 0x7ff1598a4300 (LWP 748802)): #0 futex_wait_cancelable (private=<optimized out>, expected=0, futex_word=0x55ce841e454c <COND_manager+44>) at ../sysdeps/nptl/futex-internal.h:183 #1 __pthread_cond_wait_common (abstime=0x0, clockid=0, mutex=0x55ce841e4580 <LOCK_manager>, cond=0x55ce841e4520 <COND_manager>) at pthread_cond_wait.c:508 #2 __pthread_cond_wait (cond=cond@entry=0x55ce841e4520 <COND_manager>, mutex=mutex@entry=0x55ce841e4580 <LOCK_manager>) at pthread_cond_wait.c:638 #3 0x000055ce81b7db0e in inline_mysql_cond_wait (that=0x55ce841e4520 <COND_manager>, mutex=0x55ce841e4580 <LOCK_manager>, src_file=0x55ce83639320 "/data/src/10.4/sql/sql_manager.cc", src_line=102) at /data/src/10.4/include/mysql/psi/mysql_thread.h:1174 #4 handle_manager (arg=arg@entry=0x0) at /data/src/10.4/sql/sql_manager.cc:102 #5 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000004408) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #6 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #7 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95   Thread 3 (Thread 0x7ff15a117700 (LWP 748800)): #0 futex_abstimed_wait_cancelable (private=<optimized out>, abstime=0x7ff15a116c20, clockid=<optimized out>, expected=0, futex_word=0x55ce84a80488 <COND_checkpoint+40>) at ../sysdeps/nptl/futex-internal.h:320 #1 __pthread_cond_wait_common (abstime=0x7ff15a116c20, clockid=<optimized out>, mutex=0x55ce84a804c0 <LOCK_checkpoint>, cond=0x55ce84a80460 <COND_checkpoint>) at pthread_cond_wait.c:520 #2 __pthread_cond_timedwait (cond=cond@entry=0x55ce84a80460 <COND_checkpoint>, mutex=mutex@entry=0x55ce84a804c0 <LOCK_checkpoint>, abstime=abstime@entry=0x7ff15a116c20) at pthread_cond_wait.c:656 #3 0x000055ce8313c34c in inline_mysql_cond_timedwait (src_file=0x55ce8394b9a0 "/data/src/10.4/storage/maria/ma_servicethread.c", src_line=115, abstime=0x7ff15a116c20, mutex=0x55ce84a804c0 <LOCK_checkpoint>, that=0x55ce84a80460 <COND_checkpoint>) at /data/src/10.4/include/mysql/psi/mysql_thread.h:1211 #4 my_service_thread_sleep (control=control@entry=0x55ce840ee620 <checkpoint_control>, sleep_time=<optimized out>) at /data/src/10.4/storage/maria/ma_servicethread.c:115 #5 0x000055ce83128465 in ma_checkpoint_background (arg=arg@entry=0x1e) at /data/src/10.4/storage/maria/ma_checkpoint.c:707 #6 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000001e88) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #7 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #8 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95   Thread 2 (Thread 0x7ff162ddf480 (LWP 748798)): #0 0x00007ff162f02aff in __GI___poll (fds=0x7fff5b7cfb20, nfds=2, timeout=-1) at ../sysdeps/unix/sysv/linux/poll.c:29 #1 0x00007ff16382d5ba in poll () from /lib/x86_64-linux-gnu/libasan.so.5 #2 0x000055ce819298f6 in handle_connections_sockets () at /data/src/10.4/sql/mysqld.cc:6465 #3 0x000055ce8192b9ad in mysqld_main (argc=<optimized out>, argv=<optimized out>) at /data/src/10.4/sql/mysqld.cc:5901 #4 0x00007ff162e140b3 in __libc_start_main (main=0x55ce818c0e50 <main(int, char**)>, argc=6, argv=0x7fff5b7d0aa8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fff5b7d0a98) at ../csu/libc-start.c:308 #5 0x000055ce8190ea0e in _start () at /data/src/10.4/sql/mysqld.cc:4653   Thread 1 (Thread 0x7ff15982c300 (LWP 748805)): #0 __pthread_kill (threadid=<optimized out>, signo=signo@entry=6) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56 #1 0x000055ce8348140f in my_write_core (sig=sig@entry=6) at /data/src/10.4/mysys/stacktrace.c:386 #2 0x000055ce822ef0db in handle_fatal_signal (sig=<optimized out>) at /data/src/10.4/sql/signal_handler.cc:344 #3 <signal handler called> #4 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #5 0x00007ff162e12859 in __GI_abort () at abort.c:79 #6 0x00007ff16391c6a2 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #7 0x00007ff16392724c in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #8 0x00007ff1639088ec in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #9 0x00007ff163908363 in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #10 0x00007ff163858f4f in ?? () from /lib/x86_64-linux-gnu/libasan.so.5 #11 0x000055ce8227139c in Field_varstring::get_key_image (this=<optimized out>, buff=0x7ff159824fba "\003", length=<optimized out>, type_arg=<optimized out>) at /data/src/10.4/sql/sql_string.h:206 #12 0x000055ce82664efd in key_copy (to_key=0x7ff159824fba "\003", to_key@entry=0x7ff159824fb0 "", from_record=0x61d0000780a8 "\374", key_info=0x619000085ca8, key_length=1015, with_zerofill=with_zerofill@entry=false) at /data/src/10.4/sql/key.cc:149 #13 0x000055ce83249e83 in ha_myisam::get_auto_increment (this=0x61c00002e0a8, offset=<optimized out>, increment=<optimized out>, nb_desired_values=<optimized out>, first_value=<optimized out>, nb_reserved_values=<optimized out>) at /data/src/10.4/storage/myisam/ha_myisam.cc:2318 #14 0x000055ce8230b828 in handler::update_auto_increment (this=this@entry=0x61c00002e0a8) at /data/src/10.4/sql/handler.cc:3419 #15 0x000055ce83242c0c in ha_myisam::write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/storage/myisam/ha_myisam.cc:951 #16 0x000055ce8231cd03 in handler::ha_write_row (this=0x61c00002e0a8, buf=0x61d0000780a8 "\374") at /data/src/10.4/sql/handler.cc:6755 #17 0x000055ce81adb40d in write_record (thd=thd@entry=0x62b00005b208, table=table@entry=0x620000043088, info=info@entry=0x7ff159825d00) at /data/src/10.4/sql/sql_insert.cc:2060 #18 0x000055ce81b032fc in mysql_insert (thd=thd@entry=0x62b00005b208, table_list=<optimized out>, fields=..., values_list=..., update_fields=..., update_values=..., duplic=<optimized out>, ignore=<optimized out>) at /data/src/10.4/sql/sql_insert.cc:1078 #19 0x000055ce81ba2da6 in mysql_execute_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:4597 #20 0x000055ce81bba2e0 in mysql_parse (thd=thd@entry=0x62b00005b208, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7ff15982a0d0, is_com_multi=is_com_multi@entry=false, is_next_command=is_next_command@entry=false) at /data/src/10.4/sql/sql_parse.cc:7989 #21 0x000055ce81bc32ab in dispatch_command (command=COM_QUERY, thd=0x62b00005b208, packet=<optimized out>, packet_length=<optimized out>, is_com_multi=<optimized out>, is_next_command=<optimized out>) at /data/src/10.4/sql/sql_class.h:1183 #22 0x000055ce81bc8df5 in do_command (thd=0x62b00005b208) at /data/src/10.4/sql/sql_parse.cc:1373 #23 0x000055ce81f34017 in do_handle_one_connection (connect=connect@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1412 #24 0x000055ce81f3459f in handle_one_connection (arg=arg@entry=0x6080000012a8) at /data/src/10.4/sql/sql_connect.cc:1316 #25 0x000055ce833a7529 in pfs_spawn_thread (arg=0x615000004908) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #26 0x00007ff1636a4609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #27 0x00007ff162f0f293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 10.4 7ae37ff7 debug mysqld: /data/src/10.4/sql/field.cc:7786: virtual String* Field_varstring::val_str(String*, String*): Assertion `marked_for_read()' failed. 210401 3:11:13 [ERROR] mysqld got signal 6 ;   #7 0x00007f8fb0b66f36 in __GI___assert_fail (assertion=0x55822306d2a5 "marked_for_read()", file=0x55822306ccdb "/data/src/10.4/sql/field.cc", line=7786, function=0x55822306fa60 "virtual String* Field_varstring::val_str(String*, String*)") at assert.c:101 #8 0x000055822251454d in Field_varstring::val_str (this=0x7f8f9818df38, val_buffer=0x7f8f981a5390, val_ptr=0x7f8f981a5390) at /data/src/10.4/sql/field.cc:7786 #9 0x0000558222561686 in Item_field::val_str (this=0x7f8f981a5360, str=0x7f8f981a5390) at /data/src/10.4/sql/item.cc:3170 #10 0x0000558222268928 in Item::val_str (this=0x7f8f981a5360) at /data/src/10.4/sql/item.h:903 #11 0x00005582225ce4cb in Item_func_hash::val_int (this=0x7f8f98194398) at /data/src/10.4/sql/item_func.cc:1744 #12 0x000055822256c01e in Item::save_int_in_field (this=0x7f8f98194398, field=0x7f8f9818e020, no_conversions=false) at /data/src/10.4/sql/item.cc:6580 #13 0x00005582223f6036 in Type_handler_int_result::Item_save_in_field (this=0x55822376cbb0 <type_handler_long>, item=0x7f8f98194398, field=0x7f8f9818e020, no_conversions=false) at /data/src/10.4/sql/sql_type.cc:3749 #14 0x000055822256c0d1 in Item::save_in_field (this=0x7f8f98194398, field=0x7f8f9818e020, no_conversions=false) at /data/src/10.4/sql/item.cc:6590 #15 0x000055822230ea83 in TABLE::update_virtual_fields (this=0x7f8f981a39f0, h=0x7f8f981a7178, update_mode=VCOL_UPDATE_FOR_WRITE) at /data/src/10.4/sql/table.cc:8376 #16 0x000055822213685c in fill_record (thd=0x7f8f98000d90, table_arg=0x7f8f981a39f0, fields=..., values=..., ignore_errors=false, update=false) at /data/src/10.4/sql/sql_base.cc:8606 #17 0x0000558222136cfc in fill_record_n_invoke_before_triggers (thd=0x7f8f98000d90, table=0x7f8f981a39f0, fields=..., values=..., ignore_errors=false, event=TRG_EVENT_INSERT) at /data/src/10.4/sql/sql_base.cc:8734 #18 0x0000558222181503 in mysql_insert (thd=0x7f8f98000d90, table_list=0x7f8f98014870, fields=..., values_list=..., update_fields=..., update_values=..., duplic=DUP_ERROR, ignore=false) at /data/src/10.4/sql/sql_insert.cc:974 #19 0x00005582221d0916 in mysql_execute_command (thd=0x7f8f98000d90) at /data/src/10.4/sql/sql_parse.cc:4597 #20 0x00005582221dc19d in mysql_parse (thd=0x7f8f98000d90, rawbuf=0x7f8f98014788 "INSERT INTO t1 (a) VALUES ('foo')", length=33, parser_state=0x7f8faab37550, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:7989 #21 0x00005582221c83f9 in dispatch_command (command=COM_QUERY, thd=0x7f8f98000d90, packet=0x7f8f9800abe1 "INSERT INTO t1 (a) VALUES ('foo')", packet_length=33, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:1855 #22 0x00005582221c6c61 in do_command (thd=0x7f8f98000d90) at /data/src/10.4/sql/sql_parse.cc:1373 #23 0x00005582223569c1 in do_handle_one_connection (connect=0x5582249b6c50) at /data/src/10.4/sql/sql_connect.cc:1412 #24 0x000055822235670a in handle_one_connection (arg=0x5582249b6c50) at /data/src/10.4/sql/sql_connect.cc:1316 #25 0x0000558222d7de1e in pfs_spawn_thread (arg=0x55822498fcc0) at /data/src/10.4/storage/perfschema/pfs.cc:1869 #26 0x00007f8fb13e7609 in start_thread (arg=<optimized out>) at pthread_create.c:477 #27 0x00007f8fb0c52293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

            Decreased priority since it's now a 10.4-only problem.

            elenst Elena Stepanova added a comment - Decreased priority since it's now a 10.4-only problem.

            10.4 is EOL

            elenst Elena Stepanova added a comment - 10.4 is EOL

            People

              sanja Oleksandr Byelkin
              elenst Elena Stepanova
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.