[MDEV-22881] Unexpected errors, corrupt output, Valgrind / ASAN errors in Item_ident::print or append_identifier - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Critical
Resolution: Fixed
Affects Version/s: 10.5
Fix Version/s: 10.5.4
Component/s: Data Definition - Alter Table, Server
Labels:
- regression

Description

CREATE TABLE t1 (a INT CHECK (a >= 0));

LOCK TABLES t1 WRITE;

ALTER TABLE t1 RENAME COLUMN a TO a;

ALTER TABLE t1 RENAME KEY IF EXISTS x TO xx;

# Cleanup

UNLOCK TABLES;

DROP TABLE t1;

10.5 non-debug c92f7e28
mysqltest: At line 4: query 'ALTER TABLE t1 RENAME KEY IF EXISTS x TO xx' failed: 1054: Unknown column 't' in 'CHECK'

The name printed as the alleged unknown column can be different.

10.5 valgrind d34cc6b3
==30866== Thread 6:
==30866== Invalid read of size 1
==30866== at 0xD63083: Item_ident::print(String*, enum_query_type) (item.cc:3204)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
==30866== by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
==30866== by 0x9E340A: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7992)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0xA7E930: require_quotes(char const*, unsigned int) (sql_show.cc:1502)
==30866== by 0xA7EBE9: get_quote_char_for_identifier(THD, char const, unsigned long) (sql_show.cc:1612)
==30866== by 0xA7E9E2: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1533)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
==30866== by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0x173EAC2: my_charlen_utf8mb3 (ctype-utf8.c:5207)
==30866== by 0x9B675A: charset_info_st::charlen(char const, char const) const (m_ctype.h:731)
==30866== by 0xA7E952: require_quotes(char const*, unsigned int) (sql_show.cc:1503)
==30866== by 0xA7EBE9: get_quote_char_for_identifier(THD, char const, unsigned long) (sql_show.cc:1612)
==30866== by 0xA7E9E2: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1533)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0x173D338: my_valid_mbcharlen_utf8mb3 (ctype-utf8.c:81)
==30866== by 0x173EAE0: my_charlen_utf8mb3 (ctype-utf8.c:5209)
==30866== by 0x9B675A: charset_info_st::charlen(char const, char const) const (m_ctype.h:731)
==30866== by 0xA7E952: require_quotes(char const*, unsigned int) (sql_show.cc:1503)
==30866== by 0xA7EBE9: get_quote_char_for_identifier(THD, char const, unsigned long) (sql_show.cc:1612)
==30866== by 0xA7E9E2: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1533)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0xA7EAD0: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1563)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
==30866== by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
==30866== by 0x9E340A: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7992)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0x173EAC2: my_charlen_utf8mb3 (ctype-utf8.c:5207)
==30866== by 0x9B675A: charset_info_st::charlen(char const, char const) const (m_ctype.h:731)
==30866== by 0xA7EAF2: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1564)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
==30866== by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0x173D338: my_valid_mbcharlen_utf8mb3 (ctype-utf8.c:81)
==30866== by 0x173EAE0: my_charlen_utf8mb3 (ctype-utf8.c:5209)
==30866== by 0x9B675A: charset_info_st::charlen(char const, char const) const (m_ctype.h:731)
==30866== by 0xA7EAF2: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1564)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Invalid read of size 1
==30866== at 0x4C326C8: memmove (vg_replace_strmem.c:1252)
==30866== by 0x8A2EBF: Static_binary_string::q_append(char const*, unsigned long) (sql_string.h:329)
==30866== by 0x8E2870: Binary_string::append(char const*, unsigned long) (sql_string.h:557)
==30866== by 0xAB94E7: String::append(char const, unsigned long, charset_info_st const) (sql_string.cc:592)
==30866== by 0xA7EB68: append_identifier(THD, String, char const*, unsigned long) (sql_show.cc:1577)
==30866== by 0xD58861: append_identifier(THD, String, st_mysql_const_lex_string const*) (sql_show.h:97)
==30866== by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
==30866== by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
==30866== by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
==30866== by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
==30866== by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
==30866== by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
==30866== by 0xB3ABF6: pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type) (unireg.cc:747)
==30866== by 0xB3ADC1: pack_vcols(String, List<Create_field>&, List<Virtual_column_info>) (unireg.cc:776)
==30866== by 0xB38C60: build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) (unireg.cc:280)
==30866== by 0xACA768: mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
==30866== by 0xACB222: create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
==30866== by 0xAD9FFF: mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
==30866== Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
==30866== at 0x4C2CDDB: free (vg_replace_malloc.c:530)
==30866== by 0x16DFF96: my_free (my_malloc.c:209)
==30866== by 0x16CFD01: free_root (my_alloc.c:410)
==30866== by 0x9D18B8: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:2506)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)
==30866== Block was alloc'd at
==30866== at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
==30866== by 0x16DF7A1: my_malloc (my_malloc.c:88)
==30866== by 0x16CF8B6: alloc_root (my_alloc.c:189)
==30866== by 0x16D0029: strmake_root (my_alloc.c:466)
==30866== by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string, char const, unsigned long) (sql_class.h:3798)
==30866== by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD, Lex_ident_cli_st const) (sql_lex.cc:9306)
==30866== by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD, Lex_ident_cli_st const, charset_info_st const*) (sql_lex.cc:9315)
==30866== by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st, Lex_ident_cli_st const) (sql_class.cc:2489)
==30866== by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
==30866== by 0x9E891E: parse_sql(THD, Parser_state, Object_creation_ctx*, bool) (sql_parse.cc:10298)
==30866== by 0x9E3267: mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
==30866== by 0x9CF642: dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) (sql_parse.cc:1875)
==30866== by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
==30866== by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
==30866== by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
==30866== by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
==30866== by 0x4E3F4A3: start_thread (pthread_create.c:456)
==30866== by 0x6D4BD0E: clone (clone.S:97)

ASAN doesn't complain upon the test case above, but it did non-deterministically with a slighly dirtier one, same in an essence, only with different table/column names, and some seemingly irrelevant logic.

10.5 asan c92f7e28
==6602==ERROR: AddressSanitizer: use-after-poison on address 0x62b00005bce2 at pc 0x55e7d725a38c bp 0x7f95d27ec070 sp 0x7f95d27ec068
READ of size 1 at 0x62b00005bce2 thread T5
#0 0x55e7d725a38b in append_identifier(THD, String, char const*, unsigned long) /data/src/10.5/sql/sql_show.cc:1563
#1 0x55e7d7862597 in append_identifier /data/src/10.5/sql/sql_show.h:97
#2 0x55e7d787c4ea in Item_ident::print(String*, enum_query_type) /data/src/10.5/sql/item.cc:3207
#3 0x55e7d789d9c1 in Item_field::print(String*, enum_query_type) /data/src/10.5/sql/item.cc:7631
#4 0x55e7d7865fda in Item::print_parenthesised(String*, enum_query_type, precedence) /data/src/10.5/sql/item.cc:486
#5 0x55e7d79512e0 in Item_func::print_op(String*, enum_query_type) /data/src/10.5/sql/item_func.cc:638
#6 0x55e7d7913eb6 in Item_bool_rowready_func2::print(String*, enum_query_type) /data/src/10.5/sql/item_cmpfunc.h:522
#7 0x55e7d7865fda in Item::print_parenthesised(String*, enum_query_type, precedence) /data/src/10.5/sql/item.cc:486
#8 0x55e7d72be771 in Item::print_for_table_def(String*) /data/src/10.5/sql/item.h:1734
#9 0x55e7d72be81d in Virtual_column_info::print(String*) /data/src/10.5/sql/item.h:7360
#10 0x55e7d73fe9e3 in pack_expression /data/src/10.5/sql/unireg.cc:747
#11 0x55e7d73fedaf in pack_vcols /data/src/10.5/sql/unireg.cc:776
#12 0x55e7d73faf47 in build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler) /data/src/10.5/sql/unireg.cc:280
#13 0x55e7d73026ec in mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*) /data/src/10.5/sql/sql_table.cc:4932
#14 0x55e7d7303b18 in create_table_impl /data/src/10.5/sql/sql_table.cc:5182
#15 0x55e7d7323b9a in mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool) /data/src/10.5/sql/sql_table.cc:10339
#16 0x55e7d74946b8 in Sql_cmd_alter_table::execute(THD*) /data/src/10.5/sql/sql_alter.cc:538
#17 0x55e7d70ddfdb in mysql_execute_command(THD*) /data/src/10.5/sql/sql_parse.cc:5950
#18 0x55e7d70ea051 in mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) /data/src/10.5/sql/sql_parse.cc:7992
#19 0x55e7d70c4964 in dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) /data/src/10.5/sql/sql_parse.cc:1875
#20 0x55e7d70c17e7 in do_command(THD*) /data/src/10.5/sql/sql_parse.cc:1356
#21 0x55e7d747d0e6 in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1411
#22 0x55e7d747cb55 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1313
#23 0x55e7d8063c1c in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
#24 0x7f95dd0384a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
#25 0x7f95db16cd0e in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xe8d0e)

0x62b00005bce2 is located 2786 bytes inside of 24740-byte region [0x62b00005b200,0x62b0000612a4)
allocated by thread T5 here:
#0 0x7f95dd30fd28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
#1 0x55e7d8b69fa6 in sf_malloc /data/src/10.5/mysys/safemalloc.c:118
#2 0x55e7d8b3b156 in my_malloc /data/src/10.5/mysys/my_malloc.c:88
#3 0x55e7d8b1a713 in reset_root_defaults /data/src/10.5/mysys/my_alloc.c:147
#4 0x55e7d6fb9159 in THD::init_for_queries() /data/src/10.5/sql/sql_class.cc:1401
#5 0x55e7d747c4ce in prepare_new_connection_state(THD*) /data/src/10.5/sql/sql_connect.cc:1240
#6 0x55e7d747cbd0 in thd_prepare_connection(THD*) /data/src/10.5/sql/sql_connect.cc:1334
#7 0x55e7d747d09c in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1401
#8 0x55e7d747cb55 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1313
#9 0x55e7d8063c1c in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
#10 0x7f95dd0384a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)

Thread T5 created by T0 here:
#0 0x7f95dd27ef59 in __interceptor_pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x30f59)
#1 0x55e7d805ecde in my_thread_create /data/src/10.5/storage/perfschema/my_thread.h:34
#2 0x55e7d806400b in pfs_spawn_thread_v1 /data/src/10.5/storage/perfschema/pfs.cc:2252
#3 0x55e7d6e09de7 in inline_mysql_thread_create /data/src/10.5/include/mysql/psi/mysql_thread.h:1321
#4 0x55e7d6e1cb19 in create_thread_to_handle_connection(CONNECT*) /data/src/10.5/sql/mysqld.cc:5951
#5 0x55e7d6e1d08e in create_new_thread(CONNECT*) /data/src/10.5/sql/mysqld.cc:6010
#6 0x55e7d6e1d24b in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.5/sql/mysqld.cc:6075
#7 0x55e7d6e1dc2e in handle_connections_sockets() /data/src/10.5/sql/mysqld.cc:6202
#8 0x55e7d6e1c47f in mysqld_main(int, char**) /data/src/10.5/sql/mysqld.cc:5620
#9 0x55e7d6e085df in main /data/src/10.5/sql/main.cc:25
#10 0x7f95db0a42e0 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x202e0)

SUMMARY: AddressSanitizer: use-after-poison /data/src/10.5/sql/sql_show.cc:1563 in append_identifier(THD, String, char const*, unsigned long)
Shadow bytes around the buggy address:
0x0c5680003740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c5680003750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c5680003760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c5680003770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c5680003780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c5680003790: 00 00 00 00 00 00 00 f7 05 f7 05 f7[02]f7 00 00
0x0c56800037a0: 00 00 00 f7 00 00 f7 07 f7 00 00 00 f7 f7 f7 f7
0x0c56800037b0: 00 00 00 00 00 f7 00 f7 f7 00 00 00 00 00 00 00
0x0c56800037c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c56800037d0: 00 00 00 00 00 00 00 00 f7 00 00 f7 00 00 00 00
0x0c56800037e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==6602==ABORTING
200612 20:19:31 [ERROR] mysqld got signal 6 ;
This could be because you hit a bug. It is also possible that this binary
or one of the libraries it was linked against is corrupt, improperly built,
or misconfigured. This error can also be caused by malfunctioning hardware.

To report this bug, see https://mariadb.com/kb/en/reporting-bugs

We will try our best to scrape up some info that will hopefully help
diagnose the problem, but since we have already crashed,
something is definitely wrong and this may fail.

Server version: 10.5.4-MariaDB-debug-log
key_buffer_size=1048576
read_buffer_size=131072
max_used_connections=1
max_threads=153
thread_count=2
It is possible that mysqld could use up to
key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63703 K bytes of memory
Hope that's ok; if not, decrease some variables in the equation.

Thread pointer: 0x62b000062288
Attempting backtrace. You can use the following information to find out
where mysqld died. If you see no messages after this, something went
terribly wrong...
stack_bottom = 0x7f95d27f39a0 thread_stack 0x5fc00
??:0(backtrace)[0x7f95dd29b681]
/data/bld/10.5-asan-nightly/bin/mariadbd(my_print_stacktrace+0xb5)[0x55e7d8b49ed6]
mysys/stacktrace.c:306(my_print_stacktrace)[0x55e7d78154a2]
??:0(__restore_rt)[0x7f95dd0420e0]
linux/raise.c:51(__GI_raise)[0x7f95db0b6fff]
stdlib/abort.c:91(__GI_abort)[0x7f95db0b842a]
??:0(__sanitizer_cov_trace_switch)[0x7f95dd329329]
??:0(__asan_print_accumulated_stats)[0x7f95dd31e9ab]
??:0(__asan_unpoison_intra_object_redzone)[0x7f95dd318b57]
??:0(__asan_report_load1)[0x7f95dd3191e8]
/data/bld/10.5-asan-nightly/bin/mariadbd(_Z17append_identifierP3THDP6StringPKcm+0x2c0)[0x55e7d725a38c]
sql/sql_show.cc:1563(append_identifier(THD, String, char const*, unsigned long))[0x55e7d7862598]
sql/sql_show.h:98(append_identifier(THD, String, st_mysql_const_lex_string const*))[0x55e7d787c4eb]
sql/item.cc:3140(Item_ident::print(String*, enum_query_type))[0x55e7d789d9c2]
sql/item.cc:7632(Item_field::print(String*, enum_query_type))[0x55e7d7865fdb]
sql/item.cc:487(Item::print_parenthesised(String*, enum_query_type, precedence))[0x55e7d79512e1]
sql/item_func.cc:639(Item_func::print_op(String*, enum_query_type))[0x55e7d7913eb7]
sql/item_cmpfunc.h:523(Item_bool_rowready_func2::print(String*, enum_query_type))[0x55e7d7865fdb]
sql/item.cc:487(Item::print_parenthesised(String*, enum_query_type, precedence))[0x55e7d72be772]
sql/item.h:1735(Item::print_for_table_def(String*))[0x55e7d72be81e]
sql/item.h:7361(Virtual_column_info::print(String*))[0x55e7d73fe9e4]
sql/unireg.cc:748(pack_expression(String, Virtual_column_info, unsigned int, enum_vcol_info_type))[0x55e7d73fedb0]
sql/unireg.cc:776(pack_vcols(String, List<Create_field>&, List<Virtual_column_info>))[0x55e7d73faf48]
sql/unireg.cc:280(build_frm_image(THD, st_mysql_const_lex_string const&, HA_CREATE_INFO, List<Create_field>&, unsigned int, st_key, handler))[0x55e7d73026ed]
sql/sql_table.cc:4932(mysql_create_frm_image(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO, Alter_info, int, st_key, unsigned int, st_mysql_const_unsigned_lex_string*))[0x55e7d7303b19]
sql/sql_table.cc:5182(create_table_impl(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const, DDL_options_st, HA_CREATE_INFO, Alter_info, int, bool, st_key, unsigned int, st_mysql_const_unsigned_lex_string*))[0x55e7d7323b9b]
sql/sql_table.cc:10339(mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Alter_info, unsigned int, st_order*, bool, bool))[0x55e7d74946b9]
sql/sql_alter.cc:538(Sql_cmd_alter_table::execute(THD*))[0x55e7d70ddfdc]
sql/sql_parse.cc:5950(mysql_execute_command(THD*))[0x55e7d70ea052]
sql/sql_parse.cc:7992(mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool))[0x55e7d70c4965]
sql/sql_parse.cc:1877(dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool))[0x55e7d70c17e8]
sql/sql_parse.cc:1356(do_command(THD*))[0x55e7d747d0e7]
sql/sql_connect.cc:1411(do_handle_one_connection(CONNECT*, bool))[0x55e7d747cb56]
sql/sql_connect.cc:1315(handle_one_connection)[0x55e7d8063c1d]
nptl/pthread_create.c:456(start_thread)[0x7f95dd0384a4]
x86_64/clone.S:99(clone)[0x7f95db16cd0f]

Trying to get some variables.
Some pointers may be invalid and cause the dump to abort.
Query (0x62b00005b2a8): ALTER /* QNO 446 CON_ID 11 / ONLINE TABLE `t14` /!100301 WAIT 7 / / compatibility 10.5.2 / RENAME KEY IF EXISTS ind7 TO q /!100307, ALGORITHM=NOCOPY */
Connection ID (thread ID): 4
Status: NOT_KILLED

Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on,not_null_range_scan=off

The manual page at http://dev.mysql.com/doc/mysql/en/crashing.html contains
information that should help you find out what is causing the crash.
Writing a core file...
Working directory at /dev/shm/var_auto_hPiR/mysqld.1/data
Resource Limits:
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size 0 0 bytes
Max resident set unlimited unlimited bytes
Max processes 128123 128123 processes
Max open files 1024 1024 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 128123 128123 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
Core pattern: core

The test case is not applicable to 10.4 due to RENAME COLUMN/INDEX.
Not reproducible on 10.5.3.
The failure started happening in 10.5 after this merge, but it was a fairly big merge, I can't identify the exact commit:

commit 4a0b56f60436cab3f2f60b15ec699cb19c1e10ba

Merge: 0bf843cd139 6da14d7b4a9

Author: Marko Mäkelä

Date:   Sun May 31 10:28:59 2020 +0300

    Merge 10.4 into 10.5

Attachments

Issue Links

relates to

MDEV-13508 ALTER TABLE that renames columns and CHECK constraints

Closed

MDEV-16290 ALTER TABLE ... RENAME COLUMN syntax

Closed

MDEV-21398 Deadlock (server hang) or assertion failure in Diagnostics_area::set_error_status upon ALTER under lock

Closed

MDEV-21695 Server crashes in TABLE::evaluate_update_default_function upon UPDATE on temporary table

Closed

Activity

People

Assignee:: Aleksey Midenkov

Reporter:: Elena Stepanova

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 2020-06-12 17:22

Updated:: 2020-06-15 16:44

Resolved:: 2020-06-15 16:39

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.