SIGSEGV in SQL_SELECT::cleanup

SET SQL_MODE='';    # Not always required it seems

SET SESSION optimizer_switch="not_null_range_scan=ON";

CREATE TEMPORARY TABLE t (a INT, b INT, PRIMARY KEY(a), INDEX (b)) ENGINE=MyISAM;

INSERT INTO t (a,b) VALUES (0,0),(1,1),(2,'a');

SET @a=0.0;

SELECT a,b FROM t AS d WHERE a=(SELECT a FROM t WHERE b=@a) AND b='a';

Core was generated by `/test/MD201020-mariadb-10.6.0-linux-x86_64-opt/bin/mysqld --no-defaults --core-'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)

    at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

[Current thread is 1 (Thread 0x14f9dcbfc700 (LWP 3609934))]

(gdb) bt

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

#1  0x000055a4016cda4f in my_write_core (sig=sig@entry=11) at /test/10.6_opt/mysys/stacktrace.c:424

#2  0x000055a4010f1130 in handle_fatal_signal (sig=11) at /test/10.6_opt/sql/signal_handler.cc:330

#3  <signal handler called>

#4  0x000055a401229d6b in SQL_SELECT::cleanup (this=0x14f97c023430) at /test/10.6_opt/sql/opt_range.cc:1232

#5  0x000055a401229dbd in SQL_SELECT::~SQL_SELECT (this=<optimized out>, __in_chrg=<optimized out>) at /test/10.6_opt/sql/opt_range.cc:1246

#6  0x000055a400f19f56 in JOIN::make_range_rowid_filters (this=0x14f97c014058) at /test/10.6_opt/sql/sql_select.cc:1723

#7  JOIN::make_range_rowid_filters (this=0x14f97c014058) at /test/10.6_opt/sql/sql_select.cc:1652

#8  0x000055a400f47311 in JOIN::optimize_stage2 (this=0x14f97c014058) at /test/10.6_opt/sql/sql_select.cc:2297

#9  0x000055a400f4b14a in JOIN::optimize_inner (this=0x14f97c014058) at /test/10.6_opt/sql/sql_select.cc:2273

#10 0x000055a400f4d213 in JOIN::optimize (this=this@entry=0x14f97c014058) at /test/10.6_opt/sql/sql_select.cc:1623

#11 0x000055a400f4d316 in mysql_select (thd=0x14f97c000c58, tables=0x14f97c010bf8, fields=<optimized out>, conds=0x14f97c013608, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2147748608, result=0x14f97c014030, unit=0x14f97c004c20, select_lex=0x14f97c010490) at /test/10.6_opt/sql/sql_select.cc:4659

#12 0x000055a400f4dd67 in handle_select (thd=thd@entry=0x14f97c000c58, lex=lex@entry=0x14f97c004b58, result=result@entry=0x14f97c014030, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.6_opt/sql/sql_select.cc:417

#13 0x000055a400edd951 in execute_sqlcom_select (thd=0x14f97c000c58, all_tables=0x14f97c010bf8) at /test/10.6_opt/sql/sql_parse.cc:6062

#14 0x000055a400eeb380 in mysql_execute_command (thd=0x14f97c000c58) at /test/10.6_opt/sql/sql_parse.cc:3784

#15 0x000055a400ed803f in mysql_parse (thd=0x14f97c000c58, rawbuf=<optimized out>, length=<optimized out>, parser_state=<optimized out>) at /test/10.6_opt/sql/sql_parse.cc:7833

#16 0x000055a400ee3967 in dispatch_command (command=COM_QUERY, thd=0x14f97c000c58, packet=0x14f97c008009 "SELECT a,b FROM t AS d WHERE a=(SELECT a FROM t WHERE b=@a) AND b='a'", packet_length=<optimized out>) at /test/10.6_opt/sql/sql_class.h:1253

#17 0x000055a400ee5d42 in do_command (thd=0x14f97c000c58) at /test/10.6_opt/sql/sql_parse.cc:1343

#18 0x000055a400fe96e1 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55a4036e5438, put_in_cache=put_in_cache@entry=true) at /test/10.6_opt/sql/sql_connect.cc:1410

#19 0x000055a400fe9b5d in handle_one_connection (arg=arg@entry=0x55a4036e5438) at /test/10.6_opt/sql/sql_connect.cc:1312

#20 0x000055a40136f266 in pfs_spawn_thread (arg=0x55a403698918) at /test/10.6_opt/storage/perfschema/pfs.cc:2201

#21 0x000014f9e6539609 in start_thread (arg=<optimized out>) at pthread_create.c:477

#22 0x000014f9e6128293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Core was generated by `/test/MD211020-mariadb-10.6.0-linux-x86_64-dbg/bin/mysqld --no-defaults --core-'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)

    at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

[Current thread is 1 (Thread 0x1487900d1700 (LWP 3624881))]

(gdb) bt

#0  __pthread_kill (threadid=<optimized out>, signo=signo@entry=11) at ../sysdeps/unix/sysv/linux/pthread_kill.c:56

#1  0x0000562995f8f021 in my_write_core (sig=sig@entry=11) at /test/10.6_dbg/mysys/stacktrace.c:424

#2  0x00005629956d6321 in handle_fatal_signal (sig=11) at /test/10.6_dbg/sql/signal_handler.cc:330

#3  <signal handler called>

#4  0x000056299588bd41 in SQL_SELECT::cleanup (this=0x14874802cd80) at /test/10.6_dbg/sql/opt_range.cc:1232

#5  0x000056299588bd8f in SQL_SELECT::~SQL_SELECT (this=<optimized out>, __in_chrg=<optimized out>) at /test/10.6_dbg/sql/opt_range.cc:1246

#6  0x0000562995453d11 in JOIN::make_range_rowid_filters (this=this@entry=0x148748016328) at /test/10.6_dbg/sql/sql_select.cc:1723

#7  0x000056299548eb79 in JOIN::optimize_stage2 (this=this@entry=0x148748016328) at /test/10.6_dbg/sql/sql_select.cc:2297

#8  0x0000562995492d2b in JOIN::optimize_inner (this=this@entry=0x148748016328) at /test/10.6_dbg/sql/sql_select.cc:2273

#9  0x0000562995492f5d in JOIN::optimize (this=this@entry=0x148748016328) at /test/10.6_dbg/sql/sql_select.cc:1623

#10 0x00005629954938f5 in mysql_select (thd=thd@entry=0x148748000db8, tables=0x148748012ec8, fields=@0x1487480128b0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x148748012d18, last = 0x148748012e70, elements = 2}, <No data fields>}, conds=0x1487480158d8, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2147748608, result=0x148748016300, unit=0x148748004f40, select_lex=0x148748012760) at /test/10.6_dbg/sql/sql_select.cc:4659

#11 0x0000562995493c72 in handle_select (thd=thd@entry=0x148748000db8, lex=lex@entry=0x148748004e78, result=result@entry=0x148748016300, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.6_dbg/sql/sql_select.cc:417

#12 0x000056299540738e in execute_sqlcom_select (thd=thd@entry=0x148748000db8, all_tables=0x148748012ec8) at /test/10.6_dbg/sql/sql_parse.cc:6062

#13 0x0000562995413aea in mysql_execute_command (thd=thd@entry=0x148748000db8) at /test/10.6_dbg/sql/sql_parse.cc:3784

#14 0x00005629953fffd2 in mysql_parse (thd=thd@entry=0x148748000db8, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x1487900d03d0) at /test/10.6_dbg/sql/sql_parse.cc:7833

#15 0x000056299540e0c7 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x148748000db8, packet=packet@entry=0x148748008ce9 "SELECT a,b FROM t AS d WHERE a=(SELECT a FROM t WHERE b=@a) AND b='a'", packet_length=packet_length@entry=69) at /test/10.6_dbg/sql/sql_class.h:1253

#16 0x00005629954113d2 in do_command (thd=0x148748000db8) at /test/10.6_dbg/sql/sql_parse.cc:1343

#17 0x000056299556b994 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x5629988fe518, put_in_cache=put_in_cache@entry=true) at /test/10.6_dbg/sql/sql_connect.cc:1410

#18 0x000056299556c09b in handle_one_connection (arg=arg@entry=0x5629988fe518) at /test/10.6_dbg/sql/sql_connect.cc:1312

#19 0x0000562995a1fabb in pfs_spawn_thread (arg=0x562998833688) at /test/10.6_dbg/storage/perfschema/pfs.cc:2201

#20 0x000014879ac49609 in start_thread (arg=<optimized out>) at pthread_create.c:477

#21 0x000014879a838293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95