Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-24899

ASAN use-after-poison in get_suffix or wrong result and corrupt values upon GROUP_CONCAT with virtual columns

    XMLWordPrintable

    Details

      Description

      --source include/have_innodb.inc
      --source include/have_sequence.inc
       
      SET @stats= @@innodb_stats_persistent;
      SET GLOBAL innodb_stats_persistent= ON;
       
      CREATE TABLE t1 (
        a BINARY(16),
        b DATETIME,
        c VARCHAR(4000) GENERATED ALWAYS AS (b) VIRTUAL,
        d VARBINARY(3512)
      ) ENGINE=InnoDB DEFAULT CHARSET=utf8;
       
      INSERT INTO t1 (b) SELECT '2021-01-01' FROM seq_1_to_683;
      #ANALYZE TABLE t1; # ANALYZE turns ASAN error into a wrong result with corrupt values
       
      SELECT GROUP_CONCAT(TIMESTAMP(c)) FROM t1 GROUP BY PERIOD_DIFF(b, 202101);
       
      # Cleanup
      DROP TABLE t1;
      SET GLOBAL innodb_stats_persistent= @stats;
      

      Don't consider the bug not reproducible just because you are not getting the ASAN error, examine the result set first. Depending on the version and build, the ASAN error easily turns into a wrong result with meaningless values. Both are described below.

      10.5 ASAN fc5e03f0

      ==2126800==ERROR: AddressSanitizer: use-after-poison on address 0x62c0000c82a7 at pc 0x563d38bc3a3b bp 0x7fb86bcf4100 sp 0x7fb86bcf40f0
      READ of size 1 at 0x62c0000c82a7 thread T13
          #0 0x563d38bc3a3a in get_suffix /data/src/10.5/sql-common/my_time.c:306
          #1 0x563d38bc40e3 in find_body /data/src/10.5/sql-common/my_time.c:362
          #2 0x563d38bc706f in str_to_datetime_or_date /data/src/10.5/sql-common/my_time.c:880
          #3 0x563d37151552 in Temporal::ascii_to_datetime_or_date(st_mysql_time_status*, char const*, unsigned long, date_mode_t) (/data/bld/10.5-asan-nightly/bin/mariadbd+0x1e1f552)
          #4 0x563d37150b61 in Temporal::ascii_to_temporal(st_mysql_time_status*, char const*, unsigned long, date_mode_t) (/data/bld/10.5-asan-nightly/bin/mariadbd+0x1e1eb61)
          #5 0x563d371472bb in Temporal::str_to_temporal(THD*, st_mysql_time_status*, char const*, unsigned long, charset_info_st const*, date_mode_t) /data/src/10.5/sql/sql_time.cc:403
          #6 0x563d37359bfd in Temporal::make_from_str(THD*, Temporal::Warn*, char const*, unsigned long, charset_info_st const*, date_mode_t) /data/src/10.5/sql/sql_type.cc:352
          #7 0x563d37395e94 in Temporal_hybrid::Temporal_hybrid(THD*, Temporal::Warn*, String const*, date_mode_t) /data/src/10.5/sql/sql_type.h:1186
          #8 0x563d3752ea41 in Field::get_date(st_mysql_time*, date_mode_t) /data/src/10.5/sql/field.cc:2418
          #9 0x563d3762c2a6 in Item_field::get_date(THD*, st_mysql_time*, date_mode_t) /data/src/10.5/sql/item.cc:3285
          #10 0x563d3735fdf3 in Temporal_with_date::make_from_item(THD*, Item*, date_mode_t) /data/src/10.5/sql/sql_type.cc:1010
          #11 0x563d36af278f in Temporal_with_date::Temporal_with_date(THD*, Item*, date_mode_t) /data/src/10.5/sql/sql_type.h:2043
          #12 0x563d36af2c2a in Datetime::Datetime(THD*, Item*, date_mode_t) /data/src/10.5/sql/sql_type.h:2322
          #13 0x563d3758563d in Datetime::Datetime(THD*, Item*, date_mode_t, unsigned int) /data/src/10.5/sql/sql_type.h:2373
          #14 0x563d37888617 in Item_datetime_typecast::get_date(THD*, st_mysql_time*, date_mode_t) /data/src/10.5/sql/item_timefunc.cc:2574
          #15 0x563d37610fe9 in Item::save_date_in_field(Field*, bool) /data/src/10.5/sql/item.cc:373
          #16 0x563d37371005 in Type_handler_temporal_with_date::Item_save_in_field(Item*, Field*, bool) const /data/src/10.5/sql/sql_type.cc:4227
          #17 0x563d37647e12 in Item::save_in_field(Field*, bool) /data/src/10.5/sql/item.cc:6665
          #18 0x563d36c4b916 in Item_result_field::save_in_result_field(bool) /data/src/10.5/sql/item.h:3288
          #19 0x563d36f2f59f in copy_funcs(Item**, THD const*) /data/src/10.5/sql/sql_select.cc:25778
          #20 0x563d3785d63e in Item_func_group_concat::add(bool) /data/src/10.5/sql/item_sum.cc:4141
          #21 0x563d37868aa4 in Item_func_group_concat::add() /data/src/10.5/sql/item_sum.h:1976
          #22 0x563d378634bf in Aggregator_simple::add() /data/src/10.5/sql/item_sum.h:718
          #23 0x563d36f52a97 in Item_sum::aggregator_add() (/data/bld/10.5-asan-nightly/bin/mariadbd+0x1c20a97)
          #24 0x563d36f5270d in Item_sum::reset_and_add() /data/src/10.5/sql/item_sum.h:445
          #25 0x563d36f2f36b in init_sum_functions /data/src/10.5/sql/sql_select.cc:25730
          #26 0x563d36f13c84 in end_send_group(JOIN*, st_join_table*, bool) /data/src/10.5/sql/sql_select.cc:22087
          #27 0x563d36f0a034 in evaluate_join_record /data/src/10.5/sql/sql_select.cc:20909
          #28 0x563d36f0898a in sub_select(JOIN*, st_join_table*, bool) /data/src/10.5/sql/sql_select.cc:20686
          #29 0x563d36f06ab1 in do_select /data/src/10.5/sql/sql_select.cc:20220
          #30 0x563d36e93388 in JOIN::exec_inner() /data/src/10.5/sql/sql_select.cc:4466
          #31 0x563d36e90973 in JOIN::exec() /data/src/10.5/sql/sql_select.cc:4246
          #32 0x563d36e94d47 in mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/src/10.5/sql/sql_select.cc:4719
          #33 0x563d36e66585 in handle_select(THD*, LEX*, select_result*, unsigned long) /data/src/10.5/sql/sql_select.cc:417
          #34 0x563d36dcfb81 in execute_sqlcom_select /data/src/10.5/sql/sql_parse.cc:6281
          #35 0x563d36dbea7c in mysql_execute_command(THD*) /data/src/10.5/sql/sql_parse.cc:3977
          #36 0x563d36ddae7b in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.5/sql/sql_parse.cc:8062
          #37 0x563d36db1168 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.5/sql/sql_parse.cc:1889
          #38 0x563d36dada91 in do_command(THD*) /data/src/10.5/sql/sql_parse.cc:1370
          #39 0x563d371f0403 in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1410
          #40 0x563d371efd67 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1312
          #41 0x563d37efe2a8 in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
          #42 0x7fb87b26a608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
          #43 0x7fb87ae40292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
       
      0x62c0000c82a7 is located 167 bytes inside of 31260-byte region [0x62c0000c8200,0x62c0000cfc1c)
      allocated by thread T13 here:
          #0 0x7fb87b758bc8 in malloc (/lib/x86_64-linux-gnu/libasan.so.5+0x10dbc8)
          #1 0x563d38b9c98c in sf_malloc /data/src/10.5/mysys/safemalloc.c:121
          #2 0x563d38b69d91 in my_malloc /data/src/10.5/mysys/my_malloc.c:90
          #3 0x563d38b45b88 in alloc_root /data/src/10.5/mysys/my_alloc.c:244
          #4 0x563d37000f06 in create_min_max_statistical_fields_for_table_share /data/src/10.5/sql/sql_statistics.cc:2053
          #5 0x563d37002204 in alloc_statistics_for_table_share /data/src/10.5/sql/sql_statistics.cc:2264
          #6 0x563d37005070 in read_statistics_for_table /data/src/10.5/sql/sql_statistics.cc:2910
          #7 0x563d37007463 in read_statistics_for_tables(THD*, TABLE_LIST*) /data/src/10.5/sql/sql_statistics.cc:3226
          #8 0x563d370067e2 in read_statistics_for_tables_if_needed(THD*, TABLE_LIST*) /data/src/10.5/sql/sql_statistics.cc:3141
          #9 0x563d36c2c971 in open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) /data/src/10.5/sql/sql_base.cc:5225
          #10 0x563d36b83a31 in open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) /data/src/10.5/sql/sql_base.h:507
          #11 0x563d36dc3944 in mysql_execute_command(THD*) /data/src/10.5/sql/sql_parse.cc:4680
          #12 0x563d36ddae7b in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.5/sql/sql_parse.cc:8062
          #13 0x563d36db1168 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.5/sql/sql_parse.cc:1889
          #14 0x563d36dada91 in do_command(THD*) /data/src/10.5/sql/sql_parse.cc:1370
          #15 0x563d371f0403 in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1410
          #16 0x563d371efd67 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1312
          #17 0x563d37efe2a8 in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
          #18 0x7fb87b26a608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
       
      Thread T13 created by T0 here:
          #0 0x7fb87b685805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805)
          #1 0x563d37ef924c in my_thread_create /data/src/10.5/storage/perfschema/my_thread.h:38
          #2 0x563d37efe69b in pfs_spawn_thread_v1 /data/src/10.5/storage/perfschema/pfs.cc:2252
          #3 0x563d36aa14fe in inline_mysql_thread_create /data/src/10.5/include/mysql/psi/mysql_thread.h:1323
          #4 0x563d36ab7512 in create_thread_to_handle_connection(CONNECT*) /data/src/10.5/sql/mysqld.cc:6028
          #5 0x563d36ab7b91 in create_new_thread(CONNECT*) /data/src/10.5/sql/mysqld.cc:6087
          #6 0x563d36ab7eee in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.5/sql/mysqld.cc:6152
          #7 0x563d36ab8b0d in handle_connections_sockets() /data/src/10.5/sql/mysqld.cc:6279
          #8 0x563d36ab6d1f in mysqld_main(int, char**) /data/src/10.5/sql/mysqld.cc:5674
          #9 0x563d36a9fd9c in main /data/src/10.5/sql/main.cc:25
          #10 0x7fb87ad450b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
       
      SUMMARY: AddressSanitizer: use-after-poison /data/src/10.5/sql-common/my_time.c:306 in get_suffix
      Shadow bytes around the buggy address:
        0x0c5880011000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c5880011010: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c5880011020: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c5880011030: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
        0x0c5880011040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
      =>0x0c5880011050: 00 00 00 00[f7]00 00 00 00 00 00 00 00 00 00 00
        0x0c5880011060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c5880011070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c5880011080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c5880011090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c58800110a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
        Left alloca redzone:     ca
        Right alloca redzone:    cb
        Shadow gap:              cc
      ==2126800==ABORTING
      210217  2:48:46 [ERROR] mysqld got signal 6 ;
      This could be because you hit a bug. It is also possible that this binary
      or one of the libraries it was linked against is corrupt, improperly built,
      or misconfigured. This error can also be caused by malfunctioning hardware.
       
      To report this bug, see https://mariadb.com/kb/en/reporting-bugs
       
      We will try our best to scrape up some info that will hopefully help
      diagnose the problem, but since we have already crashed, 
      something is definitely wrong and this may fail.
       
      Server version: 10.5.9-MariaDB-debug-log
      key_buffer_size=1048576
      read_buffer_size=131072
      max_used_connections=1
      max_threads=153
      thread_count=2
      It is possible that mysqld could use up to 
      key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63744 K  bytes of memory
      Hope that's ok; if not, decrease some variables in the equation.
       
      Thread pointer: 0x62b00009a288
      Attempting backtrace. You can use the following information to find out
      where mysqld died. If you see no messages after this, something went
      terribly wrong...
      stack_bottom = 0x7fb86bcf8950 thread_stack 0x5fc00
      ??:0(__interceptor_tcgetattr)[0x7fb87b6b7d30]
      mysys/stacktrace.c:212(my_print_stacktrace)[0x563d38b7a3d9]
      sql/signal_handler.cc:211(handle_fatal_signal)[0x563d375b81f4]
      sigaction.c:0(__restore_rt)[0x7fb87b2763c0]
      ??:0(gsignal)[0x7fb87ad6418b]
      ??:0(abort)[0x7fb87ad43859]
      ??:0(__sanitizer_set_report_fd)[0x7fb87b7766a2]
      ??:0(__sanitizer_get_module_and_offset_for_pc)[0x7fb87b78124c]
      ??:0(__sanitizer_ptr_cmp)[0x7fb87b7628ec]
      ??:0(__asan_on_error)[0x7fb87b762363]
      ??:0(__asan_report_load1)[0x7fb87b762e4b]
      sql-common/my_time.c:306(get_suffix)[0x563d38bc3a3b]
      sql-common/my_time.c:362(find_body)[0x563d38bc40e4]
      sql-common/my_time.c:880(str_to_datetime_or_date)[0x563d38bc7070]
      sql/sql_type.h:1023(Temporal::ascii_to_datetime_or_date(st_mysql_time_status*, char const*, unsigned long, date_mode_t))[0x563d37151553]
      sql/sql_type.h:986(Temporal::ascii_to_temporal(st_mysql_time_status*, char const*, unsigned long, date_mode_t))[0x563d37150b62]
      sql/sql_time.cc:403(Temporal::str_to_temporal(THD*, st_mysql_time_status*, char const*, unsigned long, charset_info_st const*, date_mode_t))[0x563d371472bc]
      sql/sql_type.cc:352(Temporal::make_from_str(THD*, Temporal::Warn*, char const*, unsigned long, charset_info_st const*, date_mode_t))[0x563d37359bfe]
      sql/sql_type.h:1186(Temporal_hybrid::Temporal_hybrid(THD*, Temporal::Warn*, String const*, date_mode_t))[0x563d37395e95]
      sql/field.cc:2418(Field::get_date(st_mysql_time*, date_mode_t))[0x563d3752ea42]
      sql/item.cc:3285(Item_field::get_date(THD*, st_mysql_time*, date_mode_t))[0x563d3762c2a7]
      sql/sql_type.cc:1010(Temporal_with_date::make_from_item(THD*, Item*, date_mode_t))[0x563d3735fdf4]
      sql/sql_type.h:2044(Temporal_with_date::Temporal_with_date(THD*, Item*, date_mode_t))[0x563d36af2790]
      sql/sql_type.h:2324(Datetime::Datetime(THD*, Item*, date_mode_t))[0x563d36af2c2b]
      sql/sql_type.h:2375(Datetime::Datetime(THD*, Item*, date_mode_t, unsigned int))[0x563d3758563e]
      sql/item_timefunc.cc:2574(Item_datetime_typecast::get_date(THD*, st_mysql_time*, date_mode_t))[0x563d37888618]
      sql/item.cc:373(Item::save_date_in_field(Field*, bool))[0x563d37610fea]
      sql/sql_type.cc:4228(Type_handler_temporal_with_date::Item_save_in_field(Item*, Field*, bool) const)[0x563d37371006]
      sql/item.cc:6665(Item::save_in_field(Field*, bool))[0x563d37647e13]
      sql/item.h:3289(Item_result_field::save_in_result_field(bool))[0x563d36c4b917]
      sql/sql_select.cc:25785(copy_funcs(Item**, THD const*))[0x563d36f2f5a0]
      sql/item_sum.cc:4141(Item_func_group_concat::add(bool))[0x563d3785d63f]
      sql/item_sum.h:1977(Item_func_group_concat::add())[0x563d37868aa5]
      sql/item_sum.h:718(Aggregator_simple::add())[0x563d378634c0]
      sql/item_sum.h:560(Item_sum::aggregator_add())[0x563d36f52a98]
      sql/item_sum.h:446(Item_sum::reset_and_add())[0x563d36f5270e]
      sql/sql_select.cc:25730(init_sum_functions(Item_sum**, Item_sum**))[0x563d36f2f36c]
      sql/sql_select.cc:22087(end_send_group(JOIN*, st_join_table*, bool))[0x563d36f13c85]
      sql/sql_select.cc:20909(evaluate_join_record(JOIN*, st_join_table*, int))[0x563d36f0a035]
      sql/sql_select.cc:20686(sub_select(JOIN*, st_join_table*, bool))[0x563d36f0898b]
      sql/sql_select.cc:20220(do_select(JOIN*, Procedure*))[0x563d36f06ab2]
      sql/sql_select.cc:4466(JOIN::exec_inner())[0x563d36e93389]
      sql/sql_select.cc:4247(JOIN::exec())[0x563d36e90974]
      sql/sql_select.cc:4721(mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x563d36e94d48]
      sql/sql_select.cc:417(handle_select(THD*, LEX*, select_result*, unsigned long))[0x563d36e66586]
      sql/sql_parse.cc:6281(execute_sqlcom_select(THD*, TABLE_LIST*))[0x563d36dcfb82]
      sql/sql_parse.cc:3977(mysql_execute_command(THD*))[0x563d36dbea7d]
      sql/sql_parse.cc:8062(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x563d36ddae7c]
      sql/sql_parse.cc:1892(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x563d36db1169]
      sql/sql_parse.cc:1370(do_command(THD*))[0x563d36dada92]
      sql/sql_connect.cc:1410(do_handle_one_connection(CONNECT*, bool))[0x563d371f0404]
      sql/sql_connect.cc:1314(handle_one_connection)[0x563d371efd68]
      perfschema/pfs.cc:2203(pfs_spawn_thread)[0x563d37efe2a9]
      nptl/pthread_create.c:478(start_thread)[0x7fb87b26a609]
      ??:0(clone)[0x7fb87ae40293]
       
      Trying to get some variables.
      Some pointers may be invalid and cause the dump to abort.
      Query (0x62b0000a12a8): SELECT GROUP_CONCAT(TIMESTAMP(c)) FROM t1 GROUP BY PERIOD_DIFF(b, 202101)
       
      Connection ID (thread ID): 4
      Status: NOT_KILLED
       
      Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on,not_null_range_scan=off
       
      The manual page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mysqld/ contains
      information that should help you find out what is causing the crash.
      Writing a core file...
      Working directory at /dev/shm/var_auto_qNn1/mysqld.1/data
      Resource Limits:
      Limit                     Soft Limit           Hard Limit           Units     
      Max cpu time              unlimited            unlimited            seconds   
      Max file size             unlimited            unlimited            bytes     
      Max data size             unlimited            unlimited            bytes     
      Max stack size            8388608              unlimited            bytes     
      Max core file size        0                    0                    bytes     
      Max resident set          unlimited            unlimited            bytes     
      Max processes             385883               385883               processes 
      Max open files            1024                 1024                 files     
      Max locked memory         67108864             67108864             bytes     
      Max address space         unlimited            unlimited            bytes     
      Max file locks            unlimited            unlimited            locks     
      Max pending signals       385883               385883               signals   
      Max msgqueue size         819200               819200               bytes     
      Max nice priority         0                    0                    
      Max realtime priority     0                    0                    
      Max realtime timeout      unlimited            unlimited            us        
      Core pattern: |/usr/share/apport/apport %p %s %c %d %P %E
      

      10.2 ASAN e926964c

      GROUP_CONCAT(TIMESTAMP(c))
      NULL
      Warnings:
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      Warning	1292	Incorrect datetime value: '\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\xA5\...'
      

      10.2 non-debug e926964c

      GROUP_CONCAT(TIMESTAMP(c))
      NULL
      Warnings:
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: '\x06~\xCE\x8Ea\x12\x00\x00\x06~\xCE\x8Ea\x12\x00\x00\x11\x03\x00\x05\x11\x09\x03\x03\x02\x0C\x07\x0E\x00\x06\x11\x11\xBA\x00\...'
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: '\x06~\xCE\x8Ea\x12\x00\x00\x06~\xCE\x8Ea\x12\x00\x00\x11\x03\x00\x05\x11\x09\x03\x03\x02\x0C\x07\x0E\x00\x06\x11\x11\xBA\x00\...'
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: '\x06~\xCE\x8Ea\x12\x00\x00\x06~\xCE\x8Ea\x12\x00\x00\x11\x03\x00\x05\x11\x09\x03\x03\x02\x0C\x07\x0E\x00\x06\x11\x11\xBA\x00\...'
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: '\x06~\xCE\x8Ea\x12\x00\x00\x06~\xCE\x8Ea\x12\x00\x00\x11\x03\x00\x05\x11\x09\x03\x03\x02\x0C\x07\x0E\x00\x06\x11\x11\xBA\x00\...'
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      Warning	1292	Incorrect datetime value: ''
      

      The expected result is a normal GROUP_CONCAT output with timestamps (possibly truncated, depending on the group_concat_max_len value).

      Reproducible on 10.2-10.6, wrong result on all builds, ASAN errors on some builds.

        Attachments

          Activity

            People

            Assignee:
            sanja Oleksandr Byelkin
            Reporter:
            elenst Elena Stepanova
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated: