Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-25527

ERROR: AddressSanitizer: attempting double-free in __interceptor_free nearby dict_mem_table_free

    XMLWordPrintable

Details

    Description

      ASAN failure hit during RQG testing
       
      # 2021-04-26T08:58:49 [1871827] | ==1875000==ERROR: AddressSanitizer: attempting double-free on 0x6170001d6200 in thread T27:
      # 2021-04-26T08:58:49 [1871827] |     #0 0x7f0534cc17cf in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.5+0x10d7cf)
      # 2021-04-26T08:58:49 [1871827] |     #1 0x55febde00ee5 in dict_mem_table_free(dict_table_t*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/dict/dict0mem.cc:235
      # 2021-04-26T08:58:49 [1871827] |     #2 0x55febdcaa1a7 in btr_search_lazy_free /data/Server/bb-10.6-MDEV-25491/storage/innobase/btr/btr0sea.cc:217
      # 2021-04-26T08:58:49 [1871827] |     #3 0x55febdcad9cb in btr_search_drop_page_hash_index(buf_block_t*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/btr/btr0sea.cc:1395
      # 2021-04-26T08:58:49 [1871827] |     #4 0x55febdd4566e in buf_LRU_free_page(buf_page_t*, bool) /data/Server/bb-10.6-MDEV-25491/storage/innobase/buf/buf0lru.cc:946
      # 2021-04-26T08:58:49 [1871827] |     #5 0x55febdd48303 in buf_LRU_free_from_common_LRU_list /data/Server/bb-10.6-MDEV-25491/storage/innobase/buf/buf0lru.cc:246
      # 2021-04-26T08:58:49 [1871827] |     #6 0x55febdd48928 in buf_LRU_scan_and_free_block(unsigned long) /data/Server/bb-10.6-MDEV-25491/storage/innobase/buf/buf0lru.cc:278
      # 2021-04-26T08:58:49 [1871827] |     #7 0x55febdd48df9 in buf_LRU_get_free_block(bool) /data/Server/bb-10.6-MDEV-25491/storage/innobase/buf/buf0lru.cc:439
      # 2021-04-26T08:58:49 [1871827] |     #8 0x55febdca113b in buf_block_alloc() /data/Server/bb-10.6-MDEV-25491/storage/innobase/include/buf0buf.ic:190
      # 2021-04-26T08:58:49 [1871827] |     #9 0x55febdca113b in btr_search_check_free_space_in_heap /data/Server/bb-10.6-MDEV-25491/storage/innobase/btr/btr0sea.cc:181
      # 2021-04-26T08:58:49 [1871827] |     #10 0x55febdcb0098 in btr_search_update_hash_on_insert(btr_cur_t*, ssux_lock_low*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/btr/btr0sea.cc:1972
      # 2021-04-26T08:58:49 [1871827] |     #11 0x55febdc4d579 in btr_cur_optimistic_insert(unsigned long, btr_cur_t*, unsigned short**, mem_block_info_t**, dtuple_t*, unsigned char**, big_rec_t**, unsigned long, que_thr_t*, mtr_t*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/btr/btr0cur.cc:3618
      # 2021-04-26T08:58:49 [1871827] |     #12 0x55febd97783d in row_ins_sec_index_entry_low(unsigned long, unsigned long, dict_index_t*, mem_block_info_t*, mem_block_info_t*, dtuple_t*, unsigned long, que_thr_t*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0ins.cc:3145
      # 2021-04-26T08:58:49 [1871827] |     #13 0x55febd97859e in row_ins_sec_index_entry(dict_index_t*, dtuple_t*, que_thr_t*, bool) /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0ins.cc:3346
      # 2021-04-26T08:58:49 [1871827] |     #14 0x55febd978fe5 in row_ins_index_entry /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0ins.cc:3394
      # 2021-04-26T08:58:49 [1871827] |     #15 0x55febd9792e2 in row_ins_index_entry_step /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0ins.cc:3561
      # 2021-04-26T08:58:49 [1871827] |     #16 0x55febd97aa3c in row_ins /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0ins.cc:3707
      # 2021-04-26T08:58:49 [1871827] |     #17 0x55febd97b930 in row_ins_step(que_thr_t*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0ins.cc:3853
      # 2021-04-26T08:58:49 [1871827] |     #18 0x55febd9d0ed3 in row_insert_for_mysql(unsigned char const*, row_prebuilt_t*, ins_mode_t) /data/Server/bb-10.6-MDEV-25491/storage/innobase/row/row0mysql.cc:1395
      # 2021-04-26T08:58:49 [1871827] |     #19 0x55febd60d11d in ha_innobase::write_row(unsigned char const*) /data/Server/bb-10.6-MDEV-25491/storage/innobase/handler/ha_innodb.cc:7420
      # 2021-04-26T08:58:49 [1871827] |     #20 0x55febcbcb466 in handler::ha_write_row(unsigned char const*) /data/Server/bb-10.6-MDEV-25491/sql/handler.cc:7162
      # 2021-04-26T08:58:49 [1871827] |     #21 0x55febc28927e in write_record(THD*, TABLE*, st_copy_info*, select_result*) /data/Server/bb-10.6-MDEV-25491/sql/sql_insert.cc:2106
      # 2021-04-26T08:58:49 [1871827] |     #22 0x55febc2a9694 in mysql_insert(THD*, TABLE_LIST*, List<Item>&, List<List<Item> >&, List<Item>&, List<Item>&, enum_duplicates, bool, select_result*) /data/Server/bb-10.6-MDEV-25491/sql/sql_insert.cc:1099
      # 2021-04-26T08:58:49 [1871827] |     #23 0x55febc3885b0 in mysql_execute_command(THD*) /data/Server/bb-10.6-MDEV-25491/sql/sql_parse.cc:4559
      # 2021-04-26T08:58:49 [1871827] |     #24 0x55febc347306 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/Server/bb-10.6-MDEV-25491/sql/sql_parse.cc:8018
      # 2021-04-26T08:58:49 [1871827] |     #25 0x55febc375de7 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/Server/bb-10.6-MDEV-25491/sql/sql_parse.cc:1897
      # 2021-04-26T08:58:49 [1871827] |     #26 0x55febc37e297 in do_command(THD*, bool) /data/Server/bb-10.6-MDEV-25491/sql/sql_parse.cc:1406
      # 2021-04-26T08:58:49 [1871827] |     #27 0x55febc7a6fea in do_handle_one_connection(CONNECT*, bool) /data/Server/bb-10.6-MDEV-25491/sql/sql_connect.cc:1410
      # 2021-04-26T08:58:49 [1871827] |     #28 0x55febc7a7b98 in handle_one_connection /data/Server/bb-10.6-MDEV-25491/sql/sql_connect.cc:1312
      # 2021-04-26T08:58:49 [1871827] |     #29 0x7f0534aa2608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
      # 2021-04-26T08:58:49 [1871827] |     #30 0x7f0534676292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
       
      # 2021-04-26T08:58:49 [1871827] | Query (0x62b000188238): INSERT INTO b ( `col_int_nokey`, `col_int_key` ) VALUES ( 5, 5 ), ( 1, 0 ) /* E_R Thread10 QNO 553 CON_ID 24 */
      ...
      # 2021-04-26T08:58:49 [1871827] | Status: NOT_KILLED
       
      HEAD, origin/bb-10.6-MDEV-25491 bb167613126a97652654d7ff7341fdbe4d2320cc 2021-04-26T13:58:26+03:00
       
      sdp:/data/Results/1619451439/TBR-1037
      gdb -c ./dev/shm/vardir/1619451439/174/1/data/core /Server_bin/bb-10.6-MDEV-25491_asan_Og/bin/mysqld
       
      RQG
      -------
      git clone https://github.com/mleich1/rqg --branch experimental RQG
       
      perl rqg.pl \
      --grammar=conf/mariadb/partitions_innodb.yy \
      --mysqld=--loose-innodb_lock_schedule_algorithm=fcfs \
      --mysqld=--loose-idle_write_transaction_timeout=0 \
      --mysqld=--loose-idle_transaction_timeout=0 \
      --mysqld=--loose-idle_readonly_transaction_timeout=0 \
      --mysqld=--connect_timeout=60 \
      --mysqld=--interactive_timeout=28800 \
      --mysqld=--slave_net_timeout=60 \
      --mysqld=--net_read_timeout=30 \
      --mysqld=--net_write_timeout=60 \
      --mysqld=--loose-table_lock_wait_timeout=50 \
      --mysqld=--wait_timeout=28800 \
      --mysqld=--lock-wait-timeout=86400 \
      --mysqld=--innodb-lock-wait-timeout=50 \
      --no-mask \
      --queries=10000000 \
      --seed=random \
      --reporters=Backtrace \
      --reporters=ErrorLog \
      --reporters=Deadlock1 \
      --validators=None \
      --mysqld=--log_output=none \
      --mysqld=--log-bin \
      --mysqld=--log_bin_trust_function_creators=1 \
      --mysqld=--loose-debug_assert_on_not_freed_memory=0 \
      --engine=InnoDB \
      --restart_timeout=240 \
      --mysqld=--plugin-load-add=file_key_management.so \
      --mysqld=--loose-file-key-management-filename=$RQG_HOME/conf/mariadb/encryption_keys.txt \
      --duration=300 \
      --mysqld=--loose-innodb_fatal_semaphore_wait_threshold=300 \
      --mysqld=--loose-innodb-sync-debug \
      --mysqld=--innodb_stats_persistent=off \
      --mysqld=--innodb_adaptive_hash_index=on \
      --mysqld=--loose-innodb_evict_tables_on_commit_debug=off \
      --mysqld=--loose-max-statement-time=30 \
      --threads=33 \
      --mysqld=--innodb_use_native_aio=1 \
      --mysqld=--innodb_page_size=32K \
      --mysqld=--innodb-buffer-pool-size=256M \
      --duration=300 \
      --no_mask \
      --workdir=<local settings> \
      --vardir=<local settings> \
      --mtr-build-thread=<local settings> \
      --basedir1=<local settings> \
      --script_debug=_nix_
      
      

      Attachments

        Issue Links

          Activity

            People

              thiru Thirunarayanan Balathandayuthapani
              mleich Matthias Leich
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.