Details
Major Description
I used my fuzzing tool to test Mariadb , and found a bug that can result in an abortion.
Mariadb installation：
1) cd mariadb-10.5.9
2) mkdir build; cd build
3) cmake -DWITH_ASAN=ON -DWITH_ASAN_SCOPE=ON -DWITH_DEBUG=ON ../
4) make -j8 && sudo make install
How to Repeat:
export ASAN_OPTIONS=detect_leaks=0
/usr/local/mysql/bin/mysqld_safe &
/usr/local/mysql/bin/mysql -uroot -p123456(your password)
MariaDB> drop database if exists test_db;
MariaDB> create database test_db;
MariaDB> source fuzz.sql;
I have simplified the content of fuzz.sql, and I hope fuzz.sql can help you reproduce the bug and fix it. In addition, I attach the abortion report (which has its stack trace).
Attachments
Issue Links
- causes
-
MDEV-28206 SIGSEGV in Item_field::fix_fields when using LEAD...OVER
-
- Closed
-
- duplicates
-
-
- Closed
-
- relates to
-
-
- Closed
-
- links to
Activity
| Field | Original Value | New Value |
|---|---|---|
| Affects Version/s | 5.5 [ 15800 ] | |
| Affects Version/s | 10.1 [ 16100 ] | |
| Affects Version/s | 10.2 [ 14601 ] | |
| Affects Version/s | 10.3 [ 22126 ] | |
| Affects Version/s | 10.4 [ 22408 ] | |
| Affects Version/s | 10.5 [ 23123 ] | |
| Affects Version/s | 10.0 [ 16000 ] |
| Fix Version/s | 10.2 [ 14601 ] | |
| Fix Version/s | 10.3 [ 22126 ] | |
| Fix Version/s | 10.4 [ 22408 ] | |
| Fix Version/s | 10.5 [ 23123 ] |
| Status | Open [ 1 ] | Confirmed [ 10101 ] |
| Assignee | Sergei Petrunia [ psergey ] |
| Link |
This issue relates to |
| Priority | Critical [ 2 ] | Major [ 3 ] |
| Component/s | Optimizer [ 10200 ] | |
| Component/s | Query Cache [ 10120 ] |
| Epic/Theme | server |
| Status | Confirmed [ 10101 ] | In Progress [ 3 ] |
| Summary | Bug report: abortion in sql/sql_acl.cc:6186 | Bug report: crash in |
| Summary | Bug report: crash in | Bug report: crash in st_select_lex::mark_as_dependent with VIEWs and subqueries |
| Summary | Bug report: crash in st_select_lex::mark_as_dependent with VIEWs and subqueries | Crash in st_select_lex::mark_as_dependent with VIEW, aggregate and subquery |
| Assignee | Sergei Petrunia [ psergey ] | Oleksandr Byelkin [ sanja ] |
| Status | In Progress [ 3 ] | In Review [ 10002 ] |
| Labels | crash | crash fuzzer |
| Assignee | Oleksandr Byelkin [ sanja ] | Sergei Petrunia [ psergey ] |
| Status | In Review [ 10002 ] | Stalled [ 10000 ] |
| Link |
This issue duplicates |
| Workflow | MariaDB v3 [ 121709 ] | MariaDB v4 [ 143689 ] |
| Summary | Crash in st_select_lex::mark_as_dependent with VIEW, aggregate and subquery | Crash in query with VIEW, aggregate and subquery |
| Assignee | Sergei Petrunia [ psergey ] | Igor Babaev [ igor ] |
| Summary | Crash in query with VIEW, aggregate and subquery | Crash executing query with VIEW, aggregate and subquery |
| Status | Stalled [ 10000 ] | In Progress [ 3 ] |
| Fix Version/s | 10.2.42 [ 26803 ] | |
| Fix Version/s | 10.3.33 [ 26805 ] | |
| Fix Version/s | 10.4.23 [ 26807 ] | |
| Fix Version/s | 10.5.14 [ 26809 ] | |
| Fix Version/s | 10.6.6 [ 26811 ] | |
| Fix Version/s | 10.7.2 [ 26813 ] | |
| Fix Version/s | 10.2 [ 14601 ] | |
| Fix Version/s | 10.3 [ 22126 ] | |
| Fix Version/s | 10.4 [ 22408 ] | |
| Fix Version/s | 10.5 [ 23123 ] | |
| Resolution | Fixed [ 1 ] | |
| Status | In Progress [ 3 ] | Closed [ 6 ] |
| Remote Link | This issue links to "CVE-2021-46659 (Web Link)" [ 33003 ] |
| Link |
This issue causes |