Details
-
Bug
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Fixed
-
10.5.9, 10.4(EOL), 10.5
-
Ubuntu 18.04
MariaDB 10.5.9
Description
I used my fuzzing tool to test Mariadb , and found a bug that can result in an abortion.
Mariadb installation：
1) cd mariadb-10.5.9
2) mkdir build; cd build
3) cmake -DWITH_ASAN=ON -DWITH_ASAN_SCOPE=ON -DWITH_DEBUG=ON ../
4) make -j8 && sudo make install
How to Repeat:
export ASAN_OPTIONS=detect_leaks=0
/usr/local/mysql/bin/mysqld_safe &
/usr/local/mysql/bin/mysql -uroot -p123456(your password)
MariaDB> drop database if exists test_db;
MariaDB> create database test_db;
MariaDB> source fuzz.sql;
I have simplified the content of fuzz.sql, and I hope fuzz.sql can help you reproduce the bug and fix it. In addition, I attach the abortion report (which has its stack trace).
Attachments
Issue Links
- relates to
-
-
- Closed
-
-
-
- Closed
-
- links to
Activity
| Field | Original Value | New Value |
|---|---|---|
| Affects Version/s | 10.4 [ 22408 ] | |
| Affects Version/s | 10.5 [ 23123 ] |
| Fix Version/s | 10.4 [ 22408 ] | |
| Fix Version/s | 10.5 [ 23123 ] |
| Labels | crash | crash regression |
| Assignee | Sergei Petrunia [ psergey ] |
| Component/s | Query Cache [ 10120 ] |
| Epic/Theme | server |
| Component/s | Optimizer - CTE [ 13513 ] |
| Status | Open [ 1 ] | In Progress [ 3 ] |
| Labels | crash regression | condition_pushdown_from_having crash regression |
| Assignee | Sergei Petrunia [ psergey ] | Igor Babaev [ igor ] |
| Component/s | Optimizer - CTE [ 13513 ] |
| Component/s | Optimizer [ 10200 ] |
| Summary | Bug report: abortion in sql/sql_yacc_ora.yy:14794 | Assertion failure when pushing from HAVING into WHERE of view |
| Assignee | Igor Babaev [ igor ] | Sergei Petrunia [ psergey ] |
| Status | In Progress [ 3 ] | In Review [ 10002 ] |
| Assignee | Sergei Petrunia [ psergey ] | Igor Babaev [ igor ] |
| Status | In Review [ 10002 ] | Stalled [ 10000 ] |
| Labels | condition_pushdown_from_having crash regression | condition_pushdown_from_having crash |
| Fix Version/s | 10.6.2 [ 25800 ] | |
| Fix Version/s | 10.2.39 [ 25731 ] | |
| Fix Version/s | 10.3.30 [ 25732 ] | |
| Fix Version/s | 10.4.20 [ 25733 ] | |
| Fix Version/s | 10.5.11 [ 25734 ] | |
| Fix Version/s | 10.4 [ 22408 ] | |
| Fix Version/s | 10.5 [ 23123 ] | |
| Resolution | Fixed [ 1 ] | |
| Status | Stalled [ 10000 ] | Closed [ 6 ] |
| Link |
This issue relates to |
| Link |
This issue relates to |
| Workflow | MariaDB v3 [ 121714 ] | MariaDB v4 [ 159257 ] |
| Remote Link | This issue links to "CVE-2021-46666 (Web Link)" [ 33011 ] |