Details
-
Bug
-
Status: Closed (View Workflow)
-
Critical
-
Resolution: Cannot Reproduce
-
10.5.9
-
Ubuntu 18.04
MariaDB 10.5.9
Description
I used my fuzzing tool to test Mariadb , and found a bug that can result in an abortion.
Mariadb installation：
1) cd mariadb-10.5.9
2) mkdir build; cd build
3) cmake -DWITH_ASAN=ON -DWITH_ASAN_SCOPE=ON -DCMAKE_BUILD_TYPE=Debug ../
4) make -j8 && sudo make install
How to Repeat:
export ASAN_OPTIONS=detect_leaks=0
/usr/local/mysql/bin/mysqld_safe &
/usr/local/mysql/bin/mysql -uroot -p123456(your password)
MariaDB> drop database if exists test_db;
MariaDB> create database test_db;
MariaDB> use test_db;
MariaDB> source fuzz.sql;
I have simplified the content of fuzz.sql, and I hope fuzz.sql can help you reproduce the bug and fix it. In addition, I attach the failure report (which has its stack trace).
Attachments
Activity
| Field | Original Value | New Value |
|---|---|---|
| Description |
I used my fuzzing tool to test Mariadb , and found a bug that can result in an abortion.
Mariadb installation： 1) cd mariadb-10.5.9 2) mkdir build; cd build 3) cmake -DWITH_ASAN=ON -DWITH_ASAN_SCOPE=ON -DCMAKE_BUILD_TYPE=Debug ../ 4) make -j8 && sudo make install How to Repeat: export ASAN_OPTIONS=detect_leaks=0 /usr/local/mysql/bin/mysqld_safe & /usr/local/mysql/bin/mysql -uroot -p123456(your password) MariaDB> drop database if exists test_db; MariaDB> create database test_db; MariaDB> use test_db; MariaDB> source fuzz.sql; I have simplified the content of fuzz.sql, and I hope fuzz.sql can help you reproduce the bug and fix it. In addition, I attach the abortion report (which has its stack trace). |
I used my fuzzing tool to test Mariadb , and found a bug that can result in an abortion.
Mariadb installation： 1) cd mariadb-10.5.9 2) mkdir build; cd build 3) cmake -DWITH_ASAN=ON -DWITH_ASAN_SCOPE=ON -DCMAKE_BUILD_TYPE=Debug ../ 4) make -j8 && sudo make install How to Repeat: export ASAN_OPTIONS=detect_leaks=0 /usr/local/mysql/bin/mysqld_safe & /usr/local/mysql/bin/mysql -uroot -p123456(your password) MariaDB> drop database if exists test_db; MariaDB> create database test_db; MariaDB> use test_db; MariaDB> source fuzz.sql; I have simplified the content of fuzz.sql, and I hope fuzz.sql can help you reproduce the bug and fix it. In addition, I attach the failure report (which has its stack trace). |
Failed to reproduce on debug version too:
MariaDB [test_db]> use test_db;
|
Database changed
|
MariaDB [test_db]> source ~/Downloads/fuzz-MDEV-26347.sql
|
Query OK, 0 rows affected (0.009 sec)
|
|
|
+---+
|
| 1 |
|
+---+
|
| 1 |
|
+---+
|
1 row in set (0.004 sec)
|
|
|
MariaDB [test_db]> select version();
|
+-----------------------+
|
| version() |
|
+-----------------------+
|
| 10.5.13-MariaDB-debug |
|
+-----------------------+
|
1 row in set (0.001 sec)
|
|
| Fix Version/s | N/A [ 14700 ] | |
| Assignee | Daniel Black [ danblack ] | |
| Resolution | Cannot Reproduce [ 5 ] | |
| Status | Open [ 1 ] | Closed [ 6 ] |
also checked 10.2.41, 10.3.32, 10.4.42 latest as of today and couldn't reproduce Assertion on non-debug versions.
| Workflow | MariaDB v3 [ 124256 ] | MariaDB v4 [ 159571 ] |
failed to reproduce on
10.5-0268b871228
CMakeCache.txt:WITH_ASAN:BOOL=ONCMakeCache.txt:WITH_ASAN_SCOPE:BOOL=ONCMAKE_CXX_COMPILER:STRING=/usr/lib64/ccache/clang++CMAKE_C_COMPILER:STRING=/usr/lib64/ccache/clangCMAKE_BUILD_TYPE:STRING=RelWithDebInfo$ /usr/lib64/ccache/clang++ --versionclang version 12.0.0 (Fedora 12.0.0-2.fc34)Target: x86_64-unknown-linux-gnuThread model: posixInstalledDir: /usr/bin