Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-26578

ERROR: AddressSanitizer: heap-use-after-free around dict_table_t::is_temporary_name

    XMLWordPrintable

Details

    Description

      origin/bb-10.5-MDEV-25776 8d8c640963ed79ffc65d509c0c6e8466a5966ea8 2021-09-08T15:38:28+03:00
      Per Marko:
      The fix for MDEV-25776 is slightly imperfect.
      But the bad effect observed relates to FTS and cannot be caused by the fix.
      == The problem should be in actual 10.5 too.
       
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 328169][rr 2853077 328173]==2853077==ERROR: AddressSanitizer: heap-use-after-free on address 0x6040003a3710 at pc 0x000067625235 bp 0x6400008bb420 sp 0x6400008babc8
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 328176][rr 2853077 328178]READ of size 33 at 0x6040003a3710 thread T5
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351469]    #0 0x67625234  (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x57234)
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351471]    #1 0x676a7c10 in strstr (/usr/lib/x86_64-linux-gnu/libasan.so.5+0xd9c10)
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351597]    #2 0x559832212179 in dict_table_t::is_temporary_name(char const*) /data/Server/bb-10.5-MDEV-25776/storage/innobase/include/dict0mem.h:1864
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351644]    #3 0x5598322123b1 in table_name_t::is_temporary() const /data/Server/bb-10.5-MDEV-25776/storage/innobase/include/dict0mem.h:2374
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351664]    #4 0x5598325903a9 in row_purge_parse_undo_rec /data/Server/bb-10.5-MDEV-25776/storage/innobase/row/row0purge.cc:938
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351716]    #5 0x559832591a0b in row_purge /data/Server/bb-10.5-MDEV-25776/storage/innobase/row/row0purge.cc:1107
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351718]    #6 0x559832591dad in row_purge_step(que_thr_t*) /data/Server/bb-10.5-MDEV-25776/storage/innobase/row/row0purge.cc:1159
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351734]    #7 0x559832476792 in que_thr_step /data/Server/bb-10.5-MDEV-25776/storage/innobase/que/que0que.cc:946
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351758]    #8 0x559832476bfe in que_run_threads_low /data/Server/bb-10.5-MDEV-25776/storage/innobase/que/que0que.cc:1008
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351779]    #9 0x55983247705d in que_run_threads(que_thr_t*) /data/Server/bb-10.5-MDEV-25776/storage/innobase/que/que0que.cc:1048
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 351924]    #10 0x559832672cc5 in trx_purge(unsigned long, bool) /data/Server/bb-10.5-MDEV-25776/storage/innobase/trx/trx0purge.cc:1286
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352011]    #11 0x559832614d8c in srv_do_purge /data/Server/bb-10.5-MDEV-25776/storage/innobase/srv/srv0srv.cc:1948
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352064]    #12 0x5598326159d9 in purge_coordinator_callback_low /data/Server/bb-10.5-MDEV-25776/storage/innobase/srv/srv0srv.cc:2048
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352092]    #13 0x559832615c3d in purge_coordinator_callback /data/Server/bb-10.5-MDEV-25776/storage/innobase/srv/srv0srv.cc:2077
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352096]    #14 0x559832a186a7 in tpool::task_group::execute(tpool::task*) /data/Server/bb-10.5-MDEV-25776/tpool/task_group.cc:55
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352098]    #15 0x559832a18fae in tpool::task::execute() /data/Server/bb-10.5-MDEV-25776/tpool/task.cc:47
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352140]2021-09-08 12:27:00 41 [Note] InnoDB: Online DDL : Start reading clustered index of the table and create temporary files
      # 2021-09-08T12:28:56 [2852137] | [rr 2853077 352182]    #16 0x559832a04f6c in tpool::thread_pool_generic::worker_main(tpool::worker_data*) /data/Server/bb-10.5-MDEV-25776/tpool/tpool_generic.cc:546
      sdp:/data/Results/1631107041/TBR-1193/dev/shm/vardir/1631107041/12/1/rr
       
      RQG
      ====
      git clone https://github.com/mleich1/rqg --branch experimental RQG
       
      perl rqg.pl \
      --grammar=conf/mariadb/table_stress_innodb.yy \
      --gendata=conf/mariadb/table_stress.zz \
      --gendata_sql=conf/mariadb/table_stress.sql \
      --mysqld=--loose-innodb_lock_schedule_algorithm=fcfs \
      --mysqld=--loose-idle_write_transaction_timeout=0 \
      --mysqld=--loose-idle_transaction_timeout=0 \
      --mysqld=--loose-idle_readonly_transaction_timeout=0 \
      --mysqld=--connect_timeout=60 \
      --mysqld=--interactive_timeout=28800 \
      --mysqld=--slave_net_timeout=60 \
      --mysqld=--net_read_timeout=30 \
      --mysqld=--net_write_timeout=60 \
      --mysqld=--loose-table_lock_wait_timeout=50 \
      --mysqld=--wait_timeout=28800 \
      --mysqld=--lock-wait-timeout=86400 \
      --mysqld=--innodb-lock-wait-timeout=50 \
      --no-mask \
      --queries=10000000 \
      --seed=random \
      --reporters=Backtrace \
      --reporters=ErrorLog \
      --reporters=Deadlock1 \
      --validators=None \
      --mysqld=--log_output=none \
      --mysqld=--log_bin_trust_function_creators=1 \
      --mysqld=--loose-debug_assert_on_not_freed_memory=0 \
      --engine=InnoDB \
      --restart_timeout=240 \
      --mysqld=--plugin-load-add=file_key_management.so \
      --mysqld=--loose-file-key-management-filename=$RQG_HOME/conf/mariadb/encryption_keys.txt \
      --duration=300 \
      --mysqld=--loose-innodb_fatal_semaphore_wait_threshold=300 \
      --mysqld=--loose-innodb-sync-debug \
      --mysqld=--innodb_stats_persistent=on \
      --mysqld=--innodb_adaptive_hash_index=on \
      --mysqld=--log-bin \
      --mysqld=--sync-binlog=1 \
      --mysqld=--loose-innodb_evict_tables_on_commit_debug=off \
      --mysqld=--loose-max-statement-time=30 \
      --threads=33 \
      --mysqld=--innodb-use-native-aio=0 \
      --rr=Extended \
      --rr_options=--chaos --wait \
      --mysqld=--innodb_page_size=16K \
      --mysqld=--innodb-buffer-pool-size=256M \
      --no_mask \
      --workdir=<local settings> \
      --vardir=<local settings> \
      --mtr-build-thread=<local settings> \
      --basedir1=<local settings> \
      --script_debug=_nix_
      

      Attachments

        Issue Links

          Activity

            People

              thiru Thirunarayanan Balathandayuthapani
              mleich Matthias Leich
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.