Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-26594

ASAN use-after-poison in Field_blob::get_key_image / calculate_cond_selectivity_for_table

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 10.4, 10.5, 10.6, 10.7
    • Fix Version/s: 10.4, 10.5, 10.6
    • Component/s: Optimizer
    • Labels:
      None

      Description

      CREATE TABLE t1 (a int);
      INSERT INTO t1 VALUES (1),(2);
      CREATE TABLE t2 (f TEXT UNIQUE);
      INSERT INTO t2 () VALUES ('foo'),('bar');
      ANALYZE TABLE t2 PERSISTENT FOR ALL;
      SELECT * FROM t1 STRAIGHT_JOIN t2 WHERE f != 'qux';
       
      # Cleanup
      DROP TABLE t1, t2;
      

      10.4 4f85eadf

      ==1560904==ERROR: AddressSanitizer: use-after-poison on address 0x6210000909a2 at pc 0x7f2f8f20cf2d bp 0x7f2f84e1e640 sp 0x7f2f84e1dde8
      WRITE of size 997 at 0x6210000909a2 thread T5
          #0 0x7f2f8f20cf2c  (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c)
          #1 0x557225c93814 in Field_blob::get_key_image(unsigned char*, unsigned int, Field::imagetype) /data/src/10.4/sql/field.cc:8736
          #2 0x5572260d9486 in Field::make_key_image(st_mem_root*, KEY_PART const*) /data/src/10.4/sql/opt_range.cc:8798
          #3 0x5572260db5d2 in Field::stored_field_make_mm_leaf(RANGE_OPT_PARAM*, KEY_PART*, scalar_comparison_op, Item*) /data/src/10.4/sql/opt_range.cc:8998
          #4 0x5572260da8d3 in Field_str::get_mm_leaf(RANGE_OPT_PARAM*, KEY_PART*, Item_bool_func const*, scalar_comparison_op, Item*) /data/src/10.4/sql/opt_range.cc:8912
          #5 0x5572260d8e75 in Item_bool_func::get_mm_leaf(RANGE_OPT_PARAM*, Field*, KEY_PART*, Item_func::Functype, Item*) /data/src/10.4/sql/opt_range.cc:8767
          #6 0x5572260d702c in Item_bool_func::get_mm_parts(RANGE_OPT_PARAM*, Field*, Item_func::Functype, Item*) /data/src/10.4/sql/opt_range.cc:8601
          #7 0x5572260cfb03 in Item_bool_func::get_ne_mm_tree(RANGE_OPT_PARAM*, Field*, Item*, Item*) /data/src/10.4/sql/opt_range.cc:7685
          #8 0x5572260cfcfb in Item_func_ne::get_func_mm_tree(RANGE_OPT_PARAM*, Field*, Item*) /data/src/10.4/sql/opt_range.cc:7704
          #9 0x5572260d3813 in Item_bool_func::get_full_func_mm_tree(RANGE_OPT_PARAM*, Item_field*, Item*) /data/src/10.4/sql/opt_range.cc:8248
          #10 0x55722537b0ba in Item_bool_func::get_full_func_mm_tree_for_args(RANGE_OPT_PARAM*, Item*, Item*) /data/src/10.4/sql/item_cmpfunc.h:209
          #11 0x55722537be90 in Item_bool_func2_with_rev::get_mm_tree(RANGE_OPT_PARAM*, Item**) /data/src/10.4/sql/item_cmpfunc.h:498
          #12 0x5572260b45dd in calculate_cond_selectivity_for_table(THD*, TABLE*, Item**) /data/src/10.4/sql/opt_range.cc:3462
          #13 0x5572255b588e in make_join_statistics /data/src/10.4/sql/sql_select.cc:5537
          #14 0x5572255943e4 in JOIN::optimize_inner() /data/src/10.4/sql/sql_select.cc:2316
          #15 0x55722558d2eb in JOIN::optimize() /data/src/10.4/sql/sql_select.cc:1659
          #16 0x5572255ae012 in mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/src/10.4/sql/sql_select.cc:4740
          #17 0x55722557f34d in handle_select(THD*, LEX*, select_result*, unsigned long) /data/src/10.4/sql/sql_select.cc:436
          #18 0x5572254ee29d in execute_sqlcom_select /data/src/10.4/sql/sql_parse.cc:6449
          #19 0x5572254dbb6a in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:3963
          #20 0x5572254f778a in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:7995
          #21 0x5572254cdf06 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
          #22 0x5572254ca983 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1373
          #23 0x5572258c3fec in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
          #24 0x5572258c3745 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1316
          #25 0x557226f96764 in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
          #26 0x7f2f8ec2b608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
          #27 0x7f2f8e7fe292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
       
      0x621000090d4c is located 0 bytes to the right of 4172-byte region [0x62100008fd00,0x621000090d4c)
      allocated by thread T5 here:
          #0 0x7f2f8f2b2bc8 in malloc (/lib/x86_64-linux-gnu/libasan.so.5+0x10dbc8)
          #1 0x5572270e5d85 in sf_malloc /data/src/10.4/mysys/safemalloc.c:118
          #2 0x5572270b42e4 in my_malloc /data/src/10.4/mysys/my_malloc.c:101
          #3 0x55722708fd92 in alloc_root /data/src/10.4/mysys/my_alloc.c:251
          #4 0x5572260b1e45 in create_key_parts_for_pseudo_indexes /data/src/10.4/sql/opt_range.cc:3102
          #5 0x5572260b4317 in calculate_cond_selectivity_for_table(THD*, TABLE*, Item**) /data/src/10.4/sql/opt_range.cc:3450
          #6 0x5572255b588e in make_join_statistics /data/src/10.4/sql/sql_select.cc:5537
          #7 0x5572255943e4 in JOIN::optimize_inner() /data/src/10.4/sql/sql_select.cc:2316
          #8 0x55722558d2eb in JOIN::optimize() /data/src/10.4/sql/sql_select.cc:1659
          #9 0x5572255ae012 in mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/src/10.4/sql/sql_select.cc:4740
          #10 0x55722557f34d in handle_select(THD*, LEX*, select_result*, unsigned long) /data/src/10.4/sql/sql_select.cc:436
          #11 0x5572254ee29d in execute_sqlcom_select /data/src/10.4/sql/sql_parse.cc:6449
          #12 0x5572254dbb6a in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:3963
          #13 0x5572254f778a in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:7995
          #14 0x5572254cdf06 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
          #15 0x5572254ca983 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1373
          #16 0x5572258c3fec in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
          #17 0x5572258c3745 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1316
          #18 0x557226f96764 in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
          #19 0x7f2f8ec2b608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
       
      Thread T5 created by T0 here:
          #0 0x7f2f8f1df805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805)
          #1 0x557226f96b55 in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919
          #2 0x5572251d1bbf in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275
          #3 0x5572251e9ac4 in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6241
          #4 0x5572251ea25f in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6311
          #5 0x5572251ea745 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6409
          #6 0x5572251eb612 in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6567
          #7 0x5572251e91b8 in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5899
          #8 0x5572251cfe0c in main /data/src/10.4/sql/main.cc:25
          #9 0x7f2f8e7030b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
       
      SUMMARY: AddressSanitizer: use-after-poison (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c) 
      Shadow bytes around the buggy address:
        0x0c428000a0e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c428000a0f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c428000a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c428000a110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x0c428000a120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
      =>0x0c428000a130: 00 00 00 00[02]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c428000a140: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c428000a150: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c428000a160: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c428000a170: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c428000a180: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
        Left alloca redzone:     ca
        Right alloca redzone:    cb
        Shadow gap:              cc
      ==1560904==ABORTING
      210911 21:17:34 [ERROR] mysqld got signal 6 ;
      This could be because you hit a bug. It is also possible that this binary
      or one of the libraries it was linked against is corrupt, improperly built,
      or misconfigured. This error can also be caused by malfunctioning hardware.
       
      To report this bug, see https://mariadb.com/kb/en/reporting-bugs
       
      We will try our best to scrape up some info that will hopefully help
      diagnose the problem, but since we have already crashed, 
      something is definitely wrong and this may fail.
       
      Server version: 10.4.22-MariaDB-debug-log
      key_buffer_size=1048576
      read_buffer_size=131072
      max_used_connections=1
      max_threads=153
      thread_count=1
      It is possible that mysqld could use up to 
      key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63649 K  bytes of memory
      Hope that's ok; if not, decrease some variables in the equation.
       
      Thread pointer: 0x62b00005b270
      Attempting backtrace. You can use the following information to find out
      where mysqld died. If you see no messages after this, something went
      terribly wrong...
      stack_bottom = 0x7f2f84e23910 thread_stack 0x5fc00
      /lib/x86_64-linux-gnu/libasan.so.5(+0x6cd30)[0x7f2f8f211d30]
      mysys/stacktrace.c:174(my_print_stacktrace)[0x5572270c4186]
      sql/signal_handler.cc:222(handle_fatal_signal)[0x557225ce2439]
      sigaction.c:0(__restore_rt)[0x7f2f8ec373c0]
      /lib/x86_64-linux-gnu/libc.so.6(gsignal+0xcb)[0x7f2f8e72218b]
      /lib/x86_64-linux-gnu/libc.so.6(abort+0x12b)[0x7f2f8e701859]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x12b6a2)[0x7f2f8f2d06a2]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x13624c)[0x7f2f8f2db24c]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x1178ec)[0x7f2f8f2bc8ec]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x117363)[0x7f2f8f2bc363]
      /lib/x86_64-linux-gnu/libasan.so.5(+0x67f4f)[0x7f2f8f20cf4f]
      sql/field.cc:8737(Field_blob::get_key_image(unsigned char*, unsigned int, Field::imagetype))[0x557225c93815]
      sql/opt_range.cc:8799(Field::make_key_image(st_mem_root*, KEY_PART const*))[0x5572260d9487]
      sql/opt_range.cc:8998(Field::stored_field_make_mm_leaf(RANGE_OPT_PARAM*, KEY_PART*, scalar_comparison_op, Item*))[0x5572260db5d3]
      sql/opt_range.cc:8912(Field_str::get_mm_leaf(RANGE_OPT_PARAM*, KEY_PART*, Item_bool_func const*, scalar_comparison_op, Item*))[0x5572260da8d4]
      sql/opt_range.cc:8767(Item_bool_func::get_mm_leaf(RANGE_OPT_PARAM*, Field*, KEY_PART*, Item_func::Functype, Item*))[0x5572260d8e76]
      sql/opt_range.cc:8601(Item_bool_func::get_mm_parts(RANGE_OPT_PARAM*, Field*, Item_func::Functype, Item*))[0x5572260d702d]
      sql/opt_range.cc:7685(Item_bool_func::get_ne_mm_tree(RANGE_OPT_PARAM*, Field*, Item*, Item*))[0x5572260cfb04]
      sql/opt_range.cc:7704(Item_func_ne::get_func_mm_tree(RANGE_OPT_PARAM*, Field*, Item*))[0x5572260cfcfc]
      sql/opt_range.cc:8248(Item_bool_func::get_full_func_mm_tree(RANGE_OPT_PARAM*, Item_field*, Item*))[0x5572260d3814]
      sql/item_cmpfunc.h:209(Item_bool_func::get_full_func_mm_tree_for_args(RANGE_OPT_PARAM*, Item*, Item*))[0x55722537b0bb]
      sql/item_cmpfunc.h:498(Item_bool_func2_with_rev::get_mm_tree(RANGE_OPT_PARAM*, Item**))[0x55722537be91]
      sql/opt_range.cc:3462(calculate_cond_selectivity_for_table(THD*, TABLE*, Item**))[0x5572260b45de]
      sql/sql_select.cc:5539(make_join_statistics(JOIN*, List<TABLE_LIST>&, st_dynamic_array*))[0x5572255b588f]
      sql/sql_select.cc:2316(JOIN::optimize_inner())[0x5572255943e5]
      sql/sql_select.cc:1659(JOIN::optimize())[0x55722558d2ec]
      sql/sql_select.cc:4740(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x5572255ae013]
      sql/sql_select.cc:436(handle_select(THD*, LEX*, select_result*, unsigned long))[0x55722557f34e]
      sql/sql_parse.cc:6449(execute_sqlcom_select(THD*, TABLE_LIST*))[0x5572254ee29e]
      sql/sql_parse.cc:3963(mysql_execute_command(THD*))[0x5572254dbb6b]
      sql/sql_parse.cc:7995(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x5572254f778b]
      sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x5572254cdf07]
      sql/sql_parse.cc:1373(do_command(THD*))[0x5572254ca984]
      sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x5572258c3fed]
      sql/sql_connect.cc:1317(handle_one_connection)[0x5572258c3746]
      perfschema/pfs.cc:1871(pfs_spawn_thread)[0x557226f96765]
      nptl/pthread_create.c:478(start_thread)[0x7f2f8ec2b609]
      /lib/x86_64-linux-gnu/libc.so.6(clone+0x43)[0x7f2f8e7fe293]
       
      Trying to get some variables.
      Some pointers may be invalid and cause the dump to abort.
      Query (0x62b000062290): SELECT * FROM t1 STRAIGHT_JOIN t2 WHERE f != 'qux'
       
      Connection ID (thread ID): 4
      Status: NOT_KILLED
       
      Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on
       
      The manual page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mysqld/ contains
      information that should help you find out what is causing the crash.
      Writing a core file...
      Working directory at /dev/shm/var_auto_UFmf/mysqld.1/data
      Resource Limits:
      Limit                     Soft Limit           Hard Limit           Units     
      Max cpu time              unlimited            unlimited            seconds   
      Max file size             unlimited            unlimited            bytes     
      Max data size             unlimited            unlimited            bytes     
      Max stack size            8388608              unlimited            bytes     
      Max core file size        unlimited            unlimited            bytes     
      Max resident set          unlimited            unlimited            bytes     
      Max processes             385736               385736               processes 
      Max open files            1024                 1024                 files     
      Max locked memory         67108864             67108864             bytes     
      Max address space         unlimited            unlimited            bytes     
      Max file locks            unlimited            unlimited            locks     
      Max pending signals       385736               385736               signals   
      Max msgqueue size         819200               819200               bytes     
      Max nice priority         0                    0                    
      Max realtime priority     0                    0                    
      Max realtime timeout      unlimited            unlimited            us        
      Core pattern: |/usr/share/apport/apport %p %s %c %d %P %E
      

      10.5 e8135499

      ==1561263==ERROR: AddressSanitizer: use-after-poison on address 0x6210000909ba at pc 0x7fe9f24b5f2d bp 0x7fe9e85589a0 sp 0x7fe9e8558148
      WRITE of size 997 at 0x6210000909ba thread T5
          #0 0x7fe9f24b5f2c  (/lib/x86_64-linux-gnu/libasan.so.5+0x67f2c)
          #1 0x560337b41198 in Field_blob::get_key_image_itRAW(unsigned char const*, unsigned char*, unsigned int) const /data/src/10.5/sql/field.cc:8762
          #2 0x560337b63e0c in Field_blob::get_key_image(unsigned char*, unsigned int, unsigned char const*, Field::imagetype) const /data/src/10.5/sql/field.h:4550
          #3 0x56033772dac6 in Field::get_key_image(unsigned char*, unsigned int, Field::imagetype) const /data/src/10.5/sql/field.h:1549
          #4 0x560337fb8f77 in Field::make_key_image(st_mem_root*, KEY_PART const*) /data/src/10.5/sql/opt_range.cc:8811
          #5 0x560337fbb0ce in Field::stored_field_make_mm_leaf(RANGE_OPT_PARAM*, KEY_PART*, scalar_comparison_op, Item*) /data/src/10.5/sql/opt_range.cc:9011
          #6 0x560337fba3ce in Field_str::get_mm_leaf(RANGE_OPT_PARAM*, KEY_PART*, Item_bool_func const*, scalar_comparison_op, Item*) /data/src/10.5/sql/opt_range.cc:8925
          #7 0x560337fb89bb in Item_bool_func::get_mm_leaf(RANGE_OPT_PARAM*, Field*, KEY_PART*, Item_func::Functype, Item*) /data/src/10.5/sql/opt_range.cc:8780
          #8 0x560337fb6c1c in Item_bool_func::get_mm_parts(RANGE_OPT_PARAM*, Field*, Item_func::Functype, Item*) /data/src/10.5/sql/opt_range.cc:8615
          #9 0x560337faf8b3 in Item_bool_func::get_ne_mm_tree(RANGE_OPT_PARAM*, Field*, Item*, Item*) /data/src/10.5/sql/opt_range.cc:7717
          #10 0x560337fafaab in Item_func_ne::get_func_mm_tree(RANGE_OPT_PARAM*, Field*, Item*) /data/src/10.5/sql/opt_range.cc:7736
          #11 0x560337fb3445 in Item_bool_func::get_full_func_mm_tree(RANGE_OPT_PARAM*, Item_field*, Item*) /data/src/10.5/sql/opt_range.cc:8268
          #12 0x56033721a712 in Item_bool_func::get_full_func_mm_tree_for_args(RANGE_OPT_PARAM*, Item*, Item*) /data/src/10.5/sql/item_cmpfunc.h:207
          #13 0x56033721b4e8 in Item_bool_func2_with_rev::get_mm_tree(RANGE_OPT_PARAM*, Item**) /data/src/10.5/sql/item_cmpfunc.h:501
          #14 0x560337f944fe in calculate_cond_selectivity_for_table(THD*, TABLE*, Item**) /data/src/10.5/sql/opt_range.cc:3496
          #15 0x5603374681fd in make_join_statistics /data/src/10.5/sql/sql_select.cc:5564
          #16 0x560337446831 in JOIN::optimize_inner() /data/src/10.5/sql/sql_select.cc:2296
          #17 0x56033743fd11 in JOIN::optimize() /data/src/10.5/sql/sql_select.cc:1668
          #18 0x5603374605df in mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/src/10.5/sql/sql_select.cc:4758
          #19 0x560337431c62 in handle_select(THD*, LEX*, select_result*, unsigned long) /data/src/10.5/sql/sql_select.cc:444
          #20 0x56033739a342 in execute_sqlcom_select /data/src/10.5/sql/sql_parse.cc:6314
          #21 0x5603373892d1 in mysql_execute_command(THD*) /data/src/10.5/sql/sql_parse.cc:4005
          #22 0x5603373a569b in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.5/sql/sql_parse.cc:8100
          #23 0x56033737b533 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.5/sql/sql_parse.cc:1891
          #24 0x560337377e72 in do_command(THD*) /data/src/10.5/sql/sql_parse.cc:1370
          #25 0x5603377c1dce in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1418
          #26 0x5603377c15e7 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1312
          #27 0x56033842c3e0 in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
          #28 0x7fe9f1eb7608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
          #29 0x7fe9f1a8a292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
      

      Reproducible with at least InnoDB and MyISAM.
      The test case is not applicable to previous versions due to the use of unique blob.

        Attachments

          Activity

            People

            Assignee:
            psergei Sergei Petrunia
            Reporter:
            elenst Elena Stepanova
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:

                Git Integration