Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-27891

Delayed SIGSEGV in buf_pool_t::resize on InnoDB buffer pool resize after or during DROP TABLE

Details

    Description

      SET sql_mode='';
      		 
      CREATE TABLE t1 (a INT NOT NULL, b INT, PRIMARY KEY(a)) ENGINE=InnoDB;
      		 
      SET GLOBAL innodb_buffer_pool_size=21474836480;
      		 
      INSERT INTO t1 VALUES (0,0,0);
      		 
      DROP TABLE t1;
      		 
      SET GLOBAL innodb_buffer_pool_size=@@innodb_buffer_pool_size + 1048576;
      		 
      SELECT SLEEP (3);

      Leads to:

      10.9.0 b5852ffbeebc3000982988383daeefb0549e058a (Debug)

      		 
      Core was generated by `/test/MD140222-mariadb-10.9.0-linux-x86_64-dbg/bin/mysqld --no-defaults --core-'.
      		 
      Program terminated with signal SIGSEGV, Segmentation fault.
      		 
      #0  buf_pool_t::resize (this=this@entry=0x55764535bc40 <buf_pool>)
      		 
          at /test/10.9_dbg/storage/innobase/buf/buf0buf.cc:1683
      		 
      [Current thread is 1 (Thread 0x150c29af5700 (LWP 1052367))]
      		 
      (gdb) bt
      		 
      #0  buf_pool_t::resize (this=this@entry=0x55764535bc40 <buf_pool>) at /test/10.9_dbg/storage/innobase/buf/buf0buf.cc:1683
      		 
      #1  0x000055764471d763 in buf_resize_callback () at /test/10.9_dbg/storage/innobase/buf/buf0buf.cc:1992
      		 
      #2  0x0000557644849100 in tpool::task_group::execute (this=0x557645cb6080 <single_threaded_group>, t=t@entry=0x557645cb5fe0 <buf_resize_task>) at /test/10.9_dbg/tpool/task_group.cc:55
      		 
      #3  0x0000557644849189 in tpool::task::execute (this=0x557645cb5fe0 <buf_resize_task>) at /test/10.9_dbg/tpool/task.cc:32
      		 
      #4  0x0000557644847e1f in tpool::thread_pool_generic::worker_main (this=0x5576465a91d0, thread_var=0x5576465b8470) at /test/10.9_dbg/tpool/tpool_generic.cc:549
      		 
      #5  0x0000557644848156 in std::__invoke_impl<void, void (tpool::thread_pool_generic::*)(tpool::worker_data*), tpool::thread_pool_generic*, tpool::worker_data*> (__t=<optimized out>, __f=<optimized out>) at /usr/include/c++/9/bits/invoke.h:89
      		 
      #6  std::__invoke<void (tpool::thread_pool_generic::*)(tpool::worker_data*), tpool::thread_pool_generic*, tpool::worker_data*> (__fn=<optimized out>) at /usr/include/c++/9/bits/invoke.h:95
      		 
      #7  std::thread::_Invoker<std::tuple<void (tpool::thread_pool_generic::*)(tpool::worker_data*), tpool::thread_pool_generic*, tpool::worker_data*> >::_M_invoke<0ul, 1ul, 2ul> (this=<optimized out>) at /usr/include/c++/9/thread:244
      		 
      #8  std::thread::_Invoker<std::tuple<void (tpool::thread_pool_generic::*)(tpool::worker_data*), tpool::thread_pool_generic*, tpool::worker_data*> >::operator() (this=<optimized out>) at /usr/include/c++/9/thread:251
      		 
      #9  std::thread::_State_impl<std::thread::_Invoker<std::tuple<void (tpool::thread_pool_generic::*)(tpool::worker_data*), tpool::thread_pool_generic*, tpool::worker_data*> > >::_M_run (this=<optimized out>) at /usr/include/c++/9/thread:195
      		 
      #10 0x0000150c5515fde4 in ?? () from /usr/lib/x86_64-linux-gnu/libstdc++.so.6
      		 
      #11 0x0000150c5527a609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      		 
      #12 0x0000150c54e68293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

      Bug confirmed present in:
      MariaDB: 10.8.1 (dbg), 10.9.0 (dbg)

      Bug (or feature/syntax) confirmed not present in:
      MariaDB: 10.2.42 (dbg), 10.2.42 (opt), 10.3.33 (dbg), 10.3.33 (opt), 10.4.23 (dbg), 10.4.23 (opt), 10.5.14 (dbg), 10.5.14 (opt), 10.6.6 (dbg), 10.6.6 (opt), 10.7.2 (dbg), 10.7.2 (opt), 10.8.1 (opt), 10.9.0 (opt)
      MySQL: 5.5.62 (dbg), 5.5.62 (opt), 5.6.51 (dbg), 5.6.51 (opt), 5.7.36 (dbg), 5.7.36 (opt), 8.0.27 (dbg), 8.0.27 (opt)

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-34167 We fail to terminate transaction early with ER_LOCK_TABLE_FULL when lock memory is growing

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is caused by

          Task - A task that needs to be done. MDEV-25342 autosize innodb_buffer_pool_chunk_size

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-24659 Assertion `!fsp_is_system_temporary(bpage->id().space())' failed in buf_flush_relocate_on_flush_list

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              danblack Daniel Black
              Roel Roel Van de Paar
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.