Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-28090

MariaDB SEGV issue

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: 10.9.0
    • Fix Version/s: N/A
    • Component/s: N/A
    • Labels:
      None
    • Environment:
      Linux jie-2 5.4.143-1-pve #1 SMP PVE 5.4.143-1 (Tue, 28 Sep 2021 09:10:37 +0200) x86_64 x86_64 x86_64 GNU/Linux

      Description

      PoC:

      CREATE TABLE v0 ( v1 YEAR NULL UNIQUE KEY CHECK ( v1 NOT LIKE 'x' ) ) PARTITION BY HASH ( abs ( v1 ) + v1 ) ;
       ALTER TABLE v0 ADD COLUMN v0 JSON AS ( v1 MOD ! ( NOT CONCAT ( 'x' , DAYNAME ( 59 ) , -1 ) ) + ! - SIN ( 'x' ) DIV 'x' ) VIRTUAL ;
       SELECT CONCAT ( 'x' 'x' 'x' 'x' 'x' 'x' , SPACE ( 68 ) , TIME_TO_SEC ( RAND ( 'x' ) ) ) ^ FALSE ;
       INSERT IGNORE INTO v0 SET v1 = CONCAT ( concat ( 'x' ) , SPACE ( 20 ) , ASCII ( ceil ( v1 ) + '' ) ) ;
       SELECT * FROM v0 WHERE NOT 'x' IN ( '' ) ;
      

      report (compiled with ASAN):

      Thread pointer: 0x62b00015e218
      Attempting backtrace. You can use the following information to find out
      where mysqld died. If you see no messages after this, something went
      terribly wrong...
      stack_bottom = 0x7fed46179880 thread_stack 0x5fc00
      ??:0(__interceptor_backtrace)[0x7cbadb]
      mysys/stacktrace.c:212(my_print_stacktrace)[0x2a86d37]
      sql/signal_handler.cc:0(handle_fatal_signal)[0x15af5d9]
      sigaction.c:0(__restore_rt)[0x7fed6b94a3c0]
      ??:0(gsignal)[0x7fed6b57803b]
      ??:0(abort)[0x7fed6b557859]
      ??:0(__cxa_throw_bad_array_new_length)[0x7fed6b7ec911]
      ??:0(std::rethrow_exception(std::__exception_ptr::exception_ptr))[0x7fed6b7f838c]
      ??:0(std::terminate())[0x7fed6b7f83f7]
      ??:0(__cxa_pure_virtual)[0x7fed6b7f9155]
      ??:0(Arg_comparator::compare_real())[0x16b78ba]
      sql/item_cmpfunc.cc:1787(Item_func_ne::val_int())[0x16be527]
      sql/item.h:1440(Item::to_longlong_hybrid())[0x178f17b]
      sql/item_func.cc:1109(Item_func_plus::int_op())[0x1787ef4]
      sql/item.cc:6802(Item::save_int_in_field(Field*, bool))[0x164cc17]
      sql/item.cc:6812(Item::save_in_field(Field*, bool))[0x164ce5a]
      sql/table.cc:8761(TABLE::update_virtual_fields(handler*, enum_vcol_update_mode))[0x1072e99]
      ??:0(handler::ha_rnd_next(unsigned char*))[0x15c4e50]
      sql/ha_partition.cc:5261(ha_partition::rnd_next(unsigned char*))[0x1f0a0ff]
      sql/handler.cc:3393(handler::ha_rnd_next(unsigned char*))[0x15c44c4]
      sql/records.cc:519(rr_sequential(READ_RECORD*))[0x930065]
      sql/sql_select.cc:21092(sub_select(JOIN*, st_join_table*, bool))[0xd4c04e]
      ??:0(JOIN::exec_inner())[0xdc6798]
      sql/sql_select.cc:4528(JOIN::exec())[0xdc344d]
      sql/sql_select.cc:5009(mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0xd4e4e9]
      sql/sql_select.cc:543(handle_select(THD*, LEX*, select_result*, unsigned long))[0xd4d74c]
      sql/sql_parse.cc:6252(execute_sqlcom_select(THD*, TABLE_LIST*))[0xc74411]
      sql/sql_parse.cc:3943(mysql_execute_command(THD*, bool))[0xc609ca]
      sql/sql_class.h:2734(THD::enter_stage(PSI_stage_info_v1 const*, char const*, char const*, unsigned int))[0xc4a67f]
      sql/sql_parse.cc:1894(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0xc41baa]
      sql/sql_parse.cc:1404(do_command(THD*, bool))[0xc4b74c]
      sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x111f9f3]
      sql/sql_connect.cc:0(handle_one_connection)[0x111f249]
      perfschema/pfs.cc:2203(pfs_spawn_thread)[0x1f3f9de]
      nptl/pthread_create.c:478(start_thread)[0x7fed6b93e609]
      ??:0(clone)[0x7fed6b654163]
       
      Trying to get some variables.
      Some pointers may be invalid and cause the dump to abort.
      Query (0x62900008c238): SELECT * FROM v0 WHERE NOT 'x' IN ( '' )
      

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              fuboat Jingzhou Fu
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.