-
Bug
-
-
Blocker
-
Resolution:
Fixed
-
10.9.0, 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL)
-
-
-
-
Linux jie-2 5.4.143-1-pve #1 SMP PVE 5.4.143-1 (Tue, 28 Sep 2021 09:10:37 +0200) x86_64 x86_64 x86_64 GNU/Linux
PoC:
SELECT EXISTS ( ( SELECT -1 ORDER BY AVG ( 2147483647 ) OVER ( ROWS BETWEEN UNBOUNDED PRECEDING AND 83 PRECEDING ) / 'x' ) ) ;
|
report (compiled with ASAN):
Thread pointer: 0x62b00015e218
|
Attempting backtrace. You can use the following information to find out
|
where mysqld died. If you see no messages after this, something went
|
terribly wrong...
|
stack_bottom = 0x7fd219e69880 thread_stack 0x5fc00
|
??:0(__interceptor_backtrace)[0x7cbadb]
|
mysys/stacktrace.c:212(my_print_stacktrace)[0x2a86d37]
|
sql/signal_handler.cc:0(handle_fatal_signal)[0x15af5d9]
|
sigaction.c:0(__restore_rt)[0x7fd2406673c0]
|
sql/field_conv.cc:205(set_field_to_null_with_conversions(Field*, bool))[0x158a63e]
|
sql/item.cc:6796(Item::save_decimal_in_field(Field*, bool))[0x164caae]
|
sql/item.cc:6812(Item::save_in_field(Field*, bool))[0x164ce5a]
|
sql/sql_list.h:441(base_list_iterator::next_fast())[0x137f492]
|
??:0(Window_func_runner::exec(THD*, TABLE*, SORT_INFO*))[0x1380b36]
|
sql/sql_window.cc:3013(Window_funcs_sort::exec(JOIN*, bool))[0x138110a]
|
??:0(Window_funcs_computation::exec(JOIN*, bool))[0x1383947]
|
sql/sql_select.cc:29515(AGGR_OP::end_send())[0xe2fe7f]
|
sql/sql_select.cc:20806(sub_select_postjoin_aggr(JOIN*, st_join_table*, bool))[0xdb6f23]
|
sql/sql_select.cc:20642(do_select(JOIN*, Procedure*))[0xdc6a47]
|
sql/sql_select.cc:4528(JOIN::exec())[0xdc344d]
|
??:0(subselect_single_select_engine::exec())[0x1952e44]
|
sql/item_subselect.cc:858(Item_subselect::exec())[0x1927eda]
|
sql/item_subselect.cc:1814(Item_exists_subselect::val_int())[0x193379d]
|
sql/sql_type.cc:7502(Type_handler::Item_send_long(Item*, Protocol*, st_value*) const)[0x13548b2]
|
sql/protocol.cc:1328(Protocol::send_result_set_row(List<Item>*))[0x920512]
|
sql/sql_class.cc:3060(select_send::send_data(List<Item>&))[0xaf940a]
|
sql/sql_select.cc:4615(JOIN::exec_inner())[0xdc7875]
|
sql/sql_select.cc:4528(JOIN::exec())[0xdc344d]
|
sql/sql_select.cc:5009(mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0xd4e4e9]
|
sql/sql_select.cc:543(handle_select(THD*, LEX*, select_result*, unsigned long))[0xd4d74c]
|
sql/sql_parse.cc:6252(execute_sqlcom_select(THD*, TABLE_LIST*))[0xc74411]
|
sql/sql_parse.cc:3943(mysql_execute_command(THD*, bool))[0xc609ca]
|
sql/sql_class.h:2734(THD::enter_stage(PSI_stage_info_v1 const*, char const*, char const*, unsigned int))[0xc4a67f]
|
sql/sql_parse.cc:1894(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0xc41baa]
|
sql/sql_parse.cc:1404(do_command(THD*, bool))[0xc4b74c]
|
sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x111f9f3]
|
sql/sql_connect.cc:0(handle_one_connection)[0x111f249]
|
perfschema/pfs.cc:2203(pfs_spawn_thread)[0x1f3f9de]
|
nptl/pthread_create.c:478(start_thread)[0x7fd24065b609]
|
??:0(clone)[0x7fd240371163]
|
|
Trying to get some variables.
|
Some pointers may be invalid and cause the dump to abort.
|
Query (0x629000087238): SELECT EXISTS ( ( SELECT -1 ORDER BY AVG ( 2147483647 ) OVER ( ROWS BETWEEN UNBOUNDED PRECEDING AND 83 PRECEDING ) / 'x' ) )
|
- relates to
-
MDEV-25630
Crash with window function in left expr of IN subquery
-
-
Closed
- links to
-
{"report":{"fcp":1318.5,"ttfb":451,"pageVisibility":"visible","entityId":108870,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"80fc5233-a615-4b62-8207-61ee589a22b2","navigationType":0,"readyForUser":1404.3000001907349,"redirectCount":0,"resourceLoadedEnd":1655,"resourceLoadedStart":457.30000019073486,"resourceTiming":[{"duration":298.3999996185303,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":457.30000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":457.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":755.6999998092651,"responseStart":0,"secureConnectionStart":0},{"duration":298.5,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":457.6000003814697,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":457.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":756.1000003814697,"responseStart":0,"secureConnectionStart":0},{"duration":362.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/0917945aaa57108d00c5076fea35e069-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":457.80000019073486,"connectEnd":457.80000019073486,"connectStart":457.80000019073486,"domainLookupEnd":457.80000019073486,"domainLookupStart":457.80000019073486,"fetchStart":457.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":457.80000019073486,"responseEnd":820.3000001907349,"responseStart":820.3000001907349,"secureConnectionStart":457.80000019073486},{"duration":421,"initiatorType":"script","name":"https://jira.mariadb.org/s/2d8175ec2fa4c816e8023260bd8c1786-CDN/lu2cib/820016/12ta74/494e4c556ecbb29f90a3d3b4f09cb99c/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true&whisper-enabled=true","startTime":458,"connectEnd":458,"connectStart":458,"domainLookupEnd":458,"domainLookupStart":458,"fetchStart":458,"redirectEnd":0,"redirectStart":0,"requestStart":458,"responseEnd":879,"responseStart":879,"secureConnectionStart":458},{"duration":425.69999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/s/a9324d6758d385eb45c462685ad88f1d-CDN/lu2cib/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":458.30000019073486,"connectEnd":458.30000019073486,"connectStart":458.30000019073486,"domainLookupEnd":458.30000019073486,"domainLookupStart":458.30000019073486,"fetchStart":458.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":458.30000019073486,"responseEnd":884,"responseStart":884,"secureConnectionStart":458.30000019073486},{"duration":426,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":458.5,"connectEnd":458.5,"connectStart":458.5,"domainLookupEnd":458.5,"domainLookupStart":458.5,"fetchStart":458.5,"redirectEnd":0,"redirectStart":0,"requestStart":458.5,"responseEnd":884.5,"responseStart":884.5,"secureConnectionStart":458.5},{"duration":426.29999923706055,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":458.6000003814697,"connectEnd":458.6000003814697,"connectStart":458.6000003814697,"domainLookupEnd":458.6000003814697,"domainLookupStart":458.6000003814697,"fetchStart":458.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":458.6000003814697,"responseEnd":884.8999996185303,"responseStart":884.8999996185303,"secureConnectionStart":458.6000003814697},{"duration":506.70000076293945,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2cib/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":458.8999996185303,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":458.8999996185303,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":965.6000003814697,"responseStart":0,"secureConnectionStart":0},{"duration":426.5,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":458.8999996185303,"connectEnd":458.8999996185303,"connectStart":458.8999996185303,"domainLookupEnd":458.8999996185303,"domainLookupStart":458.8999996185303,"fetchStart":458.8999996185303,"redirectEnd":0,"redirectStart":0,"requestStart":458.8999996185303,"responseEnd":885.3999996185303,"responseStart":885.3999996185303,"secureConnectionStart":458.8999996185303},{"duration":506.69999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":459.1000003814697,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":459.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":965.8000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":426.5999994277954,"initiatorType":"script","name":"https://jira.mariadb.org/s/5d5e8fe91fbc506585e83ea3b62ccc4b-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":459.30000019073486,"connectEnd":459.30000019073486,"connectStart":459.30000019073486,"domainLookupEnd":459.30000019073486,"domainLookupStart":459.30000019073486,"fetchStart":459.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":459.30000019073486,"responseEnd":885.8999996185303,"responseStart":885.8999996185303,"secureConnectionStart":459.30000019073486},{"duration":692.4000005722046,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":460.19999980926514,"connectEnd":460.19999980926514,"connectStart":460.19999980926514,"domainLookupEnd":460.19999980926514,"domainLookupStart":460.19999980926514,"fetchStart":460.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":460.19999980926514,"responseEnd":1152.6000003814697,"responseStart":1152.6000003814697,"secureConnectionStart":460.19999980926514},{"duration":1174.8000001907349,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":460.30000019073486,"connectEnd":460.30000019073486,"connectStart":460.30000019073486,"domainLookupEnd":460.30000019073486,"domainLookupStart":460.30000019073486,"fetchStart":460.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":460.30000019073486,"responseEnd":1635.1000003814697,"responseStart":1635,"secureConnectionStart":460.30000019073486},{"duration":190.5,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":978.1000003814697,"connectEnd":978.1000003814697,"connectStart":978.1000003814697,"domainLookupEnd":978.1000003814697,"domainLookupStart":978.1000003814697,"fetchStart":978.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":978.1000003814697,"responseEnd":1168.6000003814697,"responseStart":1168.6000003814697,"secureConnectionStart":978.1000003814697},{"duration":390.1000003814697,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2cib/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":1264.8999996185303,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1264.8999996185303,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1655,"responseStart":0,"secureConnectionStart":0},{"duration":404.80000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true&whisper-enabled=true","startTime":1265.8000001907349,"connectEnd":1265.8000001907349,"connectStart":1265.8000001907349,"domainLookupEnd":1265.8000001907349,"domainLookupStart":1265.8000001907349,"fetchStart":1265.8000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":1265.8000001907349,"responseEnd":1670.6000003814697,"responseStart":1670.6000003814697,"secureConnectionStart":1265.8000001907349}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":264,"responseStart":451,"responseEnd":454,"domLoading":455,"domInteractive":1665,"domContentLoadedEventStart":1665,"domContentLoadedEventEnd":1711,"domComplete":2673,"loadEventStart":2673,"loadEventEnd":2674,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1636.8000001907349},{"name":"bigPipe.sidebar-id.end","time":1637.6999998092651},{"name":"bigPipe.activity-panel-pipe-id.start","time":1637.8000001907349},{"name":"bigPipe.activity-panel-pipe-id.end","time":1640.1999998092651},{"name":"activityTabFullyLoaded","time":1727}],"measures":[],"correlationId":"904614b891a20a","effectiveType":"4g","downlink":9.9,"rtt":0,"serverDuration":104,"dbReadsTimeInMs":11,"dbConnsTimeInMs":20,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}
Thank you!
the bug is reproducible on 10.4-10.8, while not on 10.2,10.3
Version: '10.4.25-MariaDB-debug-log'220322 11:06:10 [ERROR] mysqld got signal 11 ;Server version: 10.4.25-MariaDB-debug-logsigaction.c:0(__restore_rt)[0x7f70cf4bc3c0]sql/field.h:1199(Field::set_notnull(long long))[0x56182d234633]sql/item.cc:6686(Item::save_decimal_in_field(Field*, bool))[0x56182dcf519b]sql/sql_type.cc:3832(Type_handler_decimal_result::Item_save_in_field(Item*, Field*, bool) const)[0x56182da3121a]sql/item.cc:6702(Item::save_in_field(Field*, bool))[0x56182dcf552d]sql/sql_window.cc:2725(save_window_function_values(List<Item_window_func>&, TABLE*, unsigned char*))[0x56182da764ad]sql/sql_window.cc:2879(compute_window_func(THD*, List<Item_window_func>&, List<Cursor_manager>&, TABLE*, SORT_INFO*))[0x56182da76f7d]sql/sql_window.cc:2980(Window_func_runner::exec(THD*, TABLE*, SORT_INFO*))[0x56182da775fa]sql/sql_window.cc:3008(Window_funcs_sort::exec(JOIN*, bool))[0x56182da77848]sql/sql_window.cc:3135(Window_funcs_computation::exec(JOIN*, bool))[0x56182da78650]sql/sql_select.cc:28988(AGGR_OP::end_send())[0x56182d656018]sql/sql_select.cc:20342(sub_select_postjoin_aggr(JOIN*, st_join_table*, bool))[0x56182d614a0b]sql/sql_select.cc:20166(do_select(JOIN*, Procedure*))[0x56182d613c06]sql/sql_select.cc:4542(JOIN::exec_inner())[0x56182d5a2792]sql/sql_select.cc:4325(JOIN::exec())[0x56182d59fdbe]sql/item_subselect.cc:4042(subselect_single_select_engine::exec())[0x56182dec0098]sql/item_subselect.cc:800(Item_subselect::exec())[0x56182de9b30f]sql/item_subselect.cc:1742(Item_exists_subselect::val_int())[0x56182dea5a0d]sql/sql_type.cc:7102(Type_handler::Item_send_long(Item*, Protocol*, st_value*) const)[0x56182da41288]sql/sql_type.h:5155(Type_handler_long::Item_send(Item*, Protocol*, st_value*) const)[0x56182da5cc42]sql/item.h:1043(Item::send(Protocol*, st_value*))[0x56182d21641e]sql/protocol.cc:1038(Protocol::send_result_set_row(List<Item>*))[0x56182d207f43]sql/sql_class.cc:3123(select_send::send_data(List<Item>&))[0x56182d3b5035]sql/sql_select.cc:4409(JOIN::exec_inner())[0x56182d5a11d3]sql/sql_select.cc:4325(JOIN::exec())[0x56182d59fdbe]sql/sql_select.cc:4765(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x56182d5a3f9e]sql/sql_select.cc:436(handle_select(THD*, LEX*, select_result*, unsigned long))[0x56182d575054]sql/sql_parse.cc:6465(execute_sqlcom_select(THD*, TABLE_LIST*))[0x56182d4e3517]sql/sql_parse.cc:3979(mysql_execute_command(THD*))[0x56182d4d0df6]sql/sql_parse.cc:8011(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x56182d4eca05]sql/sql_parse.cc:1876(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x56182d4c318c]sql/sql_parse.cc:1378(do_command(THD*))[0x56182d4bfa3f]sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x56182d8bb6f1]sql/sql_connect.cc:1317(handle_one_connection)[0x56182d8bae4a]perfschema/pfs.cc:1871(pfs_spawn_thread)[0x56182e5bc481]nptl/pthread_create.c:478(start_thread)[0x7f70cf4b0609]/lib/x86_64-linux-gnu/libc.so.6(clone+0x43)[0x7f70cf081163]Query (0x62b0000a1290): SELECT EXISTS (SELECT 1 ORDER BY 1+sum(2) OVER ())