Server crashes upon SHOW ANALYZE/EXPLAIN FORMAT=JSON

CREATE TABLE t1 (i int) ;

INSERT INTO t1 VALUES (1),(2),(3);

--connect (con1,localhost,root,,test)

--let $conid= `SELECT CONNECTION_ID()`

--let $run=100

while ($run)

{

  send

    SELECT i FROM (SELECT DISTINCT * FROM t1) a1  GROUP BY i ;

  --connection default

  --let $show=100

  while ($show)

  {

    --error 0,ER_TARGET_NOT_EXPLAINABLE

     eval SHOW EXPLAIN FORMAT=JSON FOR $conid;

     --dec $show

  }

  --connection con1

  --reap

  --dec $run

}

# Cleanup

--disconnect con1

Version: '10.9.0-MariaDB-debug-log'  

220330 17:04:13 [ERROR] mysqld got signal 11 ;

Server version: 10.9.0-MariaDB-debug-log

sigaction.c:0(__restore_rt)[0x7f5d1927a3c0]

sql/item.cc:7821(Item_field::print(String*, enum_query_type))[0x563a4b0fe850]

sql/sql_explain.cc:1557(append_item_to_str(String*, Item*))[0x563a4af221d0]

sql/sql_explain.cc:1070(Explain_aggr_filesort::print_json_members(Json_writer*, bool))[0x563a4af2032a]

sql/sql_explain.cc:1002(Explain_select::print_explain_json(Explain_query*, Json_writer*, bool))[0x563a4af1ffa5]

sql/sql_explain.cc:251(Explain_query::print_explain_json(select_result_sink*, bool, unsigned long long))[0x563a4af1d203]

sql/sql_lex.cc:5856(LEX::print_explain(select_result_sink*, unsigned char, bool, bool, bool*))[0x563a4acce9a4]

sql/sql_show.cc:3005(Show_explain_request::call_in_target_thread())[0x563a4adcee84]

sql/my_apc.cc:226(Apc_target::process_apc_requests())[0x563a4af5bd94]

sql/my_apc.h:74(Apc_target::disable())[0x563a4af26ad3]

sql/sql_explain.cc:168(Explain_query::notify_item_objects_about_to_be_freed())[0x563a4af1cdea]

sql/sql_class.cc:2257(THD::cleanup_after_query())[0x563a4ac7a7a8]

sql/sql_parse.cc:8058(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x563a4ad10470]

sql/sql_parse.cc:1897(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x563a4acfc6ff]

sql/sql_parse.cc:1403(do_command(THD*, bool))[0x563a4acfb09b]

sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x563a4aed4221]

sql/sql_connect.cc:1314(handle_one_connection)[0x563a4aed3eb1]

perfschema/pfs.cc:2203(pfs_spawn_thread)[0x563a4b423e4b]

nptl/pthread_create.c:478(start_thread)[0x7f5d1926e609]

??:0(clone)[0x7f5d18e3f163]

Query (0x7f5ce4015420): SHOW EXPLAIN FORMAT=JSON FOR 5

CREATE TABLE t1 (i int) ;

INSERT INTO t1 VALUES (1),(2),(3);

--connect (con1,localhost,root,,test)

--let $conid= `SELECT CONNECTION_ID()`

--let $run=100

while ($run)

{

  send

 SELECT i FROM (SELECT DISTINCT * FROM t1) a1 WHERE i IN ('v');

  --connection default

  --let $show=100

  while ($show)

  {

    --error 0,ER_TARGET_NOT_EXPLAINABLE

     eval SHOW EXPLAIN FORMAT=JSON FOR $conid;

     --dec $show

  }

  --connection con1

  --reap

  --dec $run

}

# Cleanup

--disconnect con1

220330 17:21:40 [ERROR] mysqld got signal 11 ;

Server version: 10.9.0-MariaDB-debug-log

sigaction.c:0(__restore_rt)[0x7f20410413c0]

sql/item.cc:7821(Item_field::print(String*, enum_query_type))[0x55da53a1f850]

sql/item.cc:497(Item::print_parenthesised(String*, enum_query_type, precedence))[0x55da53a07b9b]

sql/item_func.cc:631(Item_func::print_op(String*, enum_query_type))[0x55da53a7361e]

sql/item_cmpfunc.h:551(Item_bool_rowready_func2::print(String*, enum_query_type))[0x55da534d2df9]

sql/sql_explain.cc:1546(write_item(Json_writer*, Item*))[0x55da538430d4]

sql/sql_explain.cc:1605(Explain_table_access::tag_to_json(Json_writer*, explain_extra_tag))[0x55da538433d0]

sql/sql_explain.cc:1881(Explain_table_access::print_explain_json(Explain_query*, Json_writer*, bool))[0x55da538442c0]

sql/sql_explain.cc:1127(Explain_basic_join::print_explain_json_interns(Explain_query*, Json_writer*, bool))[0x55da538416b7]

sql/sql_explain.cc:1022(Explain_select::print_explain_json(Explain_query*, Json_writer*, bool))[0x55da53841068]

sql/sql_explain.cc:251(Explain_query::print_explain_json(select_result_sink*, bool, unsigned long long))[0x55da5383e203]

sql/sql_lex.cc:5856(LEX::print_explain(select_result_sink*, unsigned char, bool, bool, bool*))[0x55da535ef9a4]

sql/sql_show.cc:3005(Show_explain_request::call_in_target_thread())[0x55da536efe84]

sql/my_apc.cc:226(Apc_target::process_apc_requests())[0x55da5387cd94]

sql/my_apc.h:74(Apc_target::disable())[0x55da53847ad3]

sql/sql_explain.cc:168(Explain_query::notify_item_objects_about_to_be_freed())[0x55da5383ddea]

sql/sql_class.cc:2257(THD::cleanup_after_query())[0x55da5359b7a8]

sql/sql_parse.cc:8058(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x55da53631470]

sql/sql_parse.cc:1897(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x55da5361d6ff]

sql/sql_parse.cc:1403(do_command(THD*, bool))[0x55da5361c09b]

sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x55da537f5221]

sql/sql_connect.cc:1314(handle_one_connection)[0x55da537f4eb1]

perfschema/pfs.cc:2203(pfs_spawn_thread)[0x55da53d44e4b]

nptl/pthread_create.c:478(start_thread)[0x7f2041035609]

??:0(clone)[0x7f2040c06163]

Query (0x7f200c015420): SHOW EXPLAIN FORMAT=JSON FOR 5

mysqld: /10.9/sql/field.cc:7525: virtual String* Field_string::val_str(String*, String*): Assertion `!table || table->in_use == _current_thd()' failed.

220330 13:20:06 [ERROR] mysqld got signal 6 ;

Server version: 10.9.0-MariaDB-debug-log

linux/raise.c:51(__GI_raise)[0x7ff324cda7bb]

stdlib/abort.c:81(__GI_abort)[0x7ff324cc5535]

intl/loadmsgcat.c:1177(_nl_load_domain)[0x7ff324cc540f]

??:0(__assert_fail)[0x7ff324cd3102]

sql/field.cc:7527(Field_string::val_str(String*, String*))[0x556cb3f697dc]

sql/item.cc:3323(Item_field::val_str(String*))[0x556cb40314cc]

sql/item.cc:526(Item::print_value(String*))[0x556cb40194c3]

sql/item.cc:7825(Item_field::print(String*, enum_query_type))[0x556cb4054640]

sql/item.cc:8331(Item_ref::print(String*, enum_query_type))[0x556cb40588b2]

sql/item.cc:497(Item::print_parenthesised(String*, enum_query_type, precedence))[0x556cb4018fdd]

sql/item_func.cc:636(Item_func::print_op(String*, enum_query_type))[0x556cb410d163]

sql/item_cmpfunc.h:551(Item_bool_rowready_func2::print(String*, enum_query_type))[0x556cb3428dd1]

sql/item.cc:497(Item::print_parenthesised(String*, enum_query_type, precedence))[0x556cb4018fdd]

sql/item_cmpfunc.cc:5286(Item_cond::print(String*, enum_query_type))[0x556cb40b70bb]

sql/sql_explain.cc:1546(write_item(Json_writer*, Item*))[0x556cb3c52ba7]

sql/sql_explain.cc:974(Explain_select::print_explain_json(Explain_query*, Json_writer*, bool))[0x556cb3c4ee52]

sql/sql_explain.cc:737(Explain_node::print_explain_json_for_children(Explain_query*, Json_writer*, bool))[0x556cb3c4d599]

sql/sql_explain.cc:939(Explain_select::print_explain_json(Explain_query*, Json_writer*, bool))[0x556cb3c4eb0e]

sql/sql_explain.cc:251(Explain_query::print_explain_json(select_result_sink*, bool, unsigned long long))[0x556cb3c4a29d]

sql/sql_lex.cc:5856(LEX::print_explain(select_result_sink*, unsigned char, bool, bool, bool*))[0x556cb36b7d63]

sql/sql_show.cc:3005(Show_explain_request::call_in_target_thread())[0x556cb39234be]

sql/my_apc.cc:226(Apc_target::process_apc_requests())[0x556cb3ce133d]

sql/my_apc.h:74(Apc_target::disable())[0x556cb3c5ace7]

sql/sql_explain.cc:168(Explain_query::notify_item_objects_about_to_be_freed())[0x556cb3c49874]

sql/sql_class.cc:2257(THD::cleanup_after_query())[0x556cb35e9545]

sql/sql_parse.cc:8058(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x556cb3744177]

sql/sql_parse.cc:1897(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x556cb371a59c]

sql/sql_parse.cc:1403(do_command(THD*, bool))[0x556cb3717291]

sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x556cb3baa786]

sql/sql_connect.cc:1314(handle_one_connection)[0x556cb3baa00b]

perfschema/pfs.cc:2203(pfs_spawn_thread)[0x556cb482c03b]

nptl/pthread_create.c:487(start_thread)[0x7ff325192fa3]

x86_64/clone.S:97(clone)[0x7ff324d9beff]

Query (0x6290007994e8): SHOW ANALYZE FORMAT=JSON FOR 18

=================================================================

==69440==ERROR: AddressSanitizer: heap-use-after-free on address 0x61a000555318 at pc 0x55de8fc175da bp 0x7fadb04b5c80 sp 0x7fadb04b5c78

READ of size 8 at 0x61a000555318 thread T32

    #0 0x55de8fc175d9 in Item_field::print(String*, enum_query_type) /10.9/sql/item.cc:7821

    #1 0x55de8fd7fd65 in Item_func_conv_charset::print(String*, enum_query_type) /10.9/sql/item_strfunc.cc:3711

    #2 0x55de8f815ba6 in write_item /10.9/sql/sql_explain.cc:1544

    #3 0x55de8f816046 in Explain_table_access::tag_to_json(Json_writer*, explain_extra_tag) /10.9/sql/sql_explain.cc:1602

    #4 0x55de8f8176ce in Explain_table_access::print_explain_json(Explain_query*, Json_writer*, bool) /10.9/sql/sql_explain.cc:1883

    #5 0x55de8f812f13 in Explain_basic_join::print_explain_json_interns(Explain_query*, Json_writer*, bool) /10.9/sql/sql_explain.cc:1125

    #6 0x55de8f8122ba in Explain_select::print_explain_json(Explain_query*, Json_writer*, bool) /10.9/sql/sql_explain.cc:1020

    #7 0x55de8f80d29c in Explain_query::print_explain_json(select_result_sink*, bool, unsigned long long) /10.9/sql/sql_explain.cc:248

    #8 0x55de8f27ad62 in LEX::print_explain(select_result_sink*, unsigned char, bool, bool, bool*) /10.9/sql/sql_lex.cc:5856

    #9 0x55de8f4e64bd in Show_explain_request::call_in_target_thread() /10.9/sql/sql_show.cc:3003

    #10 0x55de8f8a433c in Apc_target::process_apc_requests() /10.9/sql/my_apc.cc:225

    #11 0x55de8f81dce6 in Apc_target::disable() /10.9/sql/my_apc.h:73

    #12 0x55de8f80c873 in Explain_query::notify_item_objects_about_to_be_freed() /10.9/sql/sql_explain.cc:167

    #13 0x55de8f1ac544 in THD::cleanup_after_query() /10.9/sql/sql_class.cc:2245

    #14 0x55de8f307176 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /10.9/sql/sql_parse.cc:8058

    #15 0x55de8f2dd59b in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /10.9/sql/sql_parse.cc:1895

    #16 0x55de8f2da290 in do_command(THD*, bool) /10.9/sql/sql_parse.cc:1403

    #17 0x55de8f76d785 in do_handle_one_connection(CONNECT*, bool) /10.9/sql/sql_connect.cc:1418

    #18 0x55de8f76d00a in handle_one_connection /10.9/sql/sql_connect.cc:1312

    #19 0x55de903ef03a in pfs_spawn_thread /10.9/storage/perfschema/pfs.cc:2201

    #20 0x7fadde3f7fa2 in start_thread /build/glibc-fWwxX8/glibc-2.28/nptl/pthread_create.c:486

    #21 0x7fadde000efe in clone (/lib/x86_64-linux-gnu/libc.so.6+0xf8efe)

0x61a000555318 is located 664 bytes inside of 1156-byte region [0x61a000555080,0x61a000555504)

freed by thread T31 here:

    #0 0x7faddeb0afb0 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.5+0xe8fb0)

    #1 0x55de91008ec7 in free_memory /10.9/mysys/safemalloc.c:297

    #2 0x55de91008376 in sf_free /10.9/mysys/safemalloc.c:203

    #3 0x55de90fd7509 in my_free /10.9/mysys/my_malloc.c:211

    #4 0x55de90fb21a0 in root_free /10.9/mysys/my_alloc.c:78

    #5 0x55de90fb4902 in free_root /10.9/mysys/my_alloc.c:495

    #6 0x55de8f69313b in closefrm(TABLE*) /10.9/sql/table.cc:4464

    #7 0x55de8f9c9046 in intern_close_table /10.9/sql/table_cache.cc:220

    #8 0x55de8f9d0fb0 in TDC_element::flush_unused(bool) /10.9/sql/table_cache.cc:1293

    #9 0x55de8f9d0bf0 in TDC_element::flush(THD*, bool) /10.9/sql/table_cache.cc:1258

    #10 0x55de8f13b935 in wait_while_table_is_used(THD*, TABLE*, ha_extra_function) /10.9/sql/sql_base.cc:1318

    #11 0x55de8f5cb8b9 in simple_rename_or_index_change /10.9/sql/sql_table.cc:9395

    #12 0x55de8f5d1c7c in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) /10.9/sql/sql_table.cc:10298

    #13 0x55de8f78aad2 in Sql_cmd_alter_table::execute(THD*) /10.9/sql/sql_alter.cc:547

    #14 0x55de8f2f9b0d in mysql_execute_command(THD*, bool) /10.9/sql/sql_parse.cc:5995

    #15 0x55de8f306d68 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /10.9/sql/sql_parse.cc:8034

    #16 0x55de8f2ddfb6 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /10.9/sql/sql_parse.cc:1992

    #17 0x55de8f2da290 in do_command(THD*, bool) /10.9/sql/sql_parse.cc:1403

    #18 0x55de8f76d785 in do_handle_one_connection(CONNECT*, bool) /10.9/sql/sql_connect.cc:1418

    #19 0x55de8f76d00a in handle_one_connection /10.9/sql/sql_connect.cc:1312

    #20 0x55de903ef03a in pfs_spawn_thread /10.9/storage/perfschema/pfs.cc:2201

    #21 0x7fadde3f7fa2 in start_thread /build/glibc-fWwxX8/glibc-2.28/nptl/pthread_create.c:486

previously allocated by thread T32 here:

    #0 0x7faddeb0b330 in __interceptor_malloc (/lib/x86_64-linux-gnu/libasan.so.5+0xe9330)

    #1 0x55de91007d5c in sf_malloc /10.9/mysys/safemalloc.c:126

    #2 0x55de90fd675b in my_malloc /10.9/mysys/my_malloc.c:90

    #3 0x55de90fb211c in root_alloc /10.9/mysys/my_alloc.c:66

    #4 0x55de90fb38db in alloc_root /10.9/mysys/my_alloc.c:332

    #5 0x55de90fb531b in strmake_root /10.9/mysys/my_alloc.c:584

    #6 0x55de8f68f50a in open_table_from_share(THD*, TABLE_SHARE*, st_mysql_const_lex_string const*, unsigned int, unsigned int, unsigned int, TABLE*, bool, List<String>*) /10.9/sql/table.cc:4033

    #7 0x55de8f13f0bf in open_table(THD*, TABLE_LIST*, Open_table_context*) /10.9/sql/sql_base.cc:2003

    #8 0x55de8f148a66 in open_and_process_table /10.9/sql/sql_base.cc:3809

    #9 0x55de8f14b683 in open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) /10.9/sql/sql_base.cc:4292

    #10 0x55de8f15076b in open_and_lock_tables(THD*, DDL_options_st const&, TABLE_LIST*, bool, unsigned int, Prelocking_strategy*) /10.9/sql/sql_base.cc:5265

    #11 0x55de8f0accc4 in open_and_lock_tables(THD*, TABLE_LIST*, bool, unsigned int) /10.9/sql/sql_base.h:509

    #12 0x55de8f2fb454 in execute_sqlcom_select /10.9/sql/sql_parse.cc:6180

    #13 0x55de8f2eaac1 in mysql_execute_command(THD*, bool) /10.9/sql/sql_parse.cc:3950

    #14 0x55de8f306d68 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /10.9/sql/sql_parse.cc:8034

    #15 0x55de8f2dd59b in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /10.9/sql/sql_parse.cc:1895

    #16 0x55de8f2da290 in do_command(THD*, bool) /10.9/sql/sql_parse.cc:1403

    #17 0x55de8f76d785 in do_handle_one_connection(CONNECT*, bool) /10.9/sql/sql_connect.cc:1418

    #18 0x55de8f76d00a in handle_one_connection /10.9/sql/sql_connect.cc:1312

    #19 0x55de903ef03a in pfs_spawn_thread /10.9/storage/perfschema/pfs.cc:2201

    #20 0x7fadde3f7fa2 in start_thread /build/glibc-fWwxX8/glibc-2.28/nptl/pthread_create.c:486

Thread T32 created by T0 here:

    #0 0x7faddea72db0 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x50db0)

    #1 0x55de903eab5a in my_thread_create /10.9/storage/perfschema/my_thread.h:52

    #2 0x55de903ef429 in pfs_spawn_thread_v1 /10.9/storage/perfschema/pfs.cc:2252

    #3 0x55de8ef36546 in inline_mysql_thread_create /10.9/include/mysql/psi/mysql_thread.h:1139

    #4 0x55de8ef4d9d4 in create_thread_to_handle_connection(CONNECT*) /10.9/sql/mysqld.cc:5975

    #5 0x55de8ef4e03f in create_new_thread(CONNECT*) /10.9/sql/mysqld.cc:6034

    #6 0x55de8ef4e3b1 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /10.9/sql/mysqld.cc:6096

    #7 0x55de8ef4edb0 in handle_connections_sockets() /10.9/sql/mysqld.cc:6220

    #8 0x55de8ef4d23b in mysqld_main(int, char**) /10.9/sql/mysqld.cc:5870

    #9 0x55de8ef35794 in main /10.9/sql/main.cc:34

    #10 0x7fadddf2c09a in __libc_start_main ../csu/libc-start.c:308

Thread T31 created by T0 here:

    #0 0x7faddea72db0 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x50db0)

    #1 0x55de903eab5a in my_thread_create /10.9/storage/perfschema/my_thread.h:52

    #2 0x55de903ef429 in pfs_spawn_thread_v1 /10.9/storage/perfschema/pfs.cc:2252

    #3 0x55de8ef36546 in inline_mysql_thread_create /10.9/include/mysql/psi/mysql_thread.h:1139

    #4 0x55de8ef4d9d4 in create_thread_to_handle_connection(CONNECT*) /10.9/sql/mysqld.cc:5975

    #5 0x55de8ef4e03f in create_new_thread(CONNECT*) /10.9/sql/mysqld.cc:6034

    #6 0x55de8ef4e3b1 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /10.9/sql/mysqld.cc:6096

    #7 0x55de8ef4edb0 in handle_connections_sockets() /10.9/sql/mysqld.cc:6220

    #8 0x55de8ef4d23b in mysqld_main(int, char**) /10.9/sql/mysqld.cc:5870

    #9 0x55de8ef35794 in main /10.9/sql/main.cc:34

    #10 0x7fadddf2c09a in __libc_start_main ../csu/libc-start.c:308

SUMMARY: AddressSanitizer: heap-use-after-free /10.9/sql/item.cc:7821 in Item_field::print(String*, enum_query_type)

Shadow bytes around the buggy address:

  0x0c34800a2a10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

=>0x0c34800a2a60: fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2a90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

  0x0c34800a2aa0: fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa

  0x0c34800a2ab0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa

Shadow byte legend (one shadow byte represents 8 application bytes):

  Addressable:           00

  Partially addressable: 01 02 03 04 05 06 07 

  Heap left redzone:       fa

  Freed heap region:       fd

  Stack left redzone:      f1

  Stack mid redzone:       f2

  Stack right redzone:     f3

  Stack after return:      f5

  Stack use after scope:   f8

  Global redzone:          f9

  Global init order:       f6

  Poisoned by user:        f7

  Container overflow:      fc

  Array cookie:            ac

  Intra object redzone:    bb

  ASan internal:           fe

  Left alloca redzone:     ca

  Right alloca redzone:    cb

==69440==ABORTING

SHUTDOWN_1648646328

220330 17:06:12 [ERROR] mysqld got signal 11 ;

Server version: 10.9.0-MariaDB-debug-log

sql/sql_class.h:3860(THD::temporal_round_mode() const)[0x560afb9c38e3]

sql/sql_type.cc:322(Temporal::default_round_mode(THD*))[0x560afbbe3050]

sql/sql_type.h:2348(Datetime::Options::Options(date_conv_mode_t, THD*))[0x560afb223d6f]

sql/field.cc:5411(Field_timestamp::val_str(String*, String*))[0x560afbddbdce]

sql/item.cc:3323(Item_field::val_str(String*))[0x560afbebb4cc]

sql/item.cc:526(Item::print_value(String*))[0x560afbea34c3]

sql/item.cc:7825(Item_field::print(String*, enum_query_type))[0x560afbede640]

sql/item.cc:497(Item::print_parenthesised(String*, enum_query_type, precedence))[0x560afbea2fdd]

sql/item_func.cc:636(Item_func::print_op(String*, enum_query_type))[0x560afbf97163]

sql/item_cmpfunc.h:551(Item_bool_rowready_func2::print(String*, enum_query_type))[0x560afb2b2dd1]

sql/item.cc:497(Item::print_parenthesised(String*, enum_query_type, precedence))[0x560afbea2fdd]

sql/item_cmpfunc.cc:5286(Item_cond::print(String*, enum_query_type))[0x560afbf410bb]

sql/sql_explain.cc:1546(write_item(Json_writer*, Item*))[0x560afbadcba7]

sql/sql_explain.cc:1605(Explain_table_access::tag_to_json(Json_writer*, explain_extra_tag))[0x560afbadd047]

sql/sql_explain.cc:1881(Explain_table_access::print_explain_json(Explain_query*, Json_writer*, bool))[0x560afbade6cf]

sql/sql_explain.cc:1127(Explain_basic_join::print_explain_json_interns(Explain_query*, Json_writer*, bool))[0x560afbad9f14]

sql/sql_explain.cc:1022(Explain_select::print_explain_json(Explain_query*, Json_writer*, bool))[0x560afbad92bb]

sql/sql_explain.cc:251(Explain_query::print_explain_json(select_result_sink*, bool, unsigned long long))[0x560afbad429d]

sql/sql_lex.cc:5856(LEX::print_explain(select_result_sink*, unsigned char, bool, bool, bool*))[0x560afb541d63]

sql/sql_show.cc:3005(Show_explain_request::call_in_target_thread())[0x560afb7ad4be]

sql/my_apc.cc:226(Apc_target::process_apc_requests())[0x560afbb6b33d]

sql/my_apc.h:74(Apc_target::disable())[0x560afbae4ce7]

sql/sql_explain.cc:168(Explain_query::notify_item_objects_about_to_be_freed())[0x560afbad3874]

sql/sql_class.cc:2257(THD::cleanup_after_query())[0x560afb473545]

sql/sql_parse.cc:8058(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x560afb5ce177]

sql/sql_parse.cc:1897(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x560afb5a459c]

sql/sql_parse.cc:1403(do_command(THD*, bool))[0x560afb5a1291]

sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x560afba34786]

sql/sql_connect.cc:1314(handle_one_connection)[0x560afba3400b]

perfschema/pfs.cc:2203(pfs_spawn_thread)[0x560afc6b603b]

nptl/pthread_create.c:487(start_thread)[0x7fac24e95fa3]

x86_64/clone.S:97(clone)[0x7fac24a9eeff]