-
Bug
-
-
Critical
-
Resolution:
Fixed
-
10.3.35, 10.2(EOL), 10.3(EOL), 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL)
-
-
-
-
ubuntu 18.04
poc:
CREATE TABLE v1269 ( v1270 VARCHAR ( 1 ) , v1271 INT , v1272 INT ) ;
|
CREATE TABLE v1273 ( v1274 BOOLEAN NOT NULL , v1275 INT , v1276 INT ) ;
|
INSERT INTO v1269 ( v1271 ) VALUES ( v1271 ) ;
|
UPDATE ( SELECT DISTINCT ( ( 66 , 'x' NOT BETWEEN ( SELECT DISTINCT EXISTS ( SELECT DISTINCT v1270 FROM v1269 UNION SELECT v1274 FROM ( SELECT DISTINCT ( SELECT v1270 FROM ( SELECT DISTINCT ( ( NOT ( 17138038.000000 AND v1274 = 78 ) ) = 0 AND v1274 = -128 ) % 45 , ( 79 = 13 OR v1276 > 'x' ) FROM v1273 WHERE v1275 - v1276 ) AS v1277 NATURAL JOIN ( WITH v1279 AS ( SELECT v1276 FROM ( SELECT NOT v1276 <= 'x' , v1276 FROM v1273 GROUP BY v1274 ) AS v1278 ) SELECT DISTINCT v1270 , ( v1270 = 5 OR v1272 > 'x' ) FROM v1269 ) AS v1280 NATURAL JOIN v1269 WHERE v1270 = v1274 ) AS v1281 FROM v1273 ) AS v1282 NATURAL JOIN v1269 AS v1283 NATURAL JOIN v1273 ORDER BY v1271 ) AND v1270 = -1 FROM v1269 ) AND 'x' ) = 12 AND v1271 = 64 ) % 0 , ( v1271 = 37 OR v1270 > 'x' ) FROM v1269 WHERE v1271 = -1 AND ( v1271 = 85 OR v1270 = 0 OR v1270 = 45 ) ) AS v1284 NATURAL JOIN v1269 SET v1271 = -1 WHERE v1270 = 62 ;
|
INSERT INTO v1273 ( v1275 ) VALUES ( ( ( SELECT ARRAY [ 16 , 255 , -1 ] ) ) [ 93 ] ) , ( 255 ) ;
|
SELECT COUNT ( v1270 ) OVER v1285 , NTILE ( v1271 ) OVER v1285 FROM v1269 WINDOW v1285 AS ( PARTITION BY v1271 ORDER BY v1272 DESC ) ;
|
output:
mysqld: /sql/handler.cc:2853: int handler::ha_rnd_next(uchar*): Assertion `table_share->tmp_table != NO_TMP_TABLE || m_lock_type != 2' failed.
The full error log is in the attachment.
- is duplicated by
-
MDEV-32429
Heap-Use-After-Free at /mariadb-11.3.0/sql/sql_select.cc:15810
-
-
Closed
{"report":{"fcp":948,"ttfb":319.5,"pageVisibility":"visible","entityId":111124,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"cff5d8cb-e458-4f1f-96dc-e320824e4e5e","navigationType":0,"readyForUser":1019.7999999523163,"redirectCount":0,"resourceLoadedEnd":1012.5999999046326,"resourceLoadedStart":324.89999985694885,"resourceTiming":[{"duration":155.60000014305115,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":324.89999985694885,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":324.89999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":480.5,"responseStart":0,"secureConnectionStart":0},{"duration":155.30000019073486,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":325.19999980926514,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":325.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":480.5,"responseStart":0,"secureConnectionStart":0},{"duration":164.29999995231628,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":325.39999985694885,"connectEnd":325.39999985694885,"connectStart":325.39999985694885,"domainLookupEnd":325.39999985694885,"domainLookupStart":325.39999985694885,"fetchStart":325.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":325.39999985694885,"responseEnd":489.69999980926514,"responseStart":489.69999980926514,"secureConnectionStart":325.39999985694885},{"duration":190,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":325.39999985694885,"connectEnd":325.39999985694885,"connectStart":325.39999985694885,"domainLookupEnd":325.39999985694885,"domainLookupStart":325.39999985694885,"fetchStart":325.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":325.39999985694885,"responseEnd":515.3999998569489,"responseStart":515.3999998569489,"secureConnectionStart":325.39999985694885},{"duration":193.69999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":325.5,"connectEnd":325.5,"connectStart":325.5,"domainLookupEnd":325.5,"domainLookupStart":325.5,"fetchStart":325.5,"redirectEnd":0,"redirectStart":0,"requestStart":325.5,"responseEnd":519.1999998092651,"responseStart":519.1999998092651,"secureConnectionStart":325.5},{"duration":193.90000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":325.59999990463257,"connectEnd":325.59999990463257,"connectStart":325.59999990463257,"domainLookupEnd":325.59999990463257,"domainLookupStart":325.59999990463257,"fetchStart":325.59999990463257,"redirectEnd":0,"redirectStart":0,"requestStart":325.59999990463257,"responseEnd":519.5,"responseStart":519.5,"secureConnectionStart":325.59999990463257},{"duration":194.30000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":325.69999980926514,"connectEnd":325.69999980926514,"connectStart":325.69999980926514,"domainLookupEnd":325.69999980926514,"domainLookupStart":325.69999980926514,"fetchStart":325.69999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":325.69999980926514,"responseEnd":520,"responseStart":520,"secureConnectionStart":325.69999980926514},{"duration":194.89999985694885,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":325.7999999523163,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":325.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":520.6999998092651,"responseStart":0,"secureConnectionStart":0},{"duration":195.19999980926514,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":326,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":326,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":521.1999998092651,"responseStart":0,"secureConnectionStart":0},{"duration":194.69999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":326,"connectEnd":326,"connectStart":326,"domainLookupEnd":326,"domainLookupStart":326,"fetchStart":326,"redirectEnd":0,"redirectStart":0,"requestStart":326,"responseEnd":520.6999998092651,"responseStart":520.6999998092651,"secureConnectionStart":326},{"duration":195.10000014305115,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":326.19999980926514,"connectEnd":326.19999980926514,"connectStart":326.19999980926514,"domainLookupEnd":326.19999980926514,"domainLookupStart":326.19999980926514,"fetchStart":326.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":326.19999980926514,"responseEnd":521.2999999523163,"responseStart":521.2999999523163,"secureConnectionStart":326.19999980926514},{"duration":380.39999985694885,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":331.2999999523163,"connectEnd":331.2999999523163,"connectStart":331.2999999523163,"domainLookupEnd":331.2999999523163,"domainLookupStart":331.2999999523163,"fetchStart":331.2999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":331.2999999523163,"responseEnd":711.6999998092651,"responseStart":711.6999998092651,"secureConnectionStart":331.2999999523163},{"duration":681.2000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":331.39999985694885,"connectEnd":331.39999985694885,"connectStart":331.39999985694885,"domainLookupEnd":331.39999985694885,"domainLookupStart":331.39999985694885,"fetchStart":331.39999985694885,"redirectEnd":0,"redirectStart":0,"requestStart":331.39999985694885,"responseEnd":1012.5999999046326,"responseStart":1012.5999999046326,"secureConnectionStart":331.39999985694885},{"duration":299.2000000476837,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":702.7999999523163,"connectEnd":702.7999999523163,"connectStart":702.7999999523163,"domainLookupEnd":702.7999999523163,"domainLookupStart":702.7999999523163,"fetchStart":702.7999999523163,"redirectEnd":0,"redirectStart":0,"requestStart":702.7999999523163,"responseEnd":1002,"responseStart":1002,"secureConnectionStart":702.7999999523163}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":13,"responseStart":320,"responseEnd":325,"domLoading":323,"domInteractive":1086,"domContentLoadedEventStart":1087,"domContentLoadedEventEnd":1129,"domComplete":2074,"loadEventStart":2074,"loadEventEnd":2075,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1067.5999999046326},{"name":"bigPipe.sidebar-id.end","time":1068.3999998569489},{"name":"bigPipe.activity-panel-pipe-id.start","time":1068.5},{"name":"bigPipe.activity-panel-pipe-id.end","time":1071},{"name":"activityTabFullyLoaded","time":1136.8999998569489}],"measures":[],"correlationId":"4d075c637cd7ce","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":73,"dbReadsTimeInMs":12,"dbConnsTimeInMs":20,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}