-
Bug
-
-
Critical
-
Resolution:
Fixed
-
10.3.35, 10.2(EOL), 10.3(EOL), 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL)
-
-
-
-
ubuntu 18.04
poc:
CREATE TABLE v1269 ( v1270 VARCHAR ( 1 ) , v1271 INT , v1272 INT ) ;
|
CREATE TABLE v1273 ( v1274 BOOLEAN NOT NULL , v1275 INT , v1276 INT ) ;
|
INSERT INTO v1269 ( v1271 ) VALUES ( v1271 ) ;
|
UPDATE ( SELECT DISTINCT ( ( 66 , 'x' NOT BETWEEN ( SELECT DISTINCT EXISTS ( SELECT DISTINCT v1270 FROM v1269 UNION SELECT v1274 FROM ( SELECT DISTINCT ( SELECT v1270 FROM ( SELECT DISTINCT ( ( NOT ( 17138038.000000 AND v1274 = 78 ) ) = 0 AND v1274 = -128 ) % 45 , ( 79 = 13 OR v1276 > 'x' ) FROM v1273 WHERE v1275 - v1276 ) AS v1277 NATURAL JOIN ( WITH v1279 AS ( SELECT v1276 FROM ( SELECT NOT v1276 <= 'x' , v1276 FROM v1273 GROUP BY v1274 ) AS v1278 ) SELECT DISTINCT v1270 , ( v1270 = 5 OR v1272 > 'x' ) FROM v1269 ) AS v1280 NATURAL JOIN v1269 WHERE v1270 = v1274 ) AS v1281 FROM v1273 ) AS v1282 NATURAL JOIN v1269 AS v1283 NATURAL JOIN v1273 ORDER BY v1271 ) AND v1270 = -1 FROM v1269 ) AND 'x' ) = 12 AND v1271 = 64 ) % 0 , ( v1271 = 37 OR v1270 > 'x' ) FROM v1269 WHERE v1271 = -1 AND ( v1271 = 85 OR v1270 = 0 OR v1270 = 45 ) ) AS v1284 NATURAL JOIN v1269 SET v1271 = -1 WHERE v1270 = 62 ;
|
INSERT INTO v1273 ( v1275 ) VALUES ( ( ( SELECT ARRAY [ 16 , 255 , -1 ] ) ) [ 93 ] ) , ( 255 ) ;
|
SELECT COUNT ( v1270 ) OVER v1285 , NTILE ( v1271 ) OVER v1285 FROM v1269 WINDOW v1285 AS ( PARTITION BY v1271 ORDER BY v1272 DESC ) ;
|
output:
mysqld: /sql/handler.cc:2853: int handler::ha_rnd_next(uchar*): Assertion `table_share->tmp_table != NO_TMP_TABLE || m_lock_type != 2' failed.
The full error log is in the attachment.
- is duplicated by
-
MDEV-32429
Heap-Use-After-Free at /mariadb-11.3.0/sql/sql_select.cc:15810
-
-
Closed
{"report":{"fcp":835,"ttfb":193,"pageVisibility":"visible","entityId":111124,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"936429b8-1565-470a-b5ff-0eea63cc5c4c","navigationType":0,"readyForUser":925.6999998092651,"redirectCount":0,"resourceLoadedEnd":1031.1999998092651,"resourceLoadedStart":201.60000038146973,"resourceTiming":[{"duration":203.89999961853027,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bv2/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":201.60000038146973,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":201.60000038146973,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":405.5,"responseStart":0,"secureConnectionStart":0},{"duration":203.89999961853027,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bv2/820016/12ta74/2380add21a9a1006587582385952de73/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":201.9000005722046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":201.9000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":405.80000019073486,"responseStart":0,"secureConnectionStart":0},{"duration":213.5999994277954,"initiatorType":"script","name":"https://jira.mariadb.org/s/e9b27a47da5fb0f74a35acd57e9847fb-CDN/lu2bv2/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":202.10000038146973,"connectEnd":202.10000038146973,"connectStart":202.10000038146973,"domainLookupEnd":202.10000038146973,"domainLookupStart":202.10000038146973,"fetchStart":202.10000038146973,"redirectEnd":0,"redirectStart":0,"requestStart":202.10000038146973,"responseEnd":415.69999980926514,"responseStart":415.69999980926514,"secureConnectionStart":202.10000038146973},{"duration":238.80000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/c32eb0da7ad9831253f8397e6cc26afd-CDN/lu2bv2/820016/12ta74/2380add21a9a1006587582385952de73/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":203.19999980926514,"connectEnd":203.19999980926514,"connectStart":203.19999980926514,"domainLookupEnd":203.19999980926514,"domainLookupStart":203.19999980926514,"fetchStart":203.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":203.19999980926514,"responseEnd":442,"responseStart":442,"secureConnectionStart":203.19999980926514},{"duration":242.39999961853027,"initiatorType":"script","name":"https://jira.mariadb.org/s/bc0bcb146314416123c992714ee00ff7-CDN/lu2bv2/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":203.4000005722046,"connectEnd":203.4000005722046,"connectStart":203.4000005722046,"domainLookupEnd":203.4000005722046,"domainLookupStart":203.4000005722046,"fetchStart":203.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":203.4000005722046,"responseEnd":445.80000019073486,"responseStart":445.80000019073486,"secureConnectionStart":203.4000005722046},{"duration":242.69999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bv2/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":203.5,"connectEnd":203.5,"connectStart":203.5,"domainLookupEnd":203.5,"domainLookupStart":203.5,"fetchStart":203.5,"redirectEnd":0,"redirectStart":0,"requestStart":203.5,"responseEnd":446.19999980926514,"responseStart":446.19999980926514,"secureConnectionStart":203.5},{"duration":242.9000005722046,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bv2/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":203.69999980926514,"connectEnd":203.69999980926514,"connectStart":203.69999980926514,"domainLookupEnd":203.69999980926514,"domainLookupStart":203.69999980926514,"fetchStart":203.69999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":203.69999980926514,"responseEnd":446.6000003814697,"responseStart":446.6000003814697,"secureConnectionStart":203.69999980926514},{"duration":244.30000019073486,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bv2/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":203.80000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":203.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":448.1000003814697,"responseStart":0,"secureConnectionStart":0},{"duration":243,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":204,"connectEnd":204,"connectStart":204,"domainLookupEnd":204,"domainLookupStart":204,"fetchStart":204,"redirectEnd":0,"redirectStart":0,"requestStart":204,"responseEnd":447,"responseStart":447,"secureConnectionStart":204},{"duration":244,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bv2/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":204.19999980926514,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":204.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":448.19999980926514,"responseStart":0,"secureConnectionStart":0},{"duration":243.30000019073486,"initiatorType":"script","name":"https://jira.mariadb.org/s/719848dd97ebe0663199f49a3936487a-CDN/lu2bv2/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":204.30000019073486,"connectEnd":204.30000019073486,"connectStart":204.30000019073486,"domainLookupEnd":204.30000019073486,"domainLookupStart":204.30000019073486,"fetchStart":204.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":204.30000019073486,"responseEnd":447.6000003814697,"responseStart":447.6000003814697,"secureConnectionStart":204.30000019073486},{"duration":436,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bv2/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":211.9000005722046,"connectEnd":211.9000005722046,"connectStart":211.9000005722046,"domainLookupEnd":211.9000005722046,"domainLookupStart":211.9000005722046,"fetchStart":211.9000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":211.9000005722046,"responseEnd":647.9000005722046,"responseStart":647.9000005722046,"secureConnectionStart":211.9000005722046},{"duration":814.1999998092651,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bv2/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":217,"connectEnd":217,"connectStart":217,"domainLookupEnd":217,"domainLookupStart":217,"fetchStart":217,"redirectEnd":0,"redirectStart":0,"requestStart":217,"responseEnd":1031.1999998092651,"responseStart":1031.1999998092651,"secureConnectionStart":217},{"duration":396.69999980926514,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":633.8000001907349,"connectEnd":633.8000001907349,"connectStart":633.8000001907349,"domainLookupEnd":633.8000001907349,"domainLookupStart":633.8000001907349,"fetchStart":633.8000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":633.8000001907349,"responseEnd":1030.5,"responseStart":1030.5,"secureConnectionStart":633.8000001907349},{"duration":272.1000003814697,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":825.8000001907349,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":825.8000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1097.9000005722046,"responseStart":0,"secureConnectionStart":0}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":19,"responseStart":193,"responseEnd":217,"domLoading":197,"domInteractive":1055,"domContentLoadedEventStart":1055,"domContentLoadedEventEnd":1094,"domComplete":2043,"loadEventStart":2043,"loadEventEnd":2045,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1038.5},{"name":"bigPipe.sidebar-id.end","time":1039.3000001907349},{"name":"bigPipe.activity-panel-pipe-id.start","time":1039.4000005722046},{"name":"bigPipe.activity-panel-pipe-id.end","time":1041.8000001907349},{"name":"activityTabFullyLoaded","time":1102}],"measures":[],"correlationId":"d791008fc9b1d3","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":107,"dbReadsTimeInMs":12,"dbConnsTimeInMs":21,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}