Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-28618

Server crash in /sql/item_cmpfunc.cc:6847 in Item_equal::val_int()

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Won't Fix
    • 10.3.35, 10.3(EOL)
    • N/A
    • Optimizer
    • ubuntu 18.04

    Description

      poc:

      CREATE TABLE v917 ( v918 TEXT ( 1 ) NOT NULL ) ;
       INSERT INTO v917 ( v918 ) VALUES ( 72 ) ;
       UPDATE v917 SET v918 = 11 WHERE v918 = 52 ;
       INSERT INTO v917 ( v918 ) VALUES ( 99 ) , ( 127 ) ;
       WITH v920 AS ( SELECT v918 FROM ( SELECT v918 FROM v917 GROUP BY 'x' ) AS v919 ) SELECT v918 NOT LIKE 'x' FROM v920 WHERE v918 IN ( SELECT DISTINCT 'x' FROM ( SELECT DISTINCT v918 , ( ( TRUE , v918 ) NOT IN ( SELECT ( v918 % ( SELECT v918 FROM v917 WHERE 61243097.000000 = v918 ) <= v918 ) , -1 FROM v917 ) OR v918 > 'x' ) FROM ( SELECT v918 FROM v917 UNION SELECT v918 FROM v917 AS v921 WHERE v918 ^ v918 % -1 AND ( v918 = -2147483648 OR v918 = TRUE OR v918 = 68 ) GROUP BY v918 HAVING v918 > v918 ) AS v922 NATURAL JOIN ( SELECT DISTINCT v918 , ( v918 = 255 OR v918 > 'x' ) FROM v917 ) AS v923 NATURAL JOIN v917 GROUP BY ( v918 % v918 ) NOT LIKE 'x' ) AS v924 NATURAL JOIN v917 WHERE - 'x' >= v918 IS NOT NULL = ( 0 < v918 AND v918 < 'x' ) ) ;
      

      output:
      SUMMARY: AddressSanitizer: SEGV /sql/item_cmpfunc.cc:6847 in Item_equal::val_int()

      The full error log is in the attachment.

      Attachments

        Issue Links

          Activity

            People

              psergei Sergei Petrunia
              nobody Shihao Wen
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.