[MDEV-29300] Assertion `*ref && (*ref)->fixed()' failed in Item_field::fix_outer_field on SELECT - Jira

Details

Type: Bug
Status: Confirmed (View Workflow)
Priority: Major
Resolution: Unresolved
Affects Version/s: 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL), 10.9(EOL), 10.10(EOL), 10.11, 11.0(EOL), 11.1(EOL), 11.2(EOL)
Fix Version/s: 10.5, 10.6, 10.11
Component/s: None
Labels:

Description

CREATE TABLE t(c INT);

SELECT (SELECT 0 GROUP BY c HAVING (SELECT 0 GROUP BY c)) FROM t GROUP BY c ;

Leads to:

10.9.2 bfdc4ff22ecf626eb46479e1a0dc1049d61a8d78 (Debug)
mysqld: /test/10.9_dbg/sql/item.cc:5823: int Item_field::fix_outer_field(THD, Field, Item): Assertion `ref && (*ref)->fixed()' failed.

10.9.2 bfdc4ff22ecf626eb46479e1a0dc1049d61a8d78 (Debug)
Core was generated by `/test/MD090822-mariadb-10.9.2-linux-x86_64-dbg/bin/mysqld --no-defaults --core-'.
Program terminated with signal SIGABRT, Aborted.
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
[Current thread is 1 (Thread 0x153bb976f700 (LWP 3588240))]
(gdb) bt
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1 0x0000153bd2112859 in __GI_abort () at abort.c:79
#2 0x0000153bd2112729 in __assert_fail_base (fmt=0x153bd22a8588 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x55d6b0e79f07 "ref && (ref)->fixed()", file=0x55d6b0e79b00 "/test/10.9_dbg/sql/item.cc", line=5823, function=<optimized out>) at assert.c:92
#3 0x0000153bd2123fd6 in __GI___assert_fail (assertion=assertion@entry=0x55d6b0e79f07 "ref && (ref)->fixed()", file=file@entry=0x55d6b0e79b00 "/test/10.9_dbg/sql/item.cc", line=line@entry=5823, function=function@entry=0x55d6b0e7c320 "int Item_field::fix_outer_field(THD, Field, Item*)") at assert.c:101
#4 0x000055d6b040de1c in Item_field::fix_outer_field (this=this@entry=0x153b84014d20, thd=thd@entry=0x153b84000db8, from_field=from_field@entry=0x153bb976d120, reference=reference@entry=0x153b84014e48) at /test/10.9_dbg/sql/item.h:1069
#5 0x000055d6b040ead8 in Item_field::fix_fields (this=0x153b84014d20, thd=0x153b84000db8, reference=0x153b84014e48) at /test/10.9_dbg/sql/item.cc:6121
#6 0x000055d6b0139671 in Item::fix_fields_if_needed (ref=<optimized out>, thd=0x153b84000db8, this=0x153b84014d20) at /test/10.9_dbg/sql/item.h:1156
#7 Item::fix_fields_if_needed_for_scalar (ref=<optimized out>, thd=0x153b84000db8, this=0x153b84014d20) at /test/10.9_dbg/sql/item.h:1148
#8 Item::fix_fields_if_needed_for_order_by (ref=<optimized out>, thd=0x153b84000db8, this=0x153b84014d20) at /test/10.9_dbg/sql/item.h:1156
#9 find_order_in_list (thd=thd@entry=0x153b84000db8, ref_pointer_array=<optimized out>, tables=tables@entry=0x0, order=order@entry=0x153b84014e38, fields=@0x153b84014ab0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x153b84014d08, last = 0x153b84014d08, elements = 1}, <No data fields>}, all_fields=@0x153b8406d410: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x153b84014d08, last = 0x153b84014d08, elements = 1}, <No data fields>}, is_group_field=true, add_to_all_fields=true, from_window_spec=false) at /test/10.9_dbg/sql/sql_select.cc:25204
#10 0x000055d6b01651b8 in setup_group (thd=thd@entry=0x153b84000db8, ref_pointer_array=<optimized out>, tables=tables@entry=0x0, fields=@0x153b84014ab0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x153b84014d08, last = 0x153b84014d08, elements = 1}, <No data fields>}, all_fields=@0x153b8406d410: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x153b84014d08, last = 0x153b84014d08, elements = 1}, <No data fields>}, order=0x153b84014e38, hidden_group_fields=0x153b8406d3bf, from_window_spec=false) at /test/10.9_dbg/sql/sql_select.cc:25328
#11 0x000055d6b01691b5 in setup_without_group (reserved=<optimized out>, hidden_group_fields=0x153b8406d3bf, win_funcs=<optimized out>, win_specs=<optimized out>, group=<optimized out>, order=<optimized out>, conds=0x153b8406d4f8, all_fields=@0x153b8406d410: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x153b84014d08, last = 0x153b84014d08, elements = 1}, <No data fields>}, fields=<optimized out>, leaves=<optimized out>, tables=<optimized out>, ref_pointer_array=<optimized out>, thd=<optimized out>) at /test/10.9_dbg/sql/sql_select.cc:886
#12 JOIN::prepare (this=0x153b8406d0b0, tables_init=<optimized out>, conds_init=<optimized out>, og_num=<optimized out>, order_init=<optimized out>, skip_order_by=skip_order_by@entry=false, group_init=<optimized out>, having_init=<optimized out>, proc_param_init=<optimized out>, select_lex_arg=<optimized out>, unit_arg=<optimized out>) at /test/10.9_dbg/sql/sql_select.cc:1454
#13 0x000055d6b04eeb81 in subselect_single_select_engine::prepare (this=0x153b84015828, thd=0x153b84000db8) at /test/10.9_dbg/sql/sql_lex.h:1362
#14 0x000055d6b04ee04f in Item_subselect::fix_fields (this=0x153b840156a0, thd_param=<optimized out>, ref=0x153b8406cb50) at /test/10.9_dbg/sql/item_subselect.cc:295
#15 0x000055d6b01697d4 in Item::fix_fields_if_needed (ref=0x153b8406cb50, thd=<optimized out>, this=0x153b840156a0) at /test/10.9_dbg/sql/item.h:1152
#16 Item::fix_fields_if_needed_for_scalar (ref=0x153b8406cb50, thd=<optimized out>, this=0x153b840156a0) at /test/10.9_dbg/sql/item.h:1148
#17 Item::fix_fields_if_needed_for_bool (ref=0x153b8406cb50, thd=<optimized out>, this=0x153b840156a0) at /test/10.9_dbg/sql/item.h:1152
#18 JOIN::prepare (this=0x153b8406c980, tables_init=<optimized out>, conds_init=<optimized out>, og_num=<optimized out>, order_init=<optimized out>, skip_order_by=skip_order_by@entry=false, group_init=<optimized out>, having_init=<optimized out>, proc_param_init=<optimized out>, select_lex_arg=<optimized out>, unit_arg=<optimized out>) at /test/10.9_dbg/sql/sql_select.cc:1512
#19 0x000055d6b04eeb81 in subselect_single_select_engine::prepare (this=0x153b84016200, thd=0x153b84000db8) at /test/10.9_dbg/sql/sql_lex.h:1362
#20 0x000055d6b04ee04f in Item_subselect::fix_fields (this=0x153b84016078, thd_param=<optimized out>, ref=0x153b84016248) at /test/10.9_dbg/sql/item_subselect.cc:295
#21 0x000055d6b0070ecc in Item::fix_fields_if_needed (ref=0x153b84016248, thd=0x153b84000db8, this=0x153b84016078) at /test/10.9_dbg/sql/item.h:1148
#22 Item::fix_fields_if_needed_for_scalar (ref=0x153b84016248, thd=0x153b84000db8, this=0x153b84016078) at /test/10.9_dbg/sql/item.h:1148
#23 setup_fields (thd=0x153b84000db8, ref_pointer_array=<optimized out>, fields=<optimized out>, column_usage=column_usage@entry=MARK_COLUMNS_READ, sum_func_list=sum_func_list@entry=0x153b84017868, pre_fix=0x153b84013fd0, allow_sum_func=true) at /test/10.9_dbg/sql/sql_base.cc:7975
#24 0x000055d6b0168c1a in JOIN::prepare (this=this@entry=0x153b84017508, tables_init=tables_init@entry=0x153b84016320, conds_init=conds_init@entry=0x0, og_num=og_num@entry=1, order_init=order_init@entry=0x0, skip_order_by=skip_order_by@entry=false, group_init=0x153b84016b40, having_init=0x0, proc_param_init=0x0, select_lex_arg=0x153b84013d18, unit_arg=0x153b84004fd8) at /test/10.9_dbg/sql/sql_select.cc:1448
#25 0x000055d6b0180022 in mysql_select (thd=thd@entry=0x153b84000db8, tables=0x153b84016320, fields=@0x153b84013fb8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x153b84016240, last = 0x153b84016240, elements = 1}, <No data fields>}, conds=0x0, og_num=1, order=0x0, group=0x153b84016b40, having=0x0, proc_param=0x0, select_options=2147748608, result=0x153b840174e0, unit=0x153b84004fd8, select_lex=0x153b84013d18) at /test/10.9_dbg/sql/sql_select.cc:5032
#26 0x000055d6b0180240 in handle_select (thd=thd@entry=0x153b84000db8, lex=lex@entry=0x153b84004f00, result=result@entry=0x153b840174e0, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/10.9_dbg/sql/sql_select.cc:579
#27 0x000055d6b00ebf62 in execute_sqlcom_select (thd=thd@entry=0x153b84000db8, all_tables=0x153b84016320) at /test/10.9_dbg/sql/sql_parse.cc:6261
#28 0x000055d6b00f8258 in mysql_execute_command (thd=thd@entry=0x153b84000db8, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false) at /test/10.9_dbg/sql/sql_parse.cc:3945
#29 0x000055d6b00e623e in mysql_parse (thd=thd@entry=0x153b84000db8, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x153bb976e330) at /test/10.9_dbg/sql/sql_parse.cc:8037
#30 0x000055d6b00f380c in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x153b84000db8, packet=packet@entry=0x153b8400b6c9 "SELECT (SELECT 0 GROUP BY c HAVING (SELECT 0 GROUP BY c)) FROM t GROUP BY c", packet_length=packet_length@entry=75, blocking=blocking@entry=true) at /test/10.9_dbg/sql/sql_class.h:1364
#31 0x000055d6b00f5f14 in do_command (thd=0x153b84000db8, blocking=blocking@entry=true) at /test/10.9_dbg/sql/sql_parse.cc:1407
#32 0x000055d6b0255b68 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55d6b400cad8, put_in_cache=put_in_cache@entry=true) at /test/10.9_dbg/sql/sql_connect.cc:1418
#33 0x000055d6b0256071 in handle_one_connection (arg=0x55d6b400cad8) at /test/10.9_dbg/sql/sql_connect.cc:1312
#34 0x0000153bd2623609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#35 0x0000153bd220f133 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Bug confirmed present in:
MariaDB: 10.4.26 (dbg), 10.5.17 (dbg), 10.6.9 (dbg), 10.7.5 (dbg), 10.8.4 (dbg), 10.9.2 (dbg), 10.10.0 (dbg)

Bug (or feature/syntax) confirmed not present in:
MariaDB: 10.3.36 (dbg), 10.3.36 (opt), 10.4.26 (opt), 10.5.17 (opt), 10.6.9 (opt), 10.7.5 (opt), 10.8.4 (opt), 10.9.2 (opt), 10.10.0 (opt)

Attachments

Issue Links

is duplicated by

MDEV-31632 Server crashes in Item_field::fix_outer_field place= prev_subselect_item->parsing_place (prev_subselect_item=NULL)

Closed

MDEV-32381 Segmentation fault at /mariadb-11.3.0/sql/item.cc:5669

Closed

relates to

MDEV-28506 SIGSEGV's in find_field_in_table[s][_ref], Item_field::fix_fields, create_view_field and MemcmpInterceptorCommon | Assertions `(*select_ref)->fixed' or '->is_fixed' and `table_list->table' failed

Stalled

MDEV-29351 SIGSEGV when doing forward reference of item in select list

Closed

MDEV-32297 Failing queries with outer references to views in degenerated selects

Stalled

Activity

Ascending order - Click to sort in descending order

Roel Van de Paar added a comment - 2022-08-12 22:30

psergei Hi! Can you please check if this issue is in optimizer code or in name resolution? Thank you

Roel Van de Paar added a comment - 2022-08-12 22:30 psergei Hi! Can you please check if this issue is in optimizer code or in name resolution? Thank you

Alice Sherepa added a comment - 2023-10-09 13:48 - edited

test case from ~~MDEV-31632~~:

CREATE TABLE a (id INT);

SELECT 1 union select 2 UNION SELECT 1 from a JOIN a b ON  (SELECT 1 FROM dual WHERE AAA);

DROP TABLE a;

Version: '10.4.32-MariaDB-debug-log'

231009 16:19:55 [ERROR] mysqld got signal 11 ;

Server version: 10.4.32-MariaDB-debug-log source revision: 0c7af6a2a19343cb9d4fedbd7165b8f73bc4cf96

sql/signal_handler.cc:238(handle_fatal_signal)[0x55f5d6360f8d]

sigaction.c:0(__restore_rt)[0x7fcb9fa83420]

sql/item.cc:5575(Item_field::fix_outer_field(THD*, Field**, Item**))[0x55f5d63e0dfe]

sql/item.cc:5994(Item_field::fix_fields(THD*, Item**))[0x55f5d63e49f3]

sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55f5d59015cd]

sql/item_func.cc:355(Item_func::fix_fields(THD*, Item**))[0x55f5d64be236]

sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55f5d59015cd]

sql/item.h:970(Item::fix_fields_if_needed_for_scalar(THD*, Item**))[0x55f5d5901607]

sql/item.h:975(Item::fix_fields_if_needed_for_bool(THD*, Item**))[0x55f5d5a39ab1]

sql/sql_base.cc:8546(setup_conds(THD*, TABLE_LIST*, List<TABLE_LIST>&, Item**))[0x55f5d5a30f40]

sql/sql_select.cc:744(setup_without_group(THD*, Bounds_checked_array<Item*>, TABLE_LIST*, List<TABLE_LIST>&, List<Item>&, List<Item>&, Item**, st_order*, st_order*, List<Window_spec>&, List<Item_window_func>&, bool*))[0x55f5d5c4de0e]

sql/sql_select.cc:1335(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55f5d5c5559b]

sql/item_subselect.cc:3804(subselect_single_select_engine::prepare(THD*))[0x55f5d65b9a0c]

sql/item_subselect.cc:289(Item_subselect::fix_fields(THD*, Item**))[0x55f5d6593481]

sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55f5d59015cd]

sql/item.h:970(Item::fix_fields_if_needed_for_scalar(THD*, Item**))[0x55f5d5901607]

sql/item.h:975(Item::fix_fields_if_needed_for_bool(THD*, Item**))[0x55f5d5a39ab1]

sql/sql_base.cc:8435(setup_on_expr(THD*, TABLE_LIST*, bool))[0x55f5d5a3031f]

sql/sql_base.cc:8554(setup_conds(THD*, TABLE_LIST*, List<TABLE_LIST>&, Item**))[0x55f5d5a30f68]

sql/sql_select.cc:744(setup_without_group(THD*, Bounds_checked_array<Item*>, TABLE_LIST*, List<TABLE_LIST>&, List<Item>&, List<Item>&, Item**, st_order*, st_order*, List<Window_spec>&, List<Item_window_func>&, bool*))[0x55f5d5c4de0e]

sql/sql_select.cc:1335(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55f5d5c5559b]

sql/sql_union.cc:662(st_select_lex_unit::prepare_join(THD*, st_select_lex*, select_result*, unsigned long, bool))[0x55f5d5e65208]

sql/sql_union.cc:1089(st_select_lex_unit::prepare(TABLE_LIST*, select_result*, unsigned long))[0x55f5d5e6958f]

sql/sql_union.cc:40(mysql_union(THD*, LEX*, select_result*, st_select_lex_unit*, unsigned long))[0x55f5d5e5f14d]

sql/sql_select.cc:432(handle_select(THD*, LEX*, select_result*, unsigned long))[0x55f5d5c4baa9]

sql/sql_parse.cc:6475(execute_sqlcom_select(THD*, TABLE_LIST*))[0x55f5d5bb7be4]

sql/sql_parse.cc:3978(mysql_execute_command(THD*))[0x55f5d5ba535b]

sql/sql_parse.cc:8012(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55f5d5bc10bf]

sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55f5d5b974e5]

sql/sql_parse.cc:1378(do_command(THD*))[0x55f5d5b94010]

sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x55f5d5fa1deb]

sql/sql_connect.cc:1325(handle_one_connection)[0x55f5d5fa168f]

perfschema/pfs.cc:1871(pfs_spawn_thread)[0x55f5d6c4c274]

nptl/pthread_create.c:478(start_thread)[0x7fcb9fa77609]

Query (0x62b0000a1290): SELECT 1 union select 2 UNION SELECT 1 from a JOIN a b ON  (SELECT 1 FROM dual WHERE AAA)

from ~~MDEV-32381~~

CREATE TABLE t0 ( c12 INT , c27 INT ) ;

INSERT INTO t0 VALUES ( DEFAULT , DEFAULT ) , ( DEFAULT , DEFAULT ) ;

CREATE VIEW v0 AS SELECT c27 AS c12 , c12 AS c19 , 16 AS c15 FROM t0 ;

WITH t1 AS ( SELECT 20 AS c5 , 32 AS c17 ) SELECT t5 . c19 AS c34 FROM ( WITH t2 AS ( SELECT c19 NOT REGEXP FLOOR ( 85 ) / ORD ( 118 ) - RAND ( ) AS c27 FROM ( SELECT RAND ( ) AS c36 FROM v0 ) AS t3 JOIN v0 ON t0 . c12 = t0 . c19 ) SELECT t4 . c12 AS c19 FROM t0 JOIN v0 AS t4 ON t4 . c12 = t4 . c19 WHERE t0 . c27 = -100 ) AS t5 JOIN v0 ON t0 . c19 = ALL ( SELECT NULLIF ( c19 , 15 ) AS c16 FROM v0 ) WHERE t0 . c19 = 0 ;

Version: '10.4.32-MariaDB-debug-log'

231009 16:21:13 [ERROR] mysqld got signal 11 ;

Server version: 10.4.32-MariaDB-debug-log source revision: 0c7af6a2a19343cb9d4fedbd7165b8f73bc4cf96

sql/signal_handler.cc:238(handle_fatal_signal)[0x55de47e45f8d]

sigaction.c:0(__restore_rt)[0x7f01b6bd2420]

sql/item.cc:5575(Item_field::fix_outer_field(THD*, Field**, Item**))[0x55de47ec5dfe]

sql/item.cc:5994(Item_field::fix_fields(THD*, Item**))[0x55de47ec99f3]

sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55de473e65cd]

sql/item_func.cc:355(Item_func::fix_fields(THD*, Item**))[0x55de47fa3236]

sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55de473e65cd]

sql/item.h:970(Item::fix_fields_if_needed_for_scalar(THD*, Item**))[0x55de473e6607]

sql/item.h:975(Item::fix_fields_if_needed_for_bool(THD*, Item**))[0x55de4751eab1]

sql/sql_base.cc:8435(setup_on_expr(THD*, TABLE_LIST*, bool))[0x55de4751531f]

sql/sql_base.cc:8554(setup_conds(THD*, TABLE_LIST*, List<TABLE_LIST>&, Item**))[0x55de47515f68]

sql/sql_select.cc:744(setup_without_group(THD*, Bounds_checked_array<Item*>, TABLE_LIST*, List<TABLE_LIST>&, List<Item>&, List<Item>&, Item**, st_order*, st_order*, List<Window_spec>&, List<Item_window_func>&, bool*))[0x55de47732e0e]

sql/sql_select.cc:1335(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55de4773a59b]

sql/sql_union.cc:662(st_select_lex_unit::prepare_join(THD*, st_select_lex*, select_result*, unsigned long, bool))[0x55de4794a208]

sql/sql_union.cc:1009(st_select_lex_unit::prepare(TABLE_LIST*, select_result*, unsigned long))[0x55de4794d9a7]

sql/sql_cte.cc:1245(With_element::prepare_unreferenced(THD*))[0x55de47c5accc]

sql/sql_cte.cc:921(With_clause::prepare_unreferenced_elements(THD*))[0x55de47c5932e]

sql/sql_select.cc:1423(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55de4773b6d5]

sql/sql_union.cc:662(st_select_lex_unit::prepare_join(THD*, st_select_lex*, select_result*, unsigned long, bool))[0x55de4794a208]

sql/sql_union.cc:1009(st_select_lex_unit::prepare(TABLE_LIST*, select_result*, unsigned long))[0x55de4794d9a7]

sql/sql_derived.cc:824(mysql_derived_prepare(THD*, LEX*, TABLE_LIST*))[0x55de475b15cb]

sql/sql_derived.cc:200(mysql_handle_single_derived(LEX*, TABLE_LIST*, unsigned int))[0x55de475ad99c]

sql/table.cc:9097(TABLE_LIST::handle_derived(LEX*, unsigned int))[0x55de479da105]

sql/sql_lex.h:4395(LEX::handle_list_of_derived(TABLE_LIST*, unsigned int))[0x55de475f5e96]

sql/sql_lex.cc:4306(st_select_lex::handle_derived(LEX*, unsigned int))[0x55de47617f35]

sql/sql_select.cc:1243(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55de47738fcc]

sql/sql_select.cc:4789(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x55de4775fe67]

sql/sql_select.cc:442(handle_select(THD*, LEX*, select_result*, unsigned long))[0x55de47730de0]

sql/sql_parse.cc:6475(execute_sqlcom_select(THD*, TABLE_LIST*))[0x55de4769cbe4]

sql/sql_parse.cc:3978(mysql_execute_command(THD*))[0x55de4768a35b]

sql/sql_parse.cc:8012(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55de476a60bf]

sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55de4767c4e5]

sql/sql_parse.cc:1378(do_command(THD*))[0x55de47679010]

sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x55de47a86deb]

sql/sql_connect.cc:1325(handle_one_connection)[0x55de47a8668f]

perfschema/pfs.cc:1871(pfs_spawn_thread)[0x55de48731274]

nptl/pthread_create.c:478(start_thread)[0x7f01b6bc6609]

Query (0x62b0000a1290): WITH t1 AS ( SELECT 20 AS c5 , 32 AS c17 ) SELECT t5 . c19 AS c34 FROM ( WITH t2 AS ( SELECT c19 NOT REGEXP FLOOR ( 85 ) / ORD ( 118 ) - RAND ( ) AS c27 FROM ( SELECT RAND ( ) AS c36 FROM v0 ) AS t3 JOIN v0 ON t0 . c12 = t0 . c19 ) SELECT t4 . c12 AS c19 FROM t0 JOIN v0 AS t4 ON t4 . c12 = t4 . c19 WHERE t0 . c27 = -100 ) AS t5 JOIN v0 ON t0 . c19 = ALL ( SELECT NULLIF ( c19 , 15 ) AS c16 FROM v0 ) WHERE t0 . c19 = 0

Alice Sherepa added a comment - 2023-10-09 13:48 - edited test case from MDEV-31632 : CREATE TABLE a (id INT ); SELECT 1 union select 2 UNION SELECT 1 from a JOIN a b ON ( SELECT 1 FROM dual WHERE AAA); DROP TABLE a; Version: '10.4.32-MariaDB-debug-log' 231009 16:19:55 [ERROR] mysqld got signal 11 ; Server version: 10.4.32-MariaDB-debug-log source revision: 0c7af6a2a19343cb9d4fedbd7165b8f73bc4cf96 sql/signal_handler.cc:238(handle_fatal_signal)[0x55f5d6360f8d] sigaction.c:0(__restore_rt)[0x7fcb9fa83420] sql/item.cc:5575(Item_field::fix_outer_field(THD*, Field**, Item**))[0x55f5d63e0dfe] sql/item.cc:5994(Item_field::fix_fields(THD*, Item**))[0x55f5d63e49f3] sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55f5d59015cd] sql/item_func.cc:355(Item_func::fix_fields(THD*, Item**))[0x55f5d64be236] sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55f5d59015cd] sql/item.h:970(Item::fix_fields_if_needed_for_scalar(THD*, Item**))[0x55f5d5901607] sql/item.h:975(Item::fix_fields_if_needed_for_bool(THD*, Item**))[0x55f5d5a39ab1] sql/sql_base.cc:8546(setup_conds(THD*, TABLE_LIST*, List<TABLE_LIST>&, Item**))[0x55f5d5a30f40] sql/sql_select.cc:744(setup_without_group(THD*, Bounds_checked_array<Item*>, TABLE_LIST*, List<TABLE_LIST>&, List<Item>&, List<Item>&, Item**, st_order*, st_order*, List<Window_spec>&, List<Item_window_func>&, bool*))[0x55f5d5c4de0e] sql/sql_select.cc:1335(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55f5d5c5559b] sql/item_subselect.cc:3804(subselect_single_select_engine::prepare(THD*))[0x55f5d65b9a0c] sql/item_subselect.cc:289(Item_subselect::fix_fields(THD*, Item**))[0x55f5d6593481] sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55f5d59015cd] sql/item.h:970(Item::fix_fields_if_needed_for_scalar(THD*, Item**))[0x55f5d5901607] sql/item.h:975(Item::fix_fields_if_needed_for_bool(THD*, Item**))[0x55f5d5a39ab1] sql/sql_base.cc:8435(setup_on_expr(THD*, TABLE_LIST*, bool))[0x55f5d5a3031f] sql/sql_base.cc:8554(setup_conds(THD*, TABLE_LIST*, List<TABLE_LIST>&, Item**))[0x55f5d5a30f68] sql/sql_select.cc:744(setup_without_group(THD*, Bounds_checked_array<Item*>, TABLE_LIST*, List<TABLE_LIST>&, List<Item>&, List<Item>&, Item**, st_order*, st_order*, List<Window_spec>&, List<Item_window_func>&, bool*))[0x55f5d5c4de0e] sql/sql_select.cc:1335(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55f5d5c5559b] sql/sql_union.cc:662(st_select_lex_unit::prepare_join(THD*, st_select_lex*, select_result*, unsigned long, bool))[0x55f5d5e65208] sql/sql_union.cc:1089(st_select_lex_unit::prepare(TABLE_LIST*, select_result*, unsigned long))[0x55f5d5e6958f] sql/sql_union.cc:40(mysql_union(THD*, LEX*, select_result*, st_select_lex_unit*, unsigned long))[0x55f5d5e5f14d] sql/sql_select.cc:432(handle_select(THD*, LEX*, select_result*, unsigned long))[0x55f5d5c4baa9] sql/sql_parse.cc:6475(execute_sqlcom_select(THD*, TABLE_LIST*))[0x55f5d5bb7be4] sql/sql_parse.cc:3978(mysql_execute_command(THD*))[0x55f5d5ba535b] sql/sql_parse.cc:8012(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55f5d5bc10bf] sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55f5d5b974e5] sql/sql_parse.cc:1378(do_command(THD*))[0x55f5d5b94010] sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x55f5d5fa1deb] sql/sql_connect.cc:1325(handle_one_connection)[0x55f5d5fa168f] perfschema/pfs.cc:1871(pfs_spawn_thread)[0x55f5d6c4c274] nptl/pthread_create.c:478(start_thread)[0x7fcb9fa77609] Query (0x62b0000a1290): SELECT 1 union select 2 UNION SELECT 1 from a JOIN a b ON (SELECT 1 FROM dual WHERE AAA) from MDEV-32381 CREATE TABLE t0 ( c12 INT , c27 INT ) ; INSERT INTO t0 VALUES ( DEFAULT , DEFAULT ) , ( DEFAULT , DEFAULT ) ; CREATE VIEW v0 AS SELECT c27 AS c12 , c12 AS c19 , 16 AS c15 FROM t0 ; WITH t1 AS ( SELECT 20 AS c5 , 32 AS c17 ) SELECT t5 . c19 AS c34 FROM ( WITH t2 AS ( SELECT c19 NOT REGEXP FLOOR ( 85 ) / ORD ( 118 ) - RAND ( ) AS c27 FROM ( SELECT RAND ( ) AS c36 FROM v0 ) AS t3 JOIN v0 ON t0 . c12 = t0 . c19 ) SELECT t4 . c12 AS c19 FROM t0 JOIN v0 AS t4 ON t4 . c12 = t4 . c19 WHERE t0 . c27 = -100 ) AS t5 JOIN v0 ON t0 . c19 = ALL ( SELECT NULLIF ( c19 , 15 ) AS c16 FROM v0 ) WHERE t0 . c19 = 0 ; Version: '10.4.32-MariaDB-debug-log' 231009 16:21:13 [ERROR] mysqld got signal 11 ; Server version: 10.4.32-MariaDB-debug-log source revision: 0c7af6a2a19343cb9d4fedbd7165b8f73bc4cf96 sql/signal_handler.cc:238(handle_fatal_signal)[0x55de47e45f8d] sigaction.c:0(__restore_rt)[0x7f01b6bd2420] sql/item.cc:5575(Item_field::fix_outer_field(THD*, Field**, Item**))[0x55de47ec5dfe] sql/item.cc:5994(Item_field::fix_fields(THD*, Item**))[0x55de47ec99f3] sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55de473e65cd] sql/item_func.cc:355(Item_func::fix_fields(THD*, Item**))[0x55de47fa3236] sql/item.h:966(Item::fix_fields_if_needed(THD*, Item**))[0x55de473e65cd] sql/item.h:970(Item::fix_fields_if_needed_for_scalar(THD*, Item**))[0x55de473e6607] sql/item.h:975(Item::fix_fields_if_needed_for_bool(THD*, Item**))[0x55de4751eab1] sql/sql_base.cc:8435(setup_on_expr(THD*, TABLE_LIST*, bool))[0x55de4751531f] sql/sql_base.cc:8554(setup_conds(THD*, TABLE_LIST*, List<TABLE_LIST>&, Item**))[0x55de47515f68] sql/sql_select.cc:744(setup_without_group(THD*, Bounds_checked_array<Item*>, TABLE_LIST*, List<TABLE_LIST>&, List<Item>&, List<Item>&, Item**, st_order*, st_order*, List<Window_spec>&, List<Item_window_func>&, bool*))[0x55de47732e0e] sql/sql_select.cc:1335(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55de4773a59b] sql/sql_union.cc:662(st_select_lex_unit::prepare_join(THD*, st_select_lex*, select_result*, unsigned long, bool))[0x55de4794a208] sql/sql_union.cc:1009(st_select_lex_unit::prepare(TABLE_LIST*, select_result*, unsigned long))[0x55de4794d9a7] sql/sql_cte.cc:1245(With_element::prepare_unreferenced(THD*))[0x55de47c5accc] sql/sql_cte.cc:921(With_clause::prepare_unreferenced_elements(THD*))[0x55de47c5932e] sql/sql_select.cc:1423(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55de4773b6d5] sql/sql_union.cc:662(st_select_lex_unit::prepare_join(THD*, st_select_lex*, select_result*, unsigned long, bool))[0x55de4794a208] sql/sql_union.cc:1009(st_select_lex_unit::prepare(TABLE_LIST*, select_result*, unsigned long))[0x55de4794d9a7] sql/sql_derived.cc:824(mysql_derived_prepare(THD*, LEX*, TABLE_LIST*))[0x55de475b15cb] sql/sql_derived.cc:200(mysql_handle_single_derived(LEX*, TABLE_LIST*, unsigned int))[0x55de475ad99c] sql/table.cc:9097(TABLE_LIST::handle_derived(LEX*, unsigned int))[0x55de479da105] sql/sql_lex.h:4395(LEX::handle_list_of_derived(TABLE_LIST*, unsigned int))[0x55de475f5e96] sql/sql_lex.cc:4306(st_select_lex::handle_derived(LEX*, unsigned int))[0x55de47617f35] sql/sql_select.cc:1243(JOIN::prepare(TABLE_LIST*, unsigned int, Item*, unsigned int, st_order*, bool, st_order*, Item*, st_order*, st_select_lex*, st_select_lex_unit*))[0x55de47738fcc] sql/sql_select.cc:4789(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x55de4775fe67] sql/sql_select.cc:442(handle_select(THD*, LEX*, select_result*, unsigned long))[0x55de47730de0] sql/sql_parse.cc:6475(execute_sqlcom_select(THD*, TABLE_LIST*))[0x55de4769cbe4] sql/sql_parse.cc:3978(mysql_execute_command(THD*))[0x55de4768a35b] sql/sql_parse.cc:8012(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55de476a60bf] sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55de4767c4e5] sql/sql_parse.cc:1378(do_command(THD*))[0x55de47679010] sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x55de47a86deb] sql/sql_connect.cc:1325(handle_one_connection)[0x55de47a8668f] perfschema/pfs.cc:1871(pfs_spawn_thread)[0x55de48731274] nptl/pthread_create.c:478(start_thread)[0x7f01b6bc6609] Query (0x62b0000a1290): WITH t1 AS ( SELECT 20 AS c5 , 32 AS c17 ) SELECT t5 . c19 AS c34 FROM ( WITH t2 AS ( SELECT c19 NOT REGEXP FLOOR ( 85 ) / ORD ( 118 ) - RAND ( ) AS c27 FROM ( SELECT RAND ( ) AS c36 FROM v0 ) AS t3 JOIN v0 ON t0 . c12 = t0 . c19 ) SELECT t4 . c12 AS c19 FROM t0 JOIN v0 AS t4 ON t4 . c12 = t4 . c19 WHERE t0 . c27 = -100 ) AS t5 JOIN v0 ON t0 . c19 = ALL ( SELECT NULLIF ( c19 , 15 ) AS c16 FROM v0 ) WHERE t0 . c19 = 0

Sergei Petrunia added a comment - 2023-10-24 13:25

Name resolution problem.

Sergei Petrunia added a comment - 2023-10-24 13:25 Name resolution problem.

Roel Van de Paar added a comment - 2025-02-10 02:01

Accross build types and versions, the following testcase:

CREATE TABLE t (c INT KEY,c1 BLOB,c2 TEXT) ENGINE=InnoDB;

SELECT (SELECT 0 GROUP BY c HAVING (SELECT 0 GROUP BY c)) FROM t GROUP BY c;

Produces on UBASAN+Clang the following additional UniqueID's/stacks:

*ref && (*ref)->fixed()|SIGABRT|Item_field::fix_outer_field|Item_field::fix_fields|Item::fix_fields_if_needed_for_scalar|Item::fix_fields_if_needed_for_order_by

*ref && (*ref)->is_fixed()|SIGABRT|Item_field::fix_outer_field|Item_field::fix_fields|Item::fix_fields_if_needed_for_scalar|Item::fix_fields_if_needed_for_order_by

Roel Van de Paar added a comment - 2025-02-10 02:01 Accross build types and versions, the following testcase: CREATE TABLE t (c INT KEY ,c1 BLOB,c2 TEXT) ENGINE=InnoDB; SELECT ( SELECT 0 GROUP BY c HAVING ( SELECT 0 GROUP BY c)) FROM t GROUP BY c; Produces on UBASAN+Clang the following additional UniqueID's/stacks: *ref && (*ref)->fixed()|SIGABRT|Item_field::fix_outer_field|Item_field::fix_fields|Item::fix_fields_if_needed_for_scalar|Item::fix_fields_if_needed_for_order_by *ref && (*ref)->is_fixed()|SIGABRT|Item_field::fix_outer_field|Item_field::fix_fields|Item::fix_fields_if_needed_for_scalar|Item::fix_fields_if_needed_for_order_by

MariaDB Server

Assertion `ref && (ref)->fixed()' failed in Item_field::fix_outer_field on SELECT

Details

Description

Attachments

Issue Links

Activity

People

Dates

Git Integration