-
Bug
-
-
Critical
-
Resolution:
Fixed
-
10.10.0, 10.3(EOL), 10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL), 10.9(EOL), 10.10(EOL)
-
-
-
output:
SUMMARY: AddressSanitizer: heap-use-after-free /home/wsh/database_fuzz/mysql_fuzz/Mariadb_10.3/sql/field.h:1389 in Field::is_null(long long) const
poc:
CREATE TABLE v1340 ( v1341 FLOAT NOT NULL ) ;
|
INSERT INTO v1340 ( v1341 ) VALUES ( -1 ) ;
|
UPDATE v1340 SET v1341 = 70 WHERE v1341 = 51 ;
|
INSERT INTO v1340 ( v1341 ) VALUES ( 0 ) , ( 84 ) ;
|
WITH v1343 AS ( SELECT v1341 FROM ( SELECT v1341 FROM v1340 GROUP BY v1341 ) AS v1342 ) SELECT v1341 FROM v1340 WHERE v1341 BETWEEN FALSE AND ( ( ( v1341 OR NOT v1341 ) BETWEEN ( ( ( NOT ( SELECT FALSE FROM v1340 WHERE ( v1341 , 'x' ) NOT IN ( SELECT ( 'x' = ( v1341 IN ( SELECT v1341 FROM v1340 WHERE v1341 = CASE WHEN v1341 * ( SELECT 90 FROM v1340 AS v1344 WHERE v1341 BETWEEN 31066339.000000 AND 76 WINDOW v1348 AS ( PARTITION BY v1341 ORDER BY ( SELECT DISTINCT 29 FROM v1340 AS v1345 , v1340 AS v1346 , v1340 AS v1347 JOIN v1340 ) DESC RANGE BETWEEN 64903499.000000 FOLLOWING AND 83565757.000000 FOLLOWING ) ) ^ v1341 THEN 'x' ELSE v1341 END / 83 WINDOW v1354 AS ( PARTITION BY v1341 ORDER BY ( SELECT DISTINCT 127 FROM ( SELECT DISTINCT ( ( NOT ( 38309169.000000 AND v1341 = -1 ) ) = 31 AND v1341 = -128 ) % 90 , ( v1341 = 6 OR v1341 > 'x' ) FROM v1340 WHERE EXISTS ( SELECT ( v1341 NOT IN ( v1341 ) AND v1341 NOT IN ( -128 ^ v1341 ) ) , v1341 + v1341 FROM v1340 GROUP BY v1341 HAVING ( v1341 != 79 AND v1341 = v1341 AND ( NOT ( 'x' = 'x' AND FALSE = 45 ) ) AND v1341 LIKE 'x' ) WINDOW v1355 AS ( ORDER BY v1341 - v1341 , ( 0 < v1341 AND v1341 = 0 ) ) ) ) AS v1350 NATURAL JOIN v1340 AS v1351 , v1340 AS v1352 , v1340 AS v1353 JOIN v1340 ) DESC RANGE BETWEEN 90766484.000000 FOLLOWING AND 77472811.000000 FOLLOWING ) ) ) ) , 'x' FROM v1340 ) ) * -1 + 25 ^ 50 - v1341 ) ) ) AND 0 ) ) ;
|
{"report":{"fcp":981.1000000238419,"ttfb":260.60000002384186,"pageVisibility":"visible","entityId":114079,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"ea6f4d49-a5bc-4072-b978-f1a9ec57e02f","navigationType":0,"readyForUser":1073.4000000357628,"redirectCount":0,"resourceLoadedEnd":1303.9000000357628,"resourceLoadedStart":266.2000000476837,"resourceTiming":[{"duration":238.0999999642372,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":266.2000000476837,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":266.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":504.30000001192093,"responseStart":0,"secureConnectionStart":0},{"duration":238.30000001192093,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":266.4000000357628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":266.4000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":504.7000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":249.80000001192093,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":266.60000002384186,"connectEnd":266.60000002384186,"connectStart":266.60000002384186,"domainLookupEnd":266.60000002384186,"domainLookupStart":266.60000002384186,"fetchStart":266.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":266.60000002384186,"responseEnd":516.4000000357628,"responseStart":516.4000000357628,"secureConnectionStart":266.60000002384186},{"duration":329,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":266.7000000476837,"connectEnd":266.7000000476837,"connectStart":266.7000000476837,"domainLookupEnd":266.7000000476837,"domainLookupStart":266.7000000476837,"fetchStart":266.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":266.7000000476837,"responseEnd":595.7000000476837,"responseStart":595.7000000476837,"secureConnectionStart":266.7000000476837},{"duration":332.39999997615814,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":266.9000000357628,"connectEnd":266.9000000357628,"connectStart":266.9000000357628,"domainLookupEnd":266.9000000357628,"domainLookupStart":266.9000000357628,"fetchStart":266.9000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":266.9000000357628,"responseEnd":599.3000000119209,"responseStart":599.3000000119209,"secureConnectionStart":266.9000000357628},{"duration":332.60000002384186,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":267.10000002384186,"connectEnd":267.10000002384186,"connectStart":267.10000002384186,"domainLookupEnd":267.10000002384186,"domainLookupStart":267.10000002384186,"fetchStart":267.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":267.10000002384186,"responseEnd":599.7000000476837,"responseStart":599.7000000476837,"secureConnectionStart":267.10000002384186},{"duration":332.9000000357628,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":267.30000001192093,"connectEnd":267.30000001192093,"connectStart":267.30000001192093,"domainLookupEnd":267.30000001192093,"domainLookupStart":267.30000001192093,"fetchStart":267.30000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":267.30000001192093,"responseEnd":600.2000000476837,"responseStart":600.2000000476837,"secureConnectionStart":267.30000001192093},{"duration":388.80000001192093,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":267.4000000357628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":267.4000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":656.2000000476837,"responseStart":0,"secureConnectionStart":0},{"duration":333.10000002384186,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":267.60000002384186,"connectEnd":267.60000002384186,"connectStart":267.60000002384186,"domainLookupEnd":267.60000002384186,"domainLookupStart":267.60000002384186,"fetchStart":267.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":267.60000002384186,"responseEnd":600.7000000476837,"responseStart":600.7000000476837,"secureConnectionStart":267.60000002384186},{"duration":388.5,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":267.80000001192093,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":267.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":656.3000000119209,"responseStart":0,"secureConnectionStart":0},{"duration":333.30000001192093,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":267.9000000357628,"connectEnd":267.9000000357628,"connectStart":267.9000000357628,"domainLookupEnd":267.9000000357628,"domainLookupStart":267.9000000357628,"fetchStart":267.9000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":267.9000000357628,"responseEnd":601.2000000476837,"responseStart":601.2000000476837,"secureConnectionStart":267.9000000357628},{"duration":483.39999997615814,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":273.10000002384186,"connectEnd":273.10000002384186,"connectStart":273.10000002384186,"domainLookupEnd":273.10000002384186,"domainLookupStart":273.10000002384186,"fetchStart":273.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":273.10000002384186,"responseEnd":756.5,"responseStart":756.5,"secureConnectionStart":273.10000002384186},{"duration":1030.699999988079,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":273.2000000476837,"connectEnd":273.2000000476837,"connectStart":273.2000000476837,"domainLookupEnd":273.2000000476837,"domainLookupStart":273.2000000476837,"fetchStart":273.2000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":273.2000000476837,"responseEnd":1303.9000000357628,"responseStart":1303.9000000357628,"secureConnectionStart":273.2000000476837},{"duration":91.89999997615814,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":667.4000000357628,"connectEnd":667.4000000357628,"connectStart":667.4000000357628,"domainLookupEnd":667.4000000357628,"domainLookupStart":667.4000000357628,"fetchStart":667.4000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":667.4000000357628,"responseEnd":759.3000000119209,"responseStart":759.2000000476837,"secureConnectionStart":667.4000000357628}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":95,"responseStart":260,"responseEnd":269,"domLoading":263,"domInteractive":1322,"domContentLoadedEventStart":1322,"domContentLoadedEventEnd":1362,"domComplete":2719,"loadEventStart":2719,"loadEventEnd":2721,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1305.7000000476837},{"name":"bigPipe.sidebar-id.end","time":1306.5},{"name":"bigPipe.activity-panel-pipe-id.start","time":1306.6000000238419},{"name":"bigPipe.activity-panel-pipe-id.end","time":1308.9000000357628},{"name":"activityTabFullyLoaded","time":1369.800000011921}],"measures":[],"correlationId":"1a6f3d3373f629","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":103,"dbReadsTimeInMs":13,"dbConnsTimeInMs":22,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}