Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29400

Assertion `args[0] == args[2] || thd->stmt_arena->is_stmt_execute()' failed at item_cmpfunc.cc:2584

    XMLWordPrintable

Details

    Description

      I used my fuzzing tool to test Mariadb , and found a bug that can result in an abortion.

      Mariadb installation:
      1) cd mariadb-10.8.3
      2) mkdir build; cd build
      3) cmake .. -DCMAKE_BUILD_TYPE=Debug
      4) make -j12 && sudo make install

      Test driver compilation:
      Note: "mariadb_reproduce" sets up several transactions and execute SQL statements according to /tmp/mysql_bk.sql, /tmp/stmts.sql and /tmp/tid.txt
      1) g++ -I/usr/local/mysql/include/ mariadb_reproduce.cc -o mariadb_reproduce -lmysqlclient -g

      Reproduce the bug:
      1) cp mysql_bk.sql /tmp; cp stmts.sql /tmp; cp tid.txt /tmp
      2) export ASAN_OPTIONS=detect_leaks=0
      3) /usr/local/mysql/bin/mysqld --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data --plugin-dir=/usr/local/mysql/lib/plugin --user=mysql &
      4) ./mariadb_reproduce — crash the server
      I have simplified the content of stmts.sql, and I hope stmts.sql can help you reproduce and fix the bug. In addition, I attached the failure report (which has its stack trace).

      It is necessary to use "./mariadb_reproduce". When I just used "/usr/local/mysql/bin/mysql -uroot -Dtestdb < stmts.sql", the bug cannot be triggered

      Attachments

        1. bug_report.txt
          7 kB
        2. mariadb_reproduce.cc
          14 kB
        3. mysql_bk.sql
          5 kB
        4. stmts.sql
          0.7 kB
        5. tid.txt
          0.0 kB

        Issue Links

          Activity

            People

              Unassigned Unassigned
              Zuming Jiang Zuming Jiang
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.