Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29729

SUMMARY: AddressSanitizer: heap-use-after-free sql/scheduler.cc:103 in post_kill_notification(THD*)

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Major
    • Resolution: Unresolved
    • 10.6.11
    • 10.6
    • Server
    • None

    Description

      ASAN failure found during RQG testing on
      origin/st-10.6-merge 75fac34247eb600a1dd10f4b4941cce5aac57978
      but on other development trees too. So its most probably in main trees.
       
      ==3979878==ERROR: AddressSanitizer: heap-use-after-free on address 0x615000094958 at pc 0x55e8eeb554c5 bp 0x7f52353b5ef0 sp 0x7f52353b5ee0
      READ of size 8 at 0x615000094958 thread T22
          #0 0x55e8eeb554c4 in post_kill_notification(THD*) /data/Server/st-10.6-merge/sql/scheduler.cc:103
          #1 0x55e8ee65523e in THD::awake_no_mutex(killed_state) /data/Server/st-10.6-merge/sql/sql_class.cc:1916
          #2 0x55e8ee78c3d3 in kill_one_thread(THD*, long long, killed_state, killed_type) /data/Server/st-10.6-merge/sql/sql_parse.cc:9263
          #3 0x55e8ee78cf74 in sql_kill /data/Server/st-10.6-merge/sql/sql_parse.cc:9397
          #4 0x55e8ee776c40 in mysql_execute_command(THD*, bool) /data/Server/st-10.6-merge/sql/sql_parse.cc:5529
          #5 0x55e8ee785fe8 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/Server/st-10.6-merge/sql/sql_parse.cc:8032
          #6 0x55e8ee75ea64 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/Server/st-10.6-merge/sql/sql_parse.cc:1896
          #7 0x55e8ee75bfd1 in do_command(THD*, bool) /data/Server/st-10.6-merge/sql/sql_parse.cc:1409
          #8 0x55e8eeb53e35 in do_handle_one_connection(CONNECT*, bool) /data/Server/st-10.6-merge/sql/sql_connect.cc:1416
          #9 0x55e8eeb537bd in handle_one_connection /data/Server/st-10.6-merge/sql/sql_connect.cc:1318
          #10 0x7f52451aa608 in start_thread /build/glibc-eX1tMB/glibc-2.31/nptl/pthread_create.c:477
          #11 0x7f5244d7d292 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x122292)
       
      Scenario:
      Two till three (just for replaying faster) connections run within a loop
          KILL CONNECTION <id of some other connection>;
          if losing the connection because getting killed than just reconnect.
      

      Attachments

        1. serg.prt
          24 kB
          Matthias Leich
        2. serg.tgz
          40 kB
          Matthias Leich

        Issue Links

          Activity

            People

              serg Sergei Golubchik
              mleich Matthias Leich
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.