Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-29935

Server crashes in get_sort_by_table/make_join_statistics after INSERT into a view with ORDER BY

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 10.3(EOL), (14)
      10.4(EOL), 10.5, 10.6, 10.7(EOL), 10.8(EOL), 10.9(EOL), 10.10(EOL), 10.11, 11.0(EOL), 11.1(EOL), 11.2(EOL), 11.4, 11.5(EOL), 11.6(EOL)
    • 10.5.28, 10.6.21, 10.11.11, 11.4.5, 11.7.2
    • Optimizer
    • None

    Description

      CREATE TABLE t1 ( pk int) ;
      		 
      create view v as SELECT * FROM t1 ORDER BY pk;
      		 
       
      		 
      insert into v select * from v;

      10.3 7d96cb4703693cbf7a23308cf

      		 
      Version: '10.3.37-MariaDB-debug-log'  socket: '/home/alice/am/_depot/m-branch/m3-10.3-bld/mysql-test/var/tmp/mysqld.1.sock'  port: 16000  Source distribution
      		 
      221102 14:56:33 [ERROR] mysqld got signal 11 ;
      		 
       
      		 
      Server version: 10.3.37-MariaDB-debug-log
      		 
       
      		 
      sql/signal_handler.cc:231(handle_fatal_signal)[0x5592e14cdd1e]
      		 
      sigaction.c:0(__restore_rt)[0x7f629cfe4420]
      		 
      sql/sql_select.cc:24221(get_sort_by_table(st_order*, st_order*, List<TABLE_LIST>&, unsigned long long))[0x5592e0eaacfc]
      		 
      sql/sql_select.cc:4964(make_join_statistics(JOIN*, List<TABLE_LIST>&, st_dynamic_array*))[0x5592e0e21385]
      		 
      sql/sql_select.cc:1992(JOIN::optimize_inner())[0x5592e0e03240]
      		 
      sql/sql_select.cc:1534(JOIN::optimize())[0x5592e0dfe71b]
      		 
      sql/sql_select.cc:4360(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x5592e0e1bdf5]
      		 
      sql/sql_select.cc:372(handle_select(THD*, LEX*, select_result*, unsigned long))[0x5592e0df2139]
      		 
      sql/sql_parse.cc:4621(mysql_execute_command(THD*))[0x5592e0d55aa9]
      		 
      sql/sql_parse.cc:7855(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x5592e0d6ca88]
      		 
      sql/sql_parse.cc:1855(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x5592e0d43a05]
      		 
      sql/sql_parse.cc:1398(do_command(THD*))[0x5592e0d40524]
      		 
      sql/sql_connect.cc:1403(do_handle_one_connection(CONNECT*))[0x5592e11164f3]
      		 
      sql/sql_connect.cc:1309(handle_one_connection)[0x5592e1115dad]
      		 
      perfschema/pfs.cc:1871(pfs_spawn_thread)[0x5592e2748ae7]
      		 
      nptl/pthread_create.c:478(start_thread)[0x7f629cfd8609]
      		 
      /lib/x86_64-linux-gnu/libc.so.6(clone+0x43)[0x7f629cefd133]
      		 
       
      		 
      Query (0x62b000000290): insert into v select * from v

      non-debug:

      10.6.9

      		 
      221102 14:51:37 [ERROR] mysqld got signal 11 ;
      		 
      Server version: 10.6.9-MariaDB
      		 
       
      		 
      sql/signal_handler.cc:236(handle_fatal_signal)[0x555ba69f0917]
      		 
      sigaction.c:0(__restore_rt)[0x7fd2e265b420]
      		 
      sql/sql_select.cc:25679(JOIN::optimize_inner())[0x555ba682b239]
      		 
      sql/sql_select.cc:1838(JOIN::optimize())[0x555ba682c375]
      		 
      sql/sql_select.cc:5027(mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x555ba682c448]
      		 
      sql/sql_select.cc:566(handle_select(THD*, LEX*, select_result*, unsigned long))[0x555ba682cd54]
      		 
      sql/sql_parse.cc:4711(mysql_execute_command(THD*, bool))[0x555ba67d0229]
      		 
      sql/sql_parse.cc:8031(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x555ba67d112b]
      		 
      sql/sql_parse.cc:1955(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x555ba67d32e7]
      		 
      sql/sql_parse.cc:1411(do_command(THD*, bool))[0x555ba67d4983]
      		 
      sql/sql_connect.cc:1418(do_handle_one_connection(CONNECT*, bool))[0x555ba68cac47]
      		 
      sql/sql_connect.cc:1318(handle_one_connection)[0x555ba68caee4]
      		 
      perfschema/pfs.cc:2204(pfs_spawn_thread)[0x555ba6c5fcdc]
      		 
      nptl/pthread_create.c:478(start_thread)[0x7fd2e264f609]
      		 
      ??:0(clone)[0x7fd2e223b133]
      		 
       
      		 
      Query (0x7fd28c012210): insert into v select * from v

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. MDEV-35680 Table number > MAX_TABLES causes overflow of table_map at main.join test

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed
          is caused by

          Bug - A problem which impairs or prevents the functions of the product. MDEV-26427 MariaDB Server SEGV on INSERT .. SELECT

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. MDEV-32258 MariaDB crash in JOIN optimization

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-28510 SIGSEGV in get_sort_by_table and SIGSEGV in subquery_types_allow_materialization

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-28516 SIGSEGV in get_sort_by_table, UBSAN: runtime error: member access within null pointer of type 'struct TABLE_LIST'

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-29681 Server crashes when optimizing SQL with ORDER BY

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-30756 Crash in get_sort_by_table / make_join_statistics / update_depend_map_for_order, various UBSAN pointer issues

          • Major - Major loss of function.
          • Stalled

          Bug - A problem which impairs or prevents the functions of the product. MDEV-32763 Assertion `fixed' failed at /mariadb-11.3.0/sql/item_strfunc.cc:2391

          • Major - Major loss of function.
          • Confirmed

          Bug - A problem which impairs or prevents the functions of the product. MDEV-30756 Crash in get_sort_by_table / make_join_statistics / update_depend_map_for_order, various UBSAN pointer issues

          • Major - Major loss of function.
          • Stalled
          split to

          Bug - A problem which impairs or prevents the functions of the product. MDEV-35277 SIGSEGV in get_sort_by_table on SELECT

          • Major - Major loss of function.
          • Stalled

          Activity

            Ascending order - Click to sort in descending order
            oleg.smirnov Oleg Smirnov added a comment -

            This issue is caused by MDEV-26427:

            commit 49e14000eeb245ea27e9207d2f63cb0a28be1ca9
            		 
            Author: Oleg Smirnov <olernov@gmail.com>
            		 
            Date:   Sat Jun 18 20:54:39 2022 +0700
            		 
             
            		 
                MDEV-26427 MariaDB Server SEGV on INSERT .. SELECT
            		 
                
                1. For INSERT..SELECT statements: don't include table/view the data
            		 
                   is inserted into in the list of leaf tables
            		 
                2. Remove duplicated and dead code related to table_count

            oleg.smirnov Oleg Smirnov added a comment - This issue is caused by MDEV-26427 : commit 49e14000eeb245ea27e9207d2f63cb0a28be1ca9 Author: Oleg Smirnov <olernov@gmail.com> Date: Sat Jun 18 20:54:39 2022 +0700   MDEV-26427 MariaDB Server SEGV on INSERT .. SELECT 1. For INSERT..SELECT statements: don't include table/view the data is inserted into in the list of leaf tables 2. Remove duplicated and dead code related to table_count
            oleg.smirnov Oleg Smirnov added a comment -

            Roel, would you mind filing this issue as a separate task? It is caused by something different.

            sanja, please review the PR or bb-10.5-MDEV-29935. The branch reverts the previous solution for MDEV-25427 and re-implements it more correctly, so there is no need for additional fixes for MDEV-29935.

            oleg.smirnov Oleg Smirnov added a comment - Roel , would you mind filing this issue as a separate task? It is caused by something different. sanja , please review the PR or bb-10.5- MDEV-29935 . The branch reverts the previous solution for MDEV-25427 and re-implements it more correctly, so there is no need for additional fixes for MDEV-29935 .
            Roel Roel Van de Paar added a comment -

            oleg.smirnov Ack/done, MDEV-35277 SIGSEGV in get_sort_by_table on SELECT

            Roel Roel Van de Paar added a comment - oleg.smirnov Ack/done, MDEV-35277 SIGSEGV in get_sort_by_table on SELECT
            sanja Oleksandr Byelkin added a comment -

            OK to push

            sanja Oleksandr Byelkin added a comment - OK to push
            oleg.smirnov Oleg Smirnov added a comment -

            Pushed to 10.5.

            oleg.smirnov Oleg Smirnov added a comment - Pushed to 10.5.

            People

              oleg.smirnov Oleg Smirnov
              alice Alice Sherepa
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.