Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-31849

SIGSEGV in Field::set_default | Field::save_in_field_default_value

    XMLWordPrintable

Details

    • Bug
    • Status: Confirmed (View Workflow)
    • Major
    • Resolution: Unresolved
    • 10.4, 10.9, 10.10, 10.11, 11.0, 11.1, 11.2, 11.3
    • 10.4, 10.11, 11.1
    • None
    • None

    Description

      CREATE TEMPORARY TABLE t (i INT KEY,c INT) ENGINE=Aria row_format=COMPRESSED KEY_BLOCK_SIZE=8;
      CREATE TABLE t (c INT);
      INSERT INTO t VALUES (1,0),(2,0),(3,0),(4,0);
      CREATE TABLE t (f INT) ENGINE=InnoDB;
      INSERT INTO t SELECT * FROM t;
      PREPARE s FROM 'SELECT * FROM t WHERE i=?';
      EXECUTE s USING DEFAULT;
      

      Leads to:

      11.2.0 e81fa345020ec6a067583db6a7019d6404b26f93 (Debug)

      Core was generated by `/test/MD270723-mariadb-11.2.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --cor'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  __memmove_avx_unaligned_erms ()
          at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:319
      [Current thread is 1 (Thread 0x150523bfd700 (LWP 4136307))]
      (gdb) bt
      #0  __memmove_avx_unaligned_erms () at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:319
      #1  0x000055b466e12202 in memcpy (__len=<optimized out>, __src=<optimized out>, __dest=<optimized out>) at /usr/include/x86_64-linux-gnu/bits/string_fortified.h:34
      #2  Field::set_default (this=0x1504fc015398) at /test/11.2_dbg/sql/field.cc:2665
      #3  0x000055b466e34e94 in Field::save_in_field_default_value (this=0x1504fc015398, view_error_processing=<optimized out>) at /test/11.2_dbg/sql/field.cc:11353
      #4  0x000055b466e65974 in Item_param::save_in_field (this=<optimized out>, field=<optimized out>, no_conversions=<optimized out>) at /test/11.2_dbg/sql/table.h:2873
      #5  0x000055b466bdb2af in store_key_item::copy_inner (this=this@entry=0x150523bfac20) at /test/11.2_dbg/sql/sql_select.h:2142
      #6  0x000055b466b9d1de in store_key::copy (thd=0x1504fc000d48, this=0x150523bfac20) at /test/11.2_dbg/sql/sql_select.h:2035
      #7  create_ref_for_key (join=join@entry=0x1504fc013478, j=j@entry=0x1504fc013d48, org_keyuse=org_keyuse@entry=0x1504fc014c88, allow_full_scan=allow_full_scan@entry=false, used_tables=<optimized out>) at /test/11.2_dbg/sql/sql_select.cc:13058
      #8  0x000055b466bd01b9 in make_join_statistics (join=join@entry=0x1504fc013478, tables_list=@0x1504fc03cfb0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x1504fc013c40, last = 0x1504fc013c40, elements = 1}, <No data fields>}, keyuse_array=keyuse_array@entry=0x1504fc0137e0) at /test/11.2_dbg/sql/sql_select.cc:5877
      #9  0x000055b466bd850b in JOIN::optimize_inner (this=this@entry=0x1504fc013478) at /test/11.2_dbg/sql/sql_select.cc:2618
      #10 0x000055b466bd89af in JOIN::optimize (this=this@entry=0x1504fc013478) at /test/11.2_dbg/sql/sql_select.cc:1944
      #11 0x000055b466bd8acf in mysql_select (thd=thd@entry=0x1504fc000d48, tables=0x1504fc03d3b8, fields=@0x1504fc03d050: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x1504fc03d370, last = 0x1504fc03ead8, elements = 2}, <No data fields>}, conds=0x1504fc03ddb0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2201187781376, result=0x1504fc03e840, unit=0x1504fc03b138, select_lex=0x1504fc03cd98) at /test/11.2_dbg/sql/sql_select.cc:5229
      #12 0x000055b466bd92ce in handle_select (thd=thd@entry=0x1504fc000d48, lex=lex@entry=0x1504fc03b058, result=result@entry=0x1504fc03e840, setup_tables_done_option=setup_tables_done_option@entry=0) at /test/11.2_dbg/sql/sql_select.cc:628
      #13 0x000055b466b3e0da in execute_sqlcom_select (thd=thd@entry=0x1504fc000d48, all_tables=0x1504fc03d3b8) at /test/11.2_dbg/sql/sql_parse.cc:6056
      #14 0x000055b466b4a43b in mysql_execute_command (thd=0x1504fc000d48, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=true) at /test/11.2_dbg/sql/sql_parse.cc:3944
      #15 0x000055b466b72073 in Prepared_statement::execute (this=this@entry=0x1504fc035698, expanded_query=expanded_query@entry=0x150523bfbcb0, open_cursor=open_cursor@entry=false) at /test/11.2_dbg/sql/sql_prepare.cc:5027
      #16 0x000055b466b72415 in Prepared_statement::execute_loop (this=this@entry=0x1504fc035698, expanded_query=expanded_query@entry=0x150523bfbcb0, open_cursor=open_cursor@entry=false, packet=packet@entry=0x0, packet_end=packet_end@entry=0x0) at /test/11.2_dbg/sql/sql_prepare.cc:4433
      #17 0x000055b466b72a5f in mysql_sql_stmt_execute (thd=thd@entry=0x1504fc000d48) at /test/11.2_dbg/sql/sql_prepare.cc:3470
      #18 0x000055b466b4a498 in mysql_execute_command (thd=thd@entry=0x1504fc000d48, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false) at /test/11.2_dbg/sql/sql_parse.cc:3960
      #19 0x000055b466b3873b in mysql_parse (thd=thd@entry=0x1504fc000d48, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x150523bfc2c0) at /test/11.2_dbg/sql/sql_parse.cc:7800
      #20 0x000055b466b45c00 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x1504fc000d48, packet=packet@entry=0x1504fc00af49 "EXECUTE s USING DEFAULT", packet_length=packet_length@entry=23, blocking=blocking@entry=true) at /test/11.2_dbg/sql/sql_class.h:1374
      #21 0x000055b466b480b8 in do_command (thd=0x1504fc000d48, blocking=blocking@entry=true) at /test/11.2_dbg/sql/sql_parse.cc:1405
      #22 0x000055b466cad717 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55b469e69bc8, put_in_cache=put_in_cache@entry=true) at /test/11.2_dbg/sql/sql_connect.cc:1445
      #23 0x000055b466cadbe6 in handle_one_connection (arg=0x55b469e69bc8) at /test/11.2_dbg/sql/sql_connect.cc:1347
      #24 0x00001505648ad609 in start_thread (arg=<optimized out>) at pthread_create.c:477
      #25 0x0000150564499133 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
      

      Bug confirmed present in:
      MariaDB: 10.4.31 (dbg), 10.9.8 (dbg), 10.10.6 (dbg), 10.11.5 (dbg), 11.0.2 (dbg), 11.0.3 (dbg), 11.1.2 (dbg), 11.2.0 (dbg)

      Bug (or feature/syntax) confirmed not present in:
      MariaDB: 10.4.31 (opt), 10.5.22 (dbg), 10.5.22 (opt), 10.6.15 (dbg), 10.6.15 (opt), 10.9.8 (opt), 10.10.6 (opt), 10.11.5 (opt), 11.0.3 (opt), 11.1.2 (opt), 11.2.0 (opt)

      Attachments

        Activity

          People

            shulga Dmitry Shulga
            ramesh Ramesh Sivaraman
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.