[MDEV-31965] Server crash, ASAN errors, unexpected ER_DATA_TOO_LONG upon using SHA as a vritual column function - Jira

XML

Word

Printable

Details

Type: Bug
Status: Open (View Workflow)
Priority: Major
Resolution: Unresolved
Affects Version/s: 10.4(EOL), 10.5, 10.6, 10.10(EOL), 10.11, 11.0(EOL), 11.1(EOL)
Fix Version/s: 10.5, 10.6, 10.11
Component/s: Storage Engine - InnoDB, Virtual Columns
Labels:
None

Description

--source include/have_innodb.inc

CREATE TABLE t (a VARCHAR(8), f VARCHAR(128) GENERATED ALWAYS AS (SHA1('qux'))) ENGINE=InnoDB;

INSERT INTO t (a) VALUES ('foo'),('bar');

ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (PASSWORD(a)), ADD INDEX (f);

# Cleanup

DROP TABLE t;

10.4 900c4d69
==3506475==ERROR: AddressSanitizer: use-after-poison on address 0x6290002b7313 at pc 0x7f3611e4814b bp 0x7f35fcaea160 sp 0x7f35fcae9910
READ of size 62 at 0x6290002b7313 thread T27
#0 0x7f3611e4814a in __interceptor_memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827
#1 0x5576534b2740 in wc_ShaUpdate /data/src/10.4/extra/wolfssl/wolfssl/wolfcrypt/src/sha.c:733
#2 0x557652510454 in sha_input /data/src/10.4/mysys_ssl/my_sha.inl:69
#3 0x55765251055b in my_sha1 /data/src/10.4/mysys_ssl/my_sha.inl:152
#4 0x557652170ddf in compute_two_stage_sha1_hash /data/src/10.4/sql/password.c:372
#5 0x557652170eb3 in my_make_scrambled_password /data/src/10.4/sql/password.c:398
#6 0x557651f2dc3e in Item_func_password::val_str_ascii(String*) /data/src/10.4/sql/item_strfunc.cc:2242
#7 0x557651f18783 in Item_func::val_str_from_val_str_ascii(String, String) /data/src/10.4/sql/item_strfunc.cc:103
#8 0x557651c0d8bf in Item_str_ascii_func::val_str(String*) /data/src/10.4/sql/item_strfunc.h:93
#9 0x557651dbd940 in Item::save_str_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6675
#10 0x557651b035b1 in Type_handler_string_result::Item_save_in_field(Item, Field, bool) const /data/src/10.4/sql/sql_type.cc:3821
#11 0x557651dbe0e0 in Item::save_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6723
#12 0x5576518de6fe in TABLE::update_virtual_field(Field*, bool) /data/src/10.4/sql/table.cc:8649
#13 0x55765273c265 in innobase_get_computed_value(dtuple_t, dict_v_col_t const, dict_index_t const, mem_block_info_t, mem_block_info_t, dict_field_t const, THD, TABLE, unsigned char, dict_table_t const, upd_t const, bool) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20933
#14 0x557652a3ee99 in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:579
#15 0x557652a4c812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323
#16 0x557652a5c277 in row_merge_build_indexes(trx_t, dict_table_t, dict_table_t, bool, dict_index_t, unsigned long const, unsigned long, TABLE, dtuple_t const, unsigned long const, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t, dict_add_v_col_t const, TABLE, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697
#17 0x5576527b310e in ha_innobase::inplace_alter_table(TABLE, Alter_inplace_info) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735
#18 0x55765182a265 in handler::ha_inplace_alter_table(TABLE, Alter_inplace_info) /data/src/10.4/sql/handler.h:4355
#19 0x55765180b843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918
#20 0x55765181dffc in mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Recreate_info, Alter_info, unsigned int, st_order, bool) /data/src/10.4/sql/sql_table.cc:10446
#21 0x5576519a4a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531
#22 0x5576515ae1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216
#23 0x5576515b9a76 in mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010
#24 0x55765158fd41 in dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
#25 0x55765158c8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378
#26 0x55765198be0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
#27 0x55765198b726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324
#28 0x5576525fbe1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
#29 0x7f36117c8fd3 in start_thread nptl/pthread_create.c:442
#30 0x7f36118495bb in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

0x6290002b7313 is located 275 bytes inside of 16512-byte region [0x6290002b7200,0x6290002bb280)
allocated by thread T27 here:
#0 0x7f3611eb89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
#1 0x5576528f527f in mem_heap_create_block_func(mem_block_info_t, unsigned long, char const, unsigned int, unsigned long) /data/src/10.4/storage/innobase/mem/mem0mem.cc:277
#2 0x5576526db780 in mem_heap_create_func /data/src/10.4/storage/innobase/include/mem0mem.inl:375
#3 0x55765273a960 in innobase_allocate_row_for_vcol(THD, dict_index_t, mem_block_info_t, TABLE, VCOL_STORAGE*) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20764
#4 0x557652a3ed8f in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:571
#5 0x557652a4c812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323
#6 0x557652a5c277 in row_merge_build_indexes(trx_t, dict_table_t, dict_table_t, bool, dict_index_t, unsigned long const, unsigned long, TABLE, dtuple_t const, unsigned long const, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t, dict_add_v_col_t const, TABLE, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697
#7 0x5576527b310e in ha_innobase::inplace_alter_table(TABLE, Alter_inplace_info) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735
#8 0x55765182a265 in handler::ha_inplace_alter_table(TABLE, Alter_inplace_info) /data/src/10.4/sql/handler.h:4355
#9 0x55765180b843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918
#10 0x55765181dffc in mysql_alter_table(THD, st_mysql_const_lex_string const, st_mysql_const_lex_string const, HA_CREATE_INFO, TABLE_LIST, Recreate_info, Alter_info, unsigned int, st_order, bool) /data/src/10.4/sql/sql_table.cc:10446
#11 0x5576519a4a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531
#12 0x5576515ae1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216
#13 0x5576515b9a76 in mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010
#14 0x55765158fd41 in dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
#15 0x55765158c8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378
#16 0x55765198be0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
#17 0x55765198b726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324
#18 0x5576525fbe1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
#19 0x7f36117c8fd3 in start_thread nptl/pthread_create.c:442

Thread T27 created by T0 here:
#0 0x7f3611e49726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
#1 0x5576525fc20c in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919
#2 0x557651297f89 in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275
#3 0x5576512af690 in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6287
#4 0x5576512afddb in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6357
#5 0x5576512b02a9 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6455
#6 0x5576512b1155 in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6613
#7 0x5576512aedf3 in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5945
#8 0x5576512960b8 in main /data/src/10.4/sql/main.cc:25
#9 0x7f3611767189 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: use-after-poison ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827 in __interceptor_memcpy
Shadow bytes around the buggy address:
0x0c528004ee10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c528004ee20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c528004ee30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c528004ee40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c528004ee50: f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c528004ee60: 00 00[03]f7 f7 00 00 00 00 00 00 00 00 00 00 00
0x0c528004ee70: 00 00 00 00 00 00 03 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x0c528004ee80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x0c528004ee90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x0c528004eea0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x0c528004eeb0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==3506475==ABORTING

Intermediate versions of the same test case caused SIGSEGV instead of ASAN errors (even on an ASAN build).

Slightly different test case, without PASSWORD in ALTER, causes a confusing error:

--source include/have_innodb.inc

CREATE TABLE t (a VARCHAR(8), f VARCHAR(128) GENERATED ALWAYS AS (SHA1('qux'))) ENGINE=InnoDB;

INSERT INTO t (a) VALUES ('foo'),('bar');

ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (a), ADD INDEX (f);

# Cleanup

DROP TABLE t;

mysqltest: At line 5: query 'ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (a), ADD INDEX (f)' failed: 1406: Data too long for column 'f' at row 1

Another slightly different test case, SHA1 instead of PASSWORD in ALTER, similar as the first one, but a somewhat different stack trace:

--source include/have_innodb.inc

CREATE TABLE t (a VARCHAR(8), f VARCHAR(128) GENERATED ALWAYS AS (SHA1('qux'))) ENGINE=InnoDB;

INSERT INTO t (a) VALUES ('foo'),('bar');

ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (SHA1(a)), ADD INDEX (f);

# Cleanup

DROP TABLE t;

==3506696==ERROR: AddressSanitizer: use-after-poison on address 0x6290002b7313 at pc 0x7face864814b bp 0x7facd33681b0 sp 0x7facd3367960

READ of size 62 at 0x6290002b7313 thread T27

    #0 0x7face864814a in __interceptor_memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827

    #1 0x562ba14d1740 in wc_ShaUpdate /data/src/10.4/extra/wolfssl/wolfssl/wolfcrypt/src/sha.c:733

    #2 0x562ba052f454 in sha_input /data/src/10.4/mysys_ssl/my_sha.inl:69

    #3 0x562ba052f55b in my_sha1 /data/src/10.4/mysys_ssl/my_sha.inl:152

    #4 0x562b9ff38b22 in Item_func_sha::val_str_ascii(String*) /data/src/10.4/sql/item_strfunc.cc:197

    #5 0x562b9ff37783 in Item_func::val_str_from_val_str_ascii(String*, String*) /data/src/10.4/sql/item_strfunc.cc:103

    #6 0x562b9fc2c8bf in Item_str_ascii_func::val_str(String*) /data/src/10.4/sql/item_strfunc.h:93

    #7 0x562b9fddc940 in Item::save_str_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6675

    #8 0x562b9fb225b1 in Type_handler_string_result::Item_save_in_field(Item*, Field*, bool) const /data/src/10.4/sql/sql_type.cc:3821

    #9 0x562b9fddd0e0 in Item::save_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6723

    #10 0x562b9f8fd6fe in TABLE::update_virtual_field(Field*, bool) /data/src/10.4/sql/table.cc:8649

    #11 0x562ba075b265 in innobase_get_computed_value(dtuple_t*, dict_v_col_t const*, dict_index_t const*, mem_block_info_t**, mem_block_info_t*, dict_field_t const*, THD*, TABLE*, unsigned char*, dict_table_t const*, upd_t const*, bool) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20933

    #12 0x562ba0a5de99 in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:579

    #13 0x562ba0a6b812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323

    #14 0x562ba0a7b277 in row_merge_build_indexes(trx_t*, dict_table_t*, dict_table_t*, bool, dict_index_t**, unsigned long const*, unsigned long, TABLE*, dtuple_t const*, unsigned long const*, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t*, dict_add_v_col_t const*, TABLE*, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697

    #15 0x562ba07d210e in ha_innobase::inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735

    #16 0x562b9f849265 in handler::ha_inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/sql/handler.h:4355

    #17 0x562b9f82a843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918

    #18 0x562b9f83cffc in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool) /data/src/10.4/sql/sql_table.cc:10446

    #19 0x562b9f9c3a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531

    #20 0x562b9f5cd1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216

    #21 0x562b9f5d8a76 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010

    #22 0x562b9f5aed41 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857

    #23 0x562b9f5ab8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378

    #24 0x562b9f9aae0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420

    #25 0x562b9f9aa726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324

    #26 0x562ba061ae1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869

    #27 0x7face80a7fd3 in start_thread nptl/pthread_create.c:442

    #28 0x7face81285bb in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

0x6290002b7313 is located 275 bytes inside of 16512-byte region [0x6290002b7200,0x6290002bb280)

allocated by thread T27 here:

    #0 0x7face86b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69

    #1 0x562ba091427f in mem_heap_create_block_func(mem_block_info_t*, unsigned long, char const*, unsigned int, unsigned long) /data/src/10.4/storage/innobase/mem/mem0mem.cc:277

    #2 0x562ba06fa780 in mem_heap_create_func /data/src/10.4/storage/innobase/include/mem0mem.inl:375

    #3 0x562ba0759960 in innobase_allocate_row_for_vcol(THD*, dict_index_t*, mem_block_info_t**, TABLE**, VCOL_STORAGE*) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20764

    #4 0x562ba0a5dd8f in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:571

    #5 0x562ba0a6b812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323

    #6 0x562ba0a7b277 in row_merge_build_indexes(trx_t*, dict_table_t*, dict_table_t*, bool, dict_index_t**, unsigned long const*, unsigned long, TABLE*, dtuple_t const*, unsigned long const*, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t*, dict_add_v_col_t const*, TABLE*, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697

    #7 0x562ba07d210e in ha_innobase::inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735

    #8 0x562b9f849265 in handler::ha_inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/sql/handler.h:4355

    #9 0x562b9f82a843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918

    #10 0x562b9f83cffc in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool) /data/src/10.4/sql/sql_table.cc:10446

    #11 0x562b9f9c3a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531

    #12 0x562b9f5cd1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216

    #13 0x562b9f5d8a76 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010

    #14 0x562b9f5aed41 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857

    #15 0x562b9f5ab8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378

    #16 0x562b9f9aae0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420

    #17 0x562b9f9aa726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324

    #18 0x562ba061ae1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869

    #19 0x7face80a7fd3 in start_thread nptl/pthread_create.c:442

Thread T27 created by T0 here:

    #0 0x7face8649726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207

    #1 0x562ba061b20c in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919

    #2 0x562b9f2b6f89 in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275

    #3 0x562b9f2ce690 in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6287

    #4 0x562b9f2ceddb in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6357

    #5 0x562b9f2cf2a9 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6455

    #6 0x562b9f2d0155 in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6613

    #7 0x562b9f2cddf3 in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5945

    #8 0x562b9f2b50b8 in main /data/src/10.4/sql/main.cc:25

    #9 0x7face8046189 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: use-after-poison ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827 in __interceptor_memcpy

Shadow bytes around the buggy address:

  0x0c528004ee10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa

  0x0c528004ee20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa

  0x0c528004ee30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa

  0x0c528004ee40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

  0x0c528004ee50: f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

=>0x0c528004ee60: 00 00[03]f7 f7 00 00 00 00 00 00 00 00 00 00 00

  0x0c528004ee70: 00 00 00 00 00 00 03 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c528004ee80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c528004ee90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c528004eea0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c528004eeb0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

Shadow byte legend (one shadow byte represents 8 application bytes):

  Addressable:           00

  Partially addressable: 01 02 03 04 05 06 07

  Heap left redzone:       fa

  Freed heap region:       fd

  Stack left redzone:      f1

  Stack mid redzone:       f2

  Stack right redzone:     f3

  Stack after return:      f5

  Stack use after scope:   f8

  Global redzone:          f9

  Global init order:       f6

  Poisoned by user:        f7

  Container overflow:      fc

  Array cookie:            ac

  Intra object redzone:    bb

  ASan internal:           fe

  Left alloca redzone:     ca

  Right alloca redzone:    cb

==3506696==ABORTING

Reproducible on all existing versions.

Attachments

Activity

People

Assignee:: Nikita Malyavin

Reporter:: Elena Stepanova

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 2023-08-20 13:29

Updated:: 2024-09-10 15:34

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.