Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-32136

SIGSEGV in maria_rtree_get_next on UPDATE

Details

    Description

      CREATE TABLE t (c INT,c2 POINT NOT NULL,SPATIAL INDEX (c2)) ENGINE=Aria;
      INSERT INTO t VALUES (7,POINT(7,7));
      INSERT INTO t SELECT * FROM t;
      UPDATE t SET c=0;
      

      When executed in a standard master/slave setup will, sporadically, crash with this stack on the slave only:

      11.3.0 7ba9c7fb84b5f28e4736656b57d9508b70ca6369 (Debug)

      Core was generated by `/test/MD020923-mariadb-11.3.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --gti'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  0x000055c1d099f084 in maria_rtree_get_next (
          info=info@entry=0x152614022f38, keynr=keynr@entry=0, 
          key_length=<optimized out>)
          at /test/git-bisect/11.3_dbg/storage/maria/ma_rt_index.c:492
      [Current thread is 1 (Thread 0x15276537d640 (LWP 1273835))]
      (gdb) bt
      #0  0x000055c1d099f084 in maria_rtree_get_next (info=info@entry=0x152614022f38, keynr=keynr@entry=0, key_length=<optimized out>) at /test/git-bisect/11.3_dbg/storage/maria/ma_rt_index.c:492
      #1  0x000055c1d0964309 in maria_rnext (info=0x152614022f38, buf=0x15261401a5f8 "\376", inx=0) at /test/git-bisect/11.3_dbg/storage/maria/ma_rnext.c:91
      #2  0x000055c1d09319a6 in ha_maria::index_next (this=0x15261401aa10, buf=0x15261401a5f8 "\376") at /test/git-bisect/11.3_dbg/storage/maria/ha_maria.cc:2566
      #3  0x000055c1d0733139 in handler::ha_index_next (this=0x15261401aa10, buf=0x15261401a5f8 "\376") at /test/git-bisect/11.3_dbg/sql/handler.cc:3716
      #4  0x000055c1d08ac756 in Rows_log_event::find_row (this=this@entry=0x152718066438, rgi=rgi@entry=0x152718064ca0) at /test/git-bisect/11.3_dbg/sql/log_event_server.cc:7629
      #5  0x000055c1d08ad060 in Update_rows_log_event::do_exec_row (this=0x152718066438, rgi=0x152718064ca0) at /test/git-bisect/11.3_dbg/sql/log_event_server.cc:7936
      #6  0x000055c1d08a022b in Rows_log_event::do_apply_event (this=0x152718066438, rgi=0x152718064ca0) at /test/git-bisect/11.3_dbg/sql/log_event_server.cc:5129
      #7  0x000055c1d089793e in Log_event::apply_event (this=this@entry=0x152718066438, rgi=rgi@entry=0x152718064ca0) at /test/git-bisect/11.3_dbg/sql/log_event.cc:3875
      #8  0x000055c1d03707fa in apply_event_and_update_pos_apply (ev=ev@entry=0x152718066438, thd=thd@entry=0x15261c000f98, rgi=rgi@entry=0x152718064ca0, reason=reason@entry=0) at /test/git-bisect/11.3_dbg/sql/slave.cc:3877
      #9  0x000055c1d037ac37 in apply_event_and_update_pos_for_parallel (ev=ev@entry=0x152718066438, thd=thd@entry=0x15261c000f98, rgi=rgi@entry=0x152718064ca0) at /test/git-bisect/11.3_dbg/sql/slave.cc:4074
      #10 0x000055c1d06343e4 in rpt_handle_event (qev=qev@entry=0x1527180665a8, rpt=rpt@entry=0x152718026ac0) at /test/git-bisect/11.3_dbg/sql/rpl_parallel.cc:61
      #11 0x000055c1d0638dd7 in handle_rpl_parallel_thread (arg=<optimized out>) at /test/git-bisect/11.3_dbg/sql/rpl_parallel.cc:1429
      #12 0x00001527b0e94b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442
      #13 0x00001527b0f26a00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
      

      Issue confirmed/at least present in:

      11.3.0 7ba9c7fb84b5f28e4736656b57d9508b70ca6369 (Debug)
      11.2.0 e81fa345020ec6a067583db6a7019d6404b26f93 (Optimized)
      10.10.6 b1b47264d2ef1fa80b90f308e81c49d9a1011d56 (Optimized)
      10.9.8 941af1fa581a799e59ddc3afcae965852aeceb00 (Debug)
      10.6.15 d794d3484b2cbd069d68dc8d017a6f18e9a3090e (Debug)
      10.5.22 4235c133ae7dfe57c627699b3e4ea2513ff48979 (Optimized)
      10.4.31 ab10a675acb8198d4c772b807b81b50f97480d28 (Optimized)
      

      Assumed present in 10.4-11.3 (and possibly before) in all dbg+opt builds.

      It is unclear if the main issue is Replication, Aria, or GIS. However as the first frame is maria_rtree_get_next it seems to be most likely Aria. Assigning as such. Feel free to reassign as needed.

      Attachments

        Activity

          There are no comments yet on this issue.

          People

            monty Michael Widenius
            Roel Roel Van de Paar
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.