Type:
Bug
Priority:
Major
Resolution:
Fixed
Affects Version/s:
11.1.2 , 11.2.1 , 10.4(EOL) , 10.5 , 10.6 , 10.9(EOL) , 10.10(EOL) , 10.11 , 11.0(EOL) , 11.1(EOL) , 11.2(EOL)
Environment:
Ubuntu 20.04 x86-64, docker image mariadb:11.1.2
PoC:
SELECT
EXISTS (
WITH x ( x ) AS ( SELECT 1 )
SELECT NULL
WHERE ( 1 , 1 ) =
( SELECT
1 , ( ( x , 1.000000 ) , 1 )
IN
( SELECT 'x' , 'x'
WHERE ( ( 'x' ) )
UNION
SELECT 1 , x
HAVING 1 != 1
)
FROM x
)
);
docker log:
mariadbd(my_print_stacktrace+0x32)[0x55ab626be7c2]
mariadbd(handle_fatal_signal+0x488)[0x55ab62197cf8]
/lib/x86_64-linux-gnu/libc.so.6(+0x42520)[0x7fe667658520]
mariadbd(_ZN5TABLE11add_tmp_keyEjjPFjPhES0_b+0x1bc)[0x55ab620253ec]
mariadbd(_ZN25Expression_cache_tmptable4initEv+0x1d3)[0x55ab620a3a73]
mariadbd(_ZN18Item_cache_wrapper11check_cacheEv+0x21)[0x55ab621c4aa1]
mariadbd(_ZN18Item_cache_wrapper7val_intEv+0x21)[0x55ab621c4c31]
mariadbd(_ZN14Item_cache_int11cache_valueEv+0x29)[0x55ab621ad149]
mariadbd(_ZN26select_singlerow_subselect9send_dataER4ListI4ItemE+0x3f)[0x55ab61ec193f]
mariadbd(+0x89bf74)[0x55ab61f8df74]
mariadbd(_ZN4JOIN10exec_innerEv+0x1222)[0x55ab61fa6e12]
mariadbd(_ZN4JOIN4execEv+0x3f)[0x55ab61fa6fff]
mariadbd(_ZN30subselect_single_select_engine4execEv+0x146)[0x55ab622777f6]
mariadbd(_ZN14Item_subselect4execEv+0x4c)[0x55ab6227673c]
mariadbd(_ZN24Item_singlerow_subselect11bring_valueEv+0x17)[0x55ab62277ec7]
mariadbd(_ZN14Arg_comparator11compare_rowEv+0x37)[0x55ab621d1377]
mariadbd(_ZN12Item_func_eq7val_intEv+0x2f)[0x55ab621d164f]
mariadbd(_ZN4JOIN10exec_innerEv+0x432)[0x55ab61fa6022]
mariadbd(_ZN4JOIN4execEv+0x3f)[0x55ab61fa6fff]
mariadbd(_ZN30subselect_single_select_engine4execEv+0x146)[0x55ab622777f6]
mariadbd(_ZN14Item_subselect4execEv+0x4c)[0x55ab6227673c]
mariadbd(_ZN21Item_exists_subselect7val_intEv+0x23)[0x55ab622764a3]
mariadbd(_ZNK12Type_handler14Item_send_longEP4ItemP8ProtocolP8st_value+0x1d)[0x55ab620ee89d]
mariadbd(_ZN8Protocol19send_result_set_rowEP4ListI4ItemE+0xea)[0x55ab61e4ccfa]
mariadbd(_ZN11select_send9send_dataER4ListI4ItemE+0x37)[0x55ab61ecb6a7]
mariadbd(_ZN4JOIN10exec_innerEv+0xc90)[0x55ab61fa6880]
mariadbd(_ZN4JOIN4execEv+0x3f)[0x55ab61fa6fff]
mariadbd(_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x12c)[0x55ab61fa4f7c]
mariadbd(_Z13handle_selectP3THDP3LEXP13select_resulty+0x154)[0x55ab61fa5774]
mariadbd(+0x826f55)[0x55ab61f18f55]
mariadbd(_Z21mysql_execute_commandP3THDb+0x419e)[0x55ab61f27f0e]
mariadbd(_Z11mysql_parseP3THDPcjP12Parser_state+0x1e7)[0x55ab61f29237]
mariadbd(_Z16dispatch_command19enum_server_commandP3THDPcjb+0x14bd)[0x55ab61f2ba1d]
mariadbd(_Z10do_commandP3THDb+0x138)[0x55ab61f2d818]
mariadbd(_Z24do_handle_one_connectionP7CONNECTb+0x3bf)[0x55ab620553af]
mariadbd(handle_one_connection+0x5d)[0x55ab620556fd]
mariadbd(+0xcd1906)[0x55ab623c3906]
/lib/x86_64-linux-gnu/libc.so.6(+0x94b43)[0x7fe6676aab43]
/lib/x86_64-linux-gnu/libc.so.6(clone+0x44)[0x7fe66773bbb4]
Trying to get some variables.
Some pointers may be invalid and cause the dump to abort.
Query (0x7fe5f80130d8): SELECT EXISTS ( WITH x ( x ) AS ( SELECT 1 ) SELECT NULL WHERE ( 1 , 1 ) = ( SELECT 1 , ( ( x , 1.000000 ) , 1 ) IN ( SELECT 'x' , 'x' WHERE ( ( 'x' ) ) UNION SELECT 1 , x HAVING 1 != 1 ) FROM x ) )
Connection ID (thread ID): 4
Status: NOT_KILLED
Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on,not_null_range_scan=off,hash_join_cardinality=on
{"report":{"fcp":624.3000001907349,"ttfb":143.40000009536743,"pageVisibility":"visible","entityId":125460,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":1,"journeyId":"c81a5ce9-aa85-4f49-bd91-377207045de7","navigationType":0,"readyForUser":692.8000001907349,"redirectCount":0,"resourceLoadedEnd":776.8000001907349,"resourceLoadedStart":149.80000019073486,"resourceTiming":[{"duration":8.799999952316284,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":149.80000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":149.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":158.60000014305115,"responseStart":0,"secureConnectionStart":0},{"duration":8.700000047683716,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":150,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":150,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":158.70000004768372,"responseStart":0,"secureConnectionStart":0},{"duration":60.90000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/fbf975c0cce4b1abf04784eeae9ba1f4-CDN/lu2bu7/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":150.20000004768372,"connectEnd":150.20000004768372,"connectStart":150.20000004768372,"domainLookupEnd":150.20000004768372,"domainLookupStart":150.20000004768372,"fetchStart":150.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":150.20000004768372,"responseEnd":211.10000014305115,"responseStart":211.10000014305115,"secureConnectionStart":150.20000004768372},{"duration":133.60000014305115,"initiatorType":"script","name":"https://jira.mariadb.org/s/099b33461394b8015fc36c0a4b96e19f-CDN/lu2bu7/820016/12ta74/8679b4946efa1a0bb029a3a22206fb5d/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":150.20000004768372,"connectEnd":150.20000004768372,"connectStart":150.20000004768372,"domainLookupEnd":150.20000004768372,"domainLookupStart":150.20000004768372,"fetchStart":150.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":150.20000004768372,"responseEnd":283.80000019073486,"responseStart":283.80000019073486,"secureConnectionStart":150.20000004768372},{"duration":137.09999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/94c15bff32baef80f4096a08aceae8bc-CDN/lu2bu7/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":150.40000009536743,"connectEnd":150.40000009536743,"connectStart":150.40000009536743,"domainLookupEnd":150.40000009536743,"domainLookupStart":150.40000009536743,"fetchStart":150.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":150.40000009536743,"responseEnd":287.5,"responseStart":287.40000009536743,"secureConnectionStart":150.40000009536743},{"duration":137.40000009536743,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":150.5,"connectEnd":150.5,"connectStart":150.5,"domainLookupEnd":150.5,"domainLookupStart":150.5,"fetchStart":150.5,"redirectEnd":0,"redirectStart":0,"requestStart":150.5,"responseEnd":287.90000009536743,"responseStart":287.90000009536743,"secureConnectionStart":150.5},{"duration":137.59999990463257,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":150.60000014305115,"connectEnd":150.60000014305115,"connectStart":150.60000014305115,"domainLookupEnd":150.60000014305115,"domainLookupStart":150.60000014305115,"fetchStart":150.60000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":150.60000014305115,"responseEnd":288.2000000476837,"responseStart":288.2000000476837,"secureConnectionStart":150.60000014305115},{"duration":137.79999995231628,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2bu7/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":150.80000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":150.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":288.60000014305115,"responseStart":0,"secureConnectionStart":0},{"duration":137.70000004768372,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":150.90000009536743,"connectEnd":150.90000009536743,"connectStart":150.90000009536743,"domainLookupEnd":150.90000009536743,"domainLookupStart":150.90000009536743,"fetchStart":150.90000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":150.90000009536743,"responseEnd":288.60000014305115,"responseStart":288.60000014305115,"secureConnectionStart":150.90000009536743},{"duration":138.40000009536743,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":151,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":151,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":289.40000009536743,"responseStart":0,"secureConnectionStart":0},{"duration":138.5,"initiatorType":"script","name":"https://jira.mariadb.org/s/3339d87fa2538a859872f2df449bf8d0-CDN/lu2bu7/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":151.10000014305115,"connectEnd":151.10000014305115,"connectStart":151.10000014305115,"domainLookupEnd":151.10000014305115,"domainLookupStart":151.10000014305115,"fetchStart":151.10000014305115,"redirectEnd":0,"redirectStart":0,"requestStart":151.10000014305115,"responseEnd":289.60000014305115,"responseStart":289.60000014305115,"secureConnectionStart":151.10000014305115},{"duration":532.7000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":156.40000009536743,"connectEnd":156.40000009536743,"connectStart":156.40000009536743,"domainLookupEnd":156.40000009536743,"domainLookupStart":156.40000009536743,"fetchStart":156.40000009536743,"redirectEnd":0,"redirectStart":0,"requestStart":156.40000009536743,"responseEnd":689.1000001430511,"responseStart":689.1000001430511,"secureConnectionStart":156.40000009536743},{"duration":533.7000000476837,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":156.5,"connectEnd":156.5,"connectStart":156.5,"domainLookupEnd":156.5,"domainLookupStart":156.5,"fetchStart":156.5,"redirectEnd":0,"redirectStart":0,"requestStart":156.5,"responseEnd":690.2000000476837,"responseStart":690.2000000476837,"secureConnectionStart":156.5},{"duration":260.7000000476837,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":429,"connectEnd":429,"connectStart":429,"domainLookupEnd":429,"domainLookupStart":429,"fetchStart":429,"redirectEnd":0,"redirectStart":0,"requestStart":429,"responseEnd":689.7000000476837,"responseStart":689.7000000476837,"secureConnectionStart":429},{"duration":88,"initiatorType":"script","name":"https://www.google-analytics.com/analytics.js","startTime":603.1000001430511,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":603.1000001430511,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":691.1000001430511,"responseStart":0,"secureConnectionStart":0},{"duration":33.30000019073486,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":736.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":736.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":769.8000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":32.69999980926514,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2bu7/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":737.3000001907349,"connectEnd":737.3000001907349,"connectStart":737.3000001907349,"domainLookupEnd":737.3000001907349,"domainLookupStart":737.3000001907349,"fetchStart":737.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":737.3000001907349,"responseEnd":770,"responseStart":770,"secureConnectionStart":737.3000001907349},{"duration":39.10000014305115,"initiatorType":"script","name":"https://jira.mariadb.org/s/f51ef5507eea4c158f257c66c93b2a3f-CDN/lu2bu7/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":737.7000000476837,"connectEnd":737.7000000476837,"connectStart":737.7000000476837,"domainLookupEnd":737.7000000476837,"domainLookupStart":737.7000000476837,"fetchStart":737.7000000476837,"redirectEnd":0,"redirectStart":0,"requestStart":737.7000000476837,"responseEnd":776.8000001907349,"responseStart":776.8000001907349,"secureConnectionStart":737.7000000476837}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":14,"responseStart":143,"responseEnd":148,"domLoading":147,"domInteractive":821,"domContentLoadedEventStart":821,"domContentLoadedEventEnd":868,"domComplete":1397,"loadEventStart":1397,"loadEventEnd":1398,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":789.5},{"name":"bigPipe.sidebar-id.end","time":790.4000000953674},{"name":"bigPipe.activity-panel-pipe-id.start","time":790.6000001430511},{"name":"bigPipe.activity-panel-pipe-id.end","time":793},{"name":"activityTabFullyLoaded","time":877.4000000953674}],"measures":[],"correlationId":"483cc6b4aada6e","effectiveType":"4g","downlink":9.1,"rtt":0,"serverDuration":71,"dbReadsTimeInMs":13,"dbConnsTimeInMs":22,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}