[MDEV-32711] Assertion Failed at /mariadb-11.3.0/sql/item_cmpfunc.cc:5674 - Jira

Details

Type: Bug
Status: Confirmed (View Workflow)
Priority: Major
Resolution: Unresolved
Affects Version/s: 11.3.0, 10.4(EOL), 10.5, 10.6, 10.9(EOL), 10.10(EOL), 10.11, 11.0(EOL), 11.1(EOL), 11.2(EOL), 11.7(EOL)
Fix Version/s: 10.5, 10.6, 10.11, 11.4
Component/s: Optimizer - Window functions, Server
Labels:
None
Environment:
Ubuntu 20.04

Description

Run these queries in debug build:

CREATE TABLE t0 ( c28 INT , c8 INT ) ;
INSERT INTO t0 VALUES ( 35 , 96 ) , ( 7 , 91 ) ;
ALTER TABLE t0 ADD COLUMN c15 INT AFTER c28 ;
INSERT INTO t0 VALUES ( DEFAULT , DEFAULT , DEFAULT ) , ( DEFAULT , DEFAULT , DEFAULT ) ;
SELECT SQRT ( 77 ) NOT REGEXP MOD ( TRIM( LEADING FROM 199006839349504362 < 118 ) - COUNT( * ) OVER ( PARTITION BY c8 , c8 , c8 , c15 , c15 , c15 , c28 , BIT_AND( CASE 41 WHEN -55 THEN 44 ELSE -127 END IS NOT NULL ) OVER ( PARTITION BY - GROUP_CONCAT( CHAR_LENGTH ( 5587684486210155208 ) , 'FUMp}o,E1_p?5t>(S3-H84\'^(8,\\\\cW7' , 'c4d#7YXD2_<=:/vepn?}m]wj <hcB?2KYV=,SO7kyxTj&k=(RzB&NY*hN|K|' ORDER BY COS ( t0 . c15 ) - RAND ( t0 . c8 ) = t0 . c15 SEPARATOR 'HG|h(L_qP
J{!TG>Z8K{WNKl:^F=0^x%8*yNsc&^Cg5dS`z`%O^VQ' ) XOR t0 . c28 = REVERSE ( ( NOT EXPORT_SET ( 4 , '=YzuLW>U75b*F3/%F$$2@Zu' , 'K*U&mp|V8_,8hqX8+j' , 'kXB+/tV' ) SOUNDS LIKE TRUNCATE ( 93 , 11 ) = 10 ) & - BIT_LENGTH ( -13 ) & NULLIF ( 90 , -105 ) IN ( 17 , 108 , 4513583902236675204 ) ) ROWS BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING ) * MIN( 56 ) ORDER BY t0 . c15 NOT REGEXP ROUND ( 123 , -98 ) DESC ) , 110 ) = ALL ( SELECT c15 AS c20 FROM t0 ) AS c56 FROM t0 GROUP BY c8 , c15 , c28 ;

Will trigger Assertion Failed.
GDB info:
#0 0x00007ffff6c0c00b in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1 0x00007ffff6beb859 in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2 0x00007ffff6beb729 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3 0x00007ffff6bfcfd6 in __assert_fail () from /lib/x86_64-linux-gnu/libc.so.6
#4 0x0000555557c19463 in Item_func_isnotnull::val_int (this=0x6290000f7720) at /home/wx/mariadb-11.3.0/sql/item_cmpfunc.cc:5674
#5 0x0000555557e034e6 in Item_sum_and::add (this=0x6290000f77e0) at /home/wx/mariadb-11.3.0/sql/item_sum.cc:2747
#6 0x00005555579135a9 in Frame_cursor::add_value_to_items (this=0x62d0000d4138) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:1166
#7 0x0000555557916484 in Frame_unbounded_following::next_partition (this=0x62d0000d4138, rownum=0) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:1791
#8 0x0000555557913d9e in Cursor_manager::notify_cursors_partition_changed (this=0x603000233530, rownum=0) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:1229
#9 0x000055555790ed44 in compute_window_func (thd=0x62c0001d0288, window_functions=..., cursor_managers=..., tbl=0x623000016da8, filesort_result=0x6150001e5580) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:2907
#10 0x000055555790f54d in Window_func_runner::exec (this=0x62d0000d3158, thd=0x62c0001d0288, tbl=0x623000016da8, filesort_result=0x6150001e5580) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:3039
#11 0x000055555790f79c in Window_funcs_sort::exec (this=0x62d0000d3150, join=0x629000183398, keep_filesort_result=false) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:3067
#12 0x00005555579105c8 in Window_funcs_computation::exec (this=0x62d0000d3128, join=0x629000183398, keep_last_filesort_result=true) at /home/wx/mariadb-11.3.0/sql/sql_window.cc:3196
#13 0x00005555573a1ea2 in AGGR_OP::end_send (this=0x629000193c00) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:32300
#14 0x000055555735ebd8 in sub_select_postjoin_aggr (join=0x629000183398, join_tab=0x629000188458, end_of_records=true) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:23128
#15 0x000055555735f713 in sub_select (join=0x629000183398, join_tab=0x629000187fe0, end_of_records=true) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:23378
#16 0x000055555735dbe3 in do_select (join=0x629000183398, procedure=0x0) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:22963
#17 0x00005555572dbfe9 in JOIN::exec_inner (this=0x629000183398) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:4941
#18 0x00005555572d93a0 in JOIN::exec (this=0x629000183398) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:4718
#19 0x00005555572ddbab in mysql_select (thd=0x62c0001d0288, tables=0x629000181e08, fields=..., conds=0x0, og_num=10, order=0x0, group=0x6290000f6870, having=0x0, proc_param=0x0, select_options=2165049856, result=0x629000183368, unit=0x62c0001d46d8, select_lex=0x6290000f5aa0) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:5249
#20 0x00005555572ad18a in handle_select (thd=0x62c0001d0288, lex=0x62c0001d45f8, result=0x629000183368, setup_tables_done_option=0) at /home/wx/mariadb-11.3.0/sql/sql_select.cc:628
#21 0x00005555571ce583 in execute_sqlcom_select (thd=0x62c0001d0288, all_tables=0x629000181e08) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:6013
#22 0x00005555571becf6 in mysql_execute_command (thd=0x62c0001d0288, is_called_from_prepared_stmt=false) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:3912
#23 0x00005555571d95e2 in mysql_parse (thd=0x62c0001d0288, rawbuf=0x6290000f52a8 "SELECT SQRT ( 77 ) NOT REGEXP MOD ( TRIM( LEADING FROM 199006839349504362 < 118 ) - COUNT( * ) OVER ( PARTITION BY c8 , c8 , c8 , c15 , c15 , c15 , c28 , BIT_AND( CASE -41 WHEN -55 THEN 44 ELSE -127 E"..., length=967, parser_state=0x7fffd163c870) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:7734
#24 0x00005555571b1237 in dispatch_command (command=COM_QUERY, thd=0x62c0001d0288, packet=0x6290000fa289 "", packet_length=970, blocking=true) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:1893
#25 0x00005555571adf7c in do_command (thd=0x62c0001d0288, blocking=true) at /home/wx/mariadb-11.3.0/sql/sql_parse.cc:1406
#26 0x000055555768e557 in do_handle_one_connection (connect=0x6110000447c8, put_in_cache=true) at /home/wx/mariadb-11.3.0/sql/sql_connect.cc:1445
#27 0x000055555768deb4 in handle_one_connection (arg=0x611000044688) at /home/wx/mariadb-11.3.0/sql/sql_connect.cc:1347
#28 0x00005555582fa350 in pfs_spawn_thread (arg=0x618000007d08) at /home/wx/mariadb-11.3.0/storage/perfschema/pfs.cc:2201
#29 0x00007ffff7115609 in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0
#30 0x00007ffff6ce8133 in clone () from /lib/x86_64-linux-gnu/libc.so.6

Attachments

Issue Links

relates to

MDEV-32712 Assertion Failed at /mariadb-11.3.0/sql/item_cmpfunc.cc:1779

Confirmed

Activity

Ascending order - Click to sort in descending order

Xin Wen created issue - 2023-11-07 03:07

Alice Sherepa added a comment - 2023-11-07 17:15 - edited

Thanks!
Repeatable on 10.4-11.2

mysqld: /10.4/src/sql/item_cmpfunc.cc:5496: virtual longlong Item_func_isnotnull::val_int(): Assertion `fixed == 1' failed.

231107 18:13:56 [ERROR] mysqld got signal 6 ;

Server version: 10.4.32-MariaDB-debug-log source revision: e5a5573f782723e40c372f38346a60b1ccc644d6

/lib/x86_64-linux-gnu/libc.so.6(+0x33fd6)[0x7f7a1901afd6]

sql/item_cmpfunc.cc:5497(Item_func_isnotnull::val_int())[0x5560e01c6c0f]

sql/item_sum.cc:2713(Item_sum_and::add())[0x5560e0357415]

sql/sql_window.cc:1164(Frame_cursor::add_value_to_items())[0x5560dfed06b3]

sql/sql_window.cc:1794(Frame_unbounded_following::next_partition(unsigned long long))[0x5560dfed358e]

sql/sql_window.cc:1228(Cursor_manager::notify_cursors_partition_changed(unsigned long long))[0x5560dfed0ea8]

sql/sql_window.cc:2907(compute_window_func(THD*, List<Item_window_func>&, List<Cursor_manager>&, TABLE*, SORT_INFO*))[0x5560dfecbdb4]

sql/sql_window.cc:3030(Window_func_runner::exec(THD*, TABLE*, SORT_INFO*))[0x5560dfecc570]

sql/sql_window.cc:3058(Window_funcs_sort::exec(JOIN*, bool))[0x5560dfecc7be]

sql/sql_window.cc:3185(Window_funcs_computation::exec(JOIN*, bool))[0x5560dfecd5c6]

sql/sql_select.cc:29697(AGGR_OP::end_send())[0x5560dfa9483a]

sql/sql_select.cc:20621(sub_select_postjoin_aggr(JOIN*, st_join_table*, bool))[0x5560dfa50e5f]

sql/sql_select.cc:20867(sub_select(JOIN*, st_join_table*, bool))[0x5560dfa5195a]

sql/sql_select.cc:20445(do_select(JOIN*, Procedure*))[0x5560dfa5005a]

sql/sql_select.cc:4625(JOIN::exec_inner())[0x5560df9dda9c]

sql/sql_select.cc:4408(JOIN::exec())[0x5560df9db0cc]

sql/sql_select.cc:4848(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x5560df9df2a8]

sql/sql_select.cc:442(handle_select(THD*, LEX*, select_result*, unsigned long))[0x5560df9afb1e]

sql/sql_parse.cc:6475(execute_sqlcom_select(THD*, TABLE_LIST*))[0x5560df91b886]

sql/sql_parse.cc:3978(mysql_execute_command(THD*))[0x5560df908ffd]

sql/sql_parse.cc:8013(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x5560df924dc5]

sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x5560df8fb187]

sql/sql_parse.cc:1378(do_command(THD*))[0x5560df8f7cb2]

sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x5560dfd075b5]

sql/sql_connect.cc:1325(handle_one_connection)[0x5560dfd06e59]

perfschema/pfs.cc:1871(pfs_spawn_thread)[0x5560e09a347e]

nptl/pthread_create.c:478(start_thread)[0x7f7a19535609]

Query (0x62b0000a1290): SELECT SQRT ( 77 ) NOT REGEXP MOD ( TRIM( LEADING FROM 199006839349504362 < 118 ) - COUNT( * ) OVER ( PARTITION BY c8 , c8 , c8 , c15 , c15 , c15 , c28 , BIT_AND( CASE 41 WHEN -55 THEN 44 ELSE -127 END IS NOT NULL ) OVER ( PARTITION BY - GROUP_CONCAT( CHAR_LENGTH ( 5587684486210155208 ) , 'FUMp}o,E1_p?5t>(S3-H84\'^(8,\\\\cW7' , 'c4d#7YXD2_<=:/vepn?}m]wj <hcB?2KYV=,SO7kyxTj&k=(RzB&NY*hN|K|' ORDER BY COS ( t0 . c15 ) - RAND ( t0 . c8 ) = t0 . c15 SEPARATOR 'HG|h(L_qP

J{!TG>Z8K{WNKl:^F=0^x%8*yNsc&^Cg5dS`z`%O^VQ' ) XOR t0 . c28 = REVERSE ( ( NOT EXPORT_SET ( 4 , '=YzuLW>U75b*F3/%F$$2@Zu' , 'K*U&mp|V8_,8hqX8+j' , 'kXB+/tV' ) SOUNDS LIKE TRUNCATE ( 93 , 11 ) = 10 ) & - BIT_LENGTH ( -13 ) & NULLIF ( 90 , -105 ) IN ( 17 , 108 , 4513583902236675204 ) ) ROWS BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING ) * MIN( 56 ) ORDER BY t0 . c15 NOT REGEXP ROUND ( 123 , -98 ) DESC ) , 110 ) = ALL ( SELECT c15 AS c20 FROM t0 ) AS c56 FROM t0 GROUP BY c8 , c15 , c28

Alice Sherepa added a comment - 2023-11-07 17:15 - edited Thanks! Repeatable on 10.4-11.2 mysqld: /10.4/src/sql/item_cmpfunc.cc:5496: virtual longlong Item_func_isnotnull::val_int(): Assertion `fixed == 1' failed. 231107 18:13:56 [ERROR] mysqld got signal 6 ; Server version: 10.4.32-MariaDB-debug-log source revision: e5a5573f782723e40c372f38346a60b1ccc644d6 /lib/x86_64-linux-gnu/libc.so.6(+0x33fd6)[0x7f7a1901afd6] sql/item_cmpfunc.cc:5497(Item_func_isnotnull::val_int())[0x5560e01c6c0f] sql/item_sum.cc:2713(Item_sum_and::add())[0x5560e0357415] sql/sql_window.cc:1164(Frame_cursor::add_value_to_items())[0x5560dfed06b3] sql/sql_window.cc:1794(Frame_unbounded_following::next_partition(unsigned long long))[0x5560dfed358e] sql/sql_window.cc:1228(Cursor_manager::notify_cursors_partition_changed(unsigned long long))[0x5560dfed0ea8] sql/sql_window.cc:2907(compute_window_func(THD*, List<Item_window_func>&, List<Cursor_manager>&, TABLE*, SORT_INFO*))[0x5560dfecbdb4] sql/sql_window.cc:3030(Window_func_runner::exec(THD*, TABLE*, SORT_INFO*))[0x5560dfecc570] sql/sql_window.cc:3058(Window_funcs_sort::exec(JOIN*, bool))[0x5560dfecc7be] sql/sql_window.cc:3185(Window_funcs_computation::exec(JOIN*, bool))[0x5560dfecd5c6] sql/sql_select.cc:29697(AGGR_OP::end_send())[0x5560dfa9483a] sql/sql_select.cc:20621(sub_select_postjoin_aggr(JOIN*, st_join_table*, bool))[0x5560dfa50e5f] sql/sql_select.cc:20867(sub_select(JOIN*, st_join_table*, bool))[0x5560dfa5195a] sql/sql_select.cc:20445(do_select(JOIN*, Procedure*))[0x5560dfa5005a] sql/sql_select.cc:4625(JOIN::exec_inner())[0x5560df9dda9c] sql/sql_select.cc:4408(JOIN::exec())[0x5560df9db0cc] sql/sql_select.cc:4848(mysql_select(THD*, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x5560df9df2a8] sql/sql_select.cc:442(handle_select(THD*, LEX*, select_result*, unsigned long))[0x5560df9afb1e] sql/sql_parse.cc:6475(execute_sqlcom_select(THD*, TABLE_LIST*))[0x5560df91b886] sql/sql_parse.cc:3978(mysql_execute_command(THD*))[0x5560df908ffd] sql/sql_parse.cc:8013(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x5560df924dc5] sql/sql_parse.cc:1860(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x5560df8fb187] sql/sql_parse.cc:1378(do_command(THD*))[0x5560df8f7cb2] sql/sql_connect.cc:1420(do_handle_one_connection(CONNECT*))[0x5560dfd075b5] sql/sql_connect.cc:1325(handle_one_connection)[0x5560dfd06e59] perfschema/pfs.cc:1871(pfs_spawn_thread)[0x5560e09a347e] nptl/pthread_create.c:478(start_thread)[0x7f7a19535609] Query (0x62b0000a1290): SELECT SQRT ( 77 ) NOT REGEXP MOD ( TRIM( LEADING FROM 199006839349504362 < 118 ) - COUNT( * ) OVER ( PARTITION BY c8 , c8 , c8 , c15 , c15 , c15 , c28 , BIT_AND( CASE 41 WHEN -55 THEN 44 ELSE -127 END IS NOT NULL ) OVER ( PARTITION BY - GROUP_CONCAT( CHAR_LENGTH ( 5587684486210155208 ) , 'FUMp}o,E1_p?5t>(S3-H84\'^(8,\\\\cW7' , 'c4d#7YXD2_<=:/vepn?}m]wj <hcB?2KYV=,SO7kyxTj&k=(RzB&NY*hN|K|' ORDER BY COS ( t0 . c15 ) - RAND ( t0 . c8 ) = t0 . c15 SEPARATOR 'HG|h(L_qP J{!TG>Z8K{WNKl:^F=0^x%8*yNsc&^Cg5dS`z`%O^VQ' ) XOR t0 . c28 = REVERSE ( ( NOT EXPORT_SET ( 4 , '=YzuLW>U75b*F3/%F$$2@Zu' , 'K*U&mp|V8_,8hqX8+j' , 'kXB+/tV' ) SOUNDS LIKE TRUNCATE ( 93 , 11 ) = 10 ) & - BIT_LENGTH ( -13 ) & NULLIF ( 90 , -105 ) IN ( 17 , 108 , 4513583902236675204 ) ) ROWS BETWEEN UNBOUNDED PRECEDING AND UNBOUNDED FOLLOWING ) * MIN( 56 ) ORDER BY t0 . c15 NOT REGEXP ROUND ( 123 , -98 ) DESC ) , 110 ) = ALL ( SELECT c15 AS c20 FROM t0 ) AS c56 FROM t0 GROUP BY c8 , c15 , c28

Alice Sherepa made changes - 2023-11-07 17:15

Field	Original Value	New Value
Component/s		Optimizer - Window functions [ 13502 ]

Alice Sherepa made changes - 2023-11-07 17:15

Affects Version/s		10.4 [ 22408 ]
Affects Version/s		10.5 [ 23123 ]
Affects Version/s		10.6 [ 24028 ]
Affects Version/s		10.9 [ 26905 ]
Affects Version/s		10.10 [ 27530 ]
Affects Version/s		10.11 [ 27614 ]
Affects Version/s		11.0 [ 28320 ]
Affects Version/s		11.1 [ 28549 ]
Affects Version/s		11.2 [ 28603 ]

Alice Sherepa made changes - 2023-12-04 14:54

Link

This issue relates to MDEV-32712 [ MDEV-32712 ]

Alice Sherepa made changes - 2023-12-04 14:59

Fix Version/s		10.4 [ 22408 ]
Fix Version/s		10.5 [ 23123 ]
Fix Version/s		10.6 [ 24028 ]
Fix Version/s		10.11 [ 27614 ]
Fix Version/s		11.0 [ 28320 ]
Fix Version/s		11.1 [ 28549 ]
Fix Version/s		11.2 [ 28603 ]
Fix Version/s		11.3 [ 28565 ]

Alice Sherepa made changes - 2023-12-04 15:03

Assignee

Sergei Petrunia [ psergey ]

Alice Sherepa made changes - 2023-12-04 15:04

Status

Open [ 1 ]

Confirmed [ 10101 ]

Julien Fritsch made changes - 2024-05-03 14:31

Fix Version/s	11.0 [ 28320 ]
Fix Version/s	11.3 [ 28565 ]

Julien Fritsch made changes - 2024-09-10 14:59

Fix Version/s

10.4 [ 22408 ]

Julien Fritsch made changes - 2024-09-10 15:26

Fix Version/s

11.1 [ 28549 ]

Julien Fritsch made changes - 2024-11-22 17:12

Fix Version/s

11.2(EOL) [ 28603 ]

Alice Sherepa made changes - 2024-12-27 08:52

Fix Version/s		11.4 [ 29301 ]
Fix Version/s		11.7 [ 29815 ]

Alice Sherepa made changes - 2024-12-27 08:52

Affects Version/s

11.7 [ 29815 ]

Julien Fritsch made changes - 2025-02-14 11:39

Fix Version/s

11.7(EOL) [ 29815 ]

People

Assignee:: Sergei Petrunia

Reporter:: Xin Wen

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 2023-11-07 03:07

Updated:: 2025-02-14 11:39

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.

MariaDB Server

Details

Description

Attachments

Issue Links

Activity

People

Dates

Git Integration