-
Bug
-
-
Major
-
Resolution:
Unresolved
-
11.3.2, 11.4.1, 10.5, 10.6, 10.11, 11.4, 11.8
-
-
None
-
-
Ubuntu 20.04 x86-64, docker image mariadb:11.4.1-rc
PoC:
SELECT (WITH x(x) AS (SELECT 1) SELECT * FROM x WHERE (NEXTVAL(x)));
|
GDB backtrace:
Thread 13 "mariadbd" received signal SIGSEGV, Segmentation fault.
|
[Switching to LWP 112029]
|
0x00005595717f49e3 in Item_func_nextval::val_int() ()
|
(gdb) bt
|
#0 0x00005595717f49e3 in Item_func_nextval::val_int() ()
|
#1 0x0000559571579880 in JOIN::exec_inner() ()
|
#2 0x000055957157a43f in JOIN::exec() ()
|
#3 0x00005595715783cc in mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) ()
|
#4 0x00005595714af0ab in ?? ()
|
#5 0x00005595714af520 in ?? ()
|
#6 0x00005595714aece5 in mysql_handle_single_derived(LEX*, TABLE_LIST*, unsigned int) ()
|
#7 0x00005595715773f7 in JOIN::optimize_inner() ()
|
#8 0x000055957157827a in JOIN::optimize() ()
|
#9 0x00005595714cff95 in st_select_lex::optimize_unflattened_subqueries(bool) ()
|
#10 0x00005595716764b5 in JOIN::optimize_constant_subqueries() ()
|
#11 0x0000559571576dc3 in JOIN::optimize_inner() ()
|
#12 0x000055957157827a in JOIN::optimize() ()
|
#13 0x0000559571578371 in mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) ()
|
#14 0x0000559571578bc4 in handle_select(THD*, LEX*, select_result*, unsigned long long) ()
|
#15 0x00005595714eb285 in ?? ()
|
#16 0x00005595714fa4af in mysql_execute_command(THD*, bool) ()
|
#17 0x00005595714fba17 in mysql_parse(THD*, char*, unsigned int, Parser_state*) ()
|
#18 0x00005595714fe20d in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) ()
|
#19 0x0000559571500118 in do_command(THD*, bool) ()
|
#20 0x000055957162cf6f in do_handle_one_connection(CONNECT*, bool) ()
|
#21 0x000055957162d2bd in handle_one_connection ()
|
#22 0x00005595719afaf6 in ?? ()
|
#23 0x00007f35b6856ac3 in ?? () from target:/lib/x86_64-linux-gnu/libc.so.6
|
#24 0x00007f35b68e7a04 in clone () from target:/lib/x86_64-linux-gnu/libc.so.6
|
- relates to
-
MDEV-36362
MariaDB crashes when parsing fuzzer generated PARTITION
-
-
Confirmed
Transition |
Time In Source Status |
Execution Times |
Open |
|
Confirmed |
|
321d 4h 9m
|
1
|
{"report":{"fcp":1466.6999998092651,"ttfb":242.19999980926514,"pageVisibility":"visible","entityId":128893,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"8c7b65a1-ba05-4e23-924d-c79fc2c11a9f","navigationType":0,"readyForUser":1564.1000003814697,"redirectCount":0,"resourceLoadedEnd":1594.3000001907349,"resourceLoadedStart":247.30000019073486,"resourceTiming":[{"duration":701.1000003814697,"initiatorType":"link","name":"https://jira.mariadb.org/s/2c21342762a6a02add1c328bed317ffd-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/css/_super/batch.css","startTime":247.30000019073486,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":247.30000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":948.4000005722046,"responseStart":0,"secureConnectionStart":0},{"duration":702.1999998092651,"initiatorType":"link","name":"https://jira.mariadb.org/s/7ebd35e77e471bc30ff0eba799ebc151-CDN/lu2cib/820016/12ta74/2bf333562ca6724060a9d5f1535471f6/_/download/contextbatch/css/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":247.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":247.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":949.6999998092651,"responseStart":0,"secureConnectionStart":0},{"duration":754.6000003814697,"initiatorType":"script","name":"https://jira.mariadb.org/s/0917945aaa57108d00c5076fea35e069-CDN/lu2cib/820016/12ta74/0a8bac35585be7fc6c9cc5a0464cd4cf/_/download/contextbatch/js/_super/batch.js?locale=en","startTime":247.69999980926514,"connectEnd":247.69999980926514,"connectStart":247.69999980926514,"domainLookupEnd":247.69999980926514,"domainLookupStart":247.69999980926514,"fetchStart":247.69999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":247.69999980926514,"responseEnd":1002.3000001907349,"responseStart":1002.3000001907349,"secureConnectionStart":247.69999980926514},{"duration":809.8999996185303,"initiatorType":"script","name":"https://jira.mariadb.org/s/2d8175ec2fa4c816e8023260bd8c1786-CDN/lu2cib/820016/12ta74/2bf333562ca6724060a9d5f1535471f6/_/download/contextbatch/js/jira.browse.project,project.issue.navigator,jira.view.issue,jira.general,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":247.9000005722046,"connectEnd":247.9000005722046,"connectStart":247.9000005722046,"domainLookupEnd":247.9000005722046,"domainLookupStart":247.9000005722046,"fetchStart":247.9000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":247.9000005722046,"responseEnd":1057.8000001907349,"responseStart":1057.8000001907349,"secureConnectionStart":247.9000005722046},{"duration":813.6999998092651,"initiatorType":"script","name":"https://jira.mariadb.org/s/a9324d6758d385eb45c462685ad88f1d-CDN/lu2cib/820016/12ta74/c92c0caa9a024ae85b0ebdbed7fb4bd7/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en","startTime":248.10000038146973,"connectEnd":248.10000038146973,"connectStart":248.10000038146973,"domainLookupEnd":248.10000038146973,"domainLookupStart":248.10000038146973,"fetchStart":248.10000038146973,"redirectEnd":0,"redirectStart":0,"requestStart":248.10000038146973,"responseEnd":1061.8000001907349,"responseStart":1061.8000001907349,"secureConnectionStart":248.10000038146973},{"duration":814,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":248.19999980926514,"connectEnd":248.19999980926514,"connectStart":248.19999980926514,"domainLookupEnd":248.19999980926514,"domainLookupStart":248.19999980926514,"fetchStart":248.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":248.19999980926514,"responseEnd":1062.1999998092651,"responseStart":1062.1999998092651,"secureConnectionStart":248.19999980926514},{"duration":814.1999998092651,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":248.4000005722046,"connectEnd":248.4000005722046,"connectStart":248.4000005722046,"domainLookupEnd":248.4000005722046,"domainLookupStart":248.4000005722046,"fetchStart":248.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":248.4000005722046,"responseEnd":1062.6000003814697,"responseStart":1062.5,"secureConnectionStart":248.4000005722046},{"duration":898.3000001907349,"initiatorType":"link","name":"https://jira.mariadb.org/s/b04b06a02d1959df322d9cded3aeecc1-CDN/lu2cib/820016/12ta74/a2ff6aa845ffc9a1d22fe23d9ee791fc/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":248.69999980926514,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":248.69999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1147,"responseStart":0,"secureConnectionStart":0},{"duration":814.3000001907349,"initiatorType":"script","name":"https://jira.mariadb.org/rest/api/1.0/shortcuts/820016/47140b6e0a9bc2e4913da06536125810/shortcuts.js?context=issuenavigation&context=issueaction","startTime":248.80000019073486,"connectEnd":248.80000019073486,"connectStart":248.80000019073486,"domainLookupEnd":248.80000019073486,"domainLookupStart":248.80000019073486,"fetchStart":248.80000019073486,"redirectEnd":0,"redirectStart":0,"requestStart":248.80000019073486,"responseEnd":1063.1000003814697,"responseStart":1063.1000003814697,"secureConnectionStart":248.80000019073486},{"duration":898.1999998092651,"initiatorType":"link","name":"https://jira.mariadb.org/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.css?jira.create.linked.issue=true","startTime":249.10000038146973,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":249.10000038146973,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1147.3000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":814.4000005722046,"initiatorType":"script","name":"https://jira.mariadb.org/s/5d5e8fe91fbc506585e83ea3b62ccc4b-CDN/lu2cib/820016/12ta74/d176f0986478cc64f24226b3d20c140d/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-project.issue.navigator,-jira.view.issue/batch.js?jira.create.linked.issue=true&locale=en","startTime":249.19999980926514,"connectEnd":249.19999980926514,"connectStart":249.19999980926514,"domainLookupEnd":249.19999980926514,"domainLookupStart":249.19999980926514,"fetchStart":249.19999980926514,"redirectEnd":0,"redirectStart":0,"requestStart":249.19999980926514,"responseEnd":1063.6000003814697,"responseStart":1063.6000003814697,"secureConnectionStart":249.19999980926514},{"duration":1124.3999996185303,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":256.1000003814697,"connectEnd":256.1000003814697,"connectStart":256.1000003814697,"domainLookupEnd":256.1000003814697,"domainLookupStart":256.1000003814697,"fetchStart":256.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":256.1000003814697,"responseEnd":1380.5,"responseStart":1380.5,"secureConnectionStart":256.1000003814697},{"duration":1314.8000001907349,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":259.5,"connectEnd":259.5,"connectStart":259.5,"domainLookupEnd":259.5,"domainLookupStart":259.5,"fetchStart":259.5,"redirectEnd":0,"redirectStart":0,"requestStart":259.5,"responseEnd":1574.3000001907349,"responseStart":1574.3000001907349,"secureConnectionStart":259.5},{"duration":222.20000076293945,"initiatorType":"xmlhttprequest","name":"https://jira.mariadb.org/rest/webResources/1.0/resources","startTime":1158.6999998092651,"connectEnd":1158.6999998092651,"connectStart":1158.6999998092651,"domainLookupEnd":1158.6999998092651,"domainLookupStart":1158.6999998092651,"fetchStart":1158.6999998092651,"redirectEnd":0,"redirectStart":0,"requestStart":1158.6999998092651,"responseEnd":1380.9000005722046,"responseStart":1380.9000005722046,"secureConnectionStart":1158.6999998092651},{"duration":174.10000038146973,"initiatorType":"link","name":"https://jira.mariadb.org/s/d5715adaadd168a9002b108b2b039b50-CDN/lu2cib/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/css/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":1420.1999998092651,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1420.1999998092651,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1594.3000001907349,"responseStart":0,"secureConnectionStart":0},{"duration":157.39999961853027,"initiatorType":"script","name":"https://jira.mariadb.org/s/d41d8cd98f00b204e9800998ecf8427e-CDN/lu2cib/820016/12ta74/e65b778d185daf5aee24936755b43da6/_/download/contextbatch/js/browser-metrics-plugin.contrib,-_super,-project.issue.navigator,-jira.view.issue,-atl.general/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&slack-enabled=true","startTime":1421.1000003814697,"connectEnd":1421.1000003814697,"connectStart":1421.1000003814697,"domainLookupEnd":1421.1000003814697,"domainLookupStart":1421.1000003814697,"fetchStart":1421.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":1421.1000003814697,"responseEnd":1578.5,"responseStart":1578.5,"secureConnectionStart":1421.1000003814697},{"duration":164.10000038146973,"initiatorType":"script","name":"https://jira.mariadb.org/s/097ae97cb8fbec7d6ea4bbb1f26955b9-CDN/lu2cib/820016/12ta74/be4b45e9cec53099498fa61c8b7acba4/_/download/contextbatch/js/jira.project.sidebar,-_super,-project.issue.navigator,-jira.general,-jira.browse.project,-jira.view.issue,-jira.global,-atl.general,-com.atlassian.jira.projects.sidebar.init/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en&slack-enabled=true","startTime":1421.5,"connectEnd":1421.5,"connectStart":1421.5,"domainLookupEnd":1421.5,"domainLookupStart":1421.5,"fetchStart":1421.5,"redirectEnd":0,"redirectStart":0,"requestStart":1421.5,"responseEnd":1585.6000003814697,"responseStart":1585.6000003814697,"secureConnectionStart":1421.5}],"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":78,"responseStart":242,"responseEnd":259,"domLoading":246,"domInteractive":1661,"domContentLoadedEventStart":1661,"domContentLoadedEventEnd":1707,"domComplete":2003,"loadEventStart":2003,"loadEventEnd":2004,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1647.6999998092651},{"name":"bigPipe.sidebar-id.end","time":1649.3000001907349},{"name":"bigPipe.activity-panel-pipe-id.start","time":1649.5},{"name":"bigPipe.activity-panel-pipe-id.end","time":1650.4000005722046},{"name":"activityTabFullyLoaded","time":1722.1000003814697}],"measures":[],"correlationId":"7ef5a414086cf5","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":103,"dbReadsTimeInMs":14,"dbConnsTimeInMs":22,"applicationHash":"9d11dbea5f4be3d4cc21f03a88dd11d8c8687422","experiments":[]}}