[MDEV-34226] On startup: UBSAN: applying zero offset to null pointer in my_copy_fix_mb from strings/ctype-mb.c and other locations - Jira

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Critical
Resolution: Fixed
Affects Version/s: 10.5
Fix Version/s: 10.5.26, 10.6.19, 10.11.9, 11.1.6, 11.2.5, 11.4.3, 11.5.2
Component/s: Character Sets
Labels:
- UBSAN
- affects-tests
- clang
- startup

Description

Now that ~~MDEV-34187~~ is fixed (with thanks to bar!), we see this bug on startup with clang compiled builds:

10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN)
2024-05-24 12:19:35 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd: ready for connections.
Version: '10.5.26-MariaDB-debug' socket: '/test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/socket.sock' port: 11915 MariaDB Server
/test/10.5_dbg_san/strings/ctype-mb.c:406:66: runtime error: applying zero offset to null pointer
#0 0x55fff2ccf6b1 in my_copy_fix_mb /test/10.5_dbg_san/strings/ctype-mb.c:406:66
#1 0x55ffed348a11 in charset_info_st::copy_fix(char, unsigned long, char const, unsigned long, unsigned long, MY_STRCOPY_STATUS*) const /test/10.5_dbg_san/include/m_ctype.h:839:12
#2 0x55ffed34875e in String_copier::well_formed_copy(charset_info_st const, char, unsigned long, charset_info_st const, char const, unsigned long, unsigned long) /test/10.5_dbg_san/sql/sql_string.cc:1108:26
#3 0x55ffec5f96f7 in THD::copy_fix(charset_info_st const, st_mysql_lex_string, charset_info_st const, char const, unsigned long, String_copier*) /test/10.5_dbg_san/sql/sql_class.cc:2488:24
#4 0x55ffec5fa555 in THD::copy_with_error(charset_info_st const, st_mysql_lex_string, charset_info_st const, char const, unsigned long) /test/10.5_dbg_san/sql/sql_class.cc:2526:10
#5 0x55ffec41f109 in parse_client_handshake_packet(MPVIO_EXT, unsigned char*, unsigned long) /test/10.5_dbg_san/sql/sql_acl.cc:13802:7
#6 0x55ffec391d7b in server_mpvio_read_packet(st_plugin_vio, unsigned char*) /test/10.5_dbg_san/sql/sql_acl.cc:14047:14
#7 0x55ffec43717d in native_password_authenticate(st_plugin_vio, st_mysql_server_auth_info) /test/10.5_dbg_san/sql/sql_acl.cc:14748:17
#8 0x55ffec39b118 in do_auth_once(THD, st_mysql_const_lex_string const, MPVIO_EXT*) /test/10.5_dbg_san/sql/sql_acl.cc:14234:12
#9 0x55ffec38572f in acl_authenticate(THD*, unsigned int) /test/10.5_dbg_san/sql/sql_acl.cc:14377:10
#10 0x55ffeda04951 in check_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1083:12
#11 0x55ffed9ff9ff in login_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1149:10
#12 0x55ffeda10659 in thd_prepare_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1333:7
#13 0x55ffeda0eaa5 in do_handle_one_connection(CONNECT*, bool) /test/10.5_dbg_san/sql/sql_connect.cc:1407:9
#14 0x55ffeda0ce0d in handle_one_connection /test/10.5_dbg_san/sql/sql_connect.cc:1319:5
#15 0x14bdfba97ad9 in start_thread nptl/pthread_create.c:444:8
#16 0x14bdfbb2847b in clone3 misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype-mb.c:406:66 in

This blocks UBSAN testing using Clang-compiled builds. Likely present in other versions also.

$ cat BUILD_CMD_CMAKE

cmake . -DCMAKE_C_COMPILER=/usr/bin/clang -DCMAKE_CXX_COMPILER=/usr/bin/clang++ -DWITH_SSL=bundled -DBUILD_CONFIG=mysql_release -DWITH_TOKUDB=0 -DWITH_JEMALLOC=no -DFEATURE_SET=community -DDEBUG_EXTNAME=OFF -DWITH_EMBEDDED_SERVER=0 -DENABLE_DOWNLOADS=1 -DDOWNLOAD_BOOST=1 -DWITH_BOOST=/tmp/boost_011979 -DENABLED_LOCAL_INFILE=1 -DENABLE_DTRACE=0 -DWITH_SAFEMALLOC=OFF -DPLUGIN_PERFSCHEMA=NO -DWITH_DBUG_TRACE=OFF -DWITH_ZLIB=bundled -DWITH_ROCKSDB=1 -DWITH_PAM=ON -DWITH_MARIABACKUP=0 -DFORCE_INSOURCE_BUILD=1 -DWITH_ASAN=ON -DWITH_ASAN_SCOPE=ON -DWITH_UBSAN=ON -DWSREP_LIB_WITH_ASAN=ON -DCMAKE_CXX_FLAGS=-fsanitize-coverage=trace-pc-guard -DMYSQL_MAINTAINER_MODE=OFF -DWARNING_AS_ERROR='' -DCMAKE_BUILD_TYPE=Debug

export UBSAN_OPTIONS=print_stacktrace=1

Possibly caused by ~~MDEV-34187~~ or previously masked

Attachments

Issue Links

relates to

MDEV-34187 On startup: UBSAN: runtime error: applying zero offset to null pointer in skip_trailing_space and my_hash_sort_utf8mb3_general1400_nopad_as_ci

Closed

MDEV-35718 UBSAN: runtime error: applying zero offset to null pointer in my_copy_fix_mb on SHOW COLLATION

Open

SAMU-265 Failed to load

split to

MDEV-34227 On startup: UBSAN: runtime error: applying non-zero offset in JOIN::make_aggr_tables_info in sql/sql_select.cc

Closed

Activity

Ascending order - Click to sort in descending order

Roel Van de Paar added a comment - 2024-05-24 03:33 - edited

Two ways to reproduce this in MTR:

export UBSAN_OPTIONS=print_stacktrace=1

./mtr --start-and-exit

../bin/mariadb -P16000 -h127.0.0.1 -uroot    # Add '--default-character-set=latin1' or '--default-character-set=utf8mb3' to tigger ctype.c vs ctype-mb.c (credit: [~bar])

MariaDB [(none)]> shutdown;

Or:

SHUTDOWN;

In a test and run as normal (with the export UBSAN_OPTIONS first). Then check error log (for example var/log/mysqld.1.err).

When using the latter MTR-based test, we get:

10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN)
2024-05-24 13:26:04 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd: ready for connections.
Version: '10.5.26-MariaDB-debug-log' socket: '/test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/mysql-test/var/tmp/mysqld.1.sock' port: 16000 MariaDB Server
/test/10.5_dbg_san/strings/ctype.c:1292:46: runtime error: applying zero offset to null pointer
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype.c:1292:46 in
/test/10.5_dbg_san/strings/ctype.c:870:27: runtime error: applying zero offset to null pointer
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype.c:870:27 in
/test/10.5_dbg_san/sql/sql_select.cc:3886:22: runtime error: applying non-zero offset 4054449126480 to null pointer
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/sql/sql_select.cc:3886:22 in
/test/10.5_dbg_san/sql/sql_select.cc:3328:32: runtime error: applying non-zero offset 944 to null pointer
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/sql/sql_select.cc:3328:32 in
2024-05-24 13:26:04 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd (initiated by: root[root] @ localhost []): Normal shutdown

Note there are several UBSAN errors in strings/ctype.c at various locations.

With the --start-and-exit version of the testcase, we get the same location as the original CLI based testcase and and additional one:

10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN)
2024-05-24 13:30:46 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd: ready for connections.
Version: '10.5.26-MariaDB-debug-log' socket: '/test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/mysql-test/var/tmp/mysqld.1.sock' port: 16000 MariaDB Server
/test/10.5_dbg_san/strings/ctype-mb.c:406:66: runtime error: applying zero offset to null pointer
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype-mb.c:406:66 in
/test/10.5_dbg_san/sql/sql_select.cc:3886:22: runtime error: applying non-zero offset 4054449126480 to null pointer
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/sql/sql_select.cc:3886:22 in
2024-05-24 13:31:04 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd (initiated by: root[root] @ localhost [127.0.0.1]): Normal shutdown

Roel Van de Paar added a comment - 2024-05-24 03:33 - edited Two ways to reproduce this in MTR: export UBSAN_OPTIONS=print_stacktrace=1 . /mtr --start-and- exit .. /bin/mariadb -P16000 -h127.0.0.1 -uroot # Add '--default-character-set=latin1' or '--default-character-set=utf8mb3' to tigger ctype.c vs ctype-mb.c (credit: [~bar]) MariaDB [(none)]> shutdown ; Or: SHUTDOWN; In a test and run as normal (with the export UBSAN_OPTIONS first). Then check error log (for example var/log/mysqld.1.err ). When using the latter MTR-based test, we get: 10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN) 2024-05-24 13:26:04 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd: ready for connections. Version: '10.5.26-MariaDB-debug-log' socket: '/test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/mysql-test/var/tmp/mysqld.1.sock' port: 16000 MariaDB Server /test/10.5_dbg_san/strings/ctype.c:1292:46: runtime error: applying zero offset to null pointer SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype.c:1292:46 in /test/10.5_dbg_san/strings/ctype.c:870:27: runtime error: applying zero offset to null pointer SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype.c:870:27 in /test/10.5_dbg_san/sql/sql_select.cc:3886:22: runtime error: applying non-zero offset 4054449126480 to null pointer SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/sql/sql_select.cc:3886:22 in /test/10.5_dbg_san/sql/sql_select.cc:3328:32: runtime error: applying non-zero offset 944 to null pointer SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/sql/sql_select.cc:3328:32 in 2024-05-24 13:26:04 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd (initiated by: root[root] @ localhost []): Normal shutdown Note there are several UBSAN errors in strings/ctype.c at various locations. With the --start-and-exit version of the testcase, we get the same location as the original CLI based testcase and and additional one: 10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN) 2024-05-24 13:30:46 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd: ready for connections. Version: '10.5.26-MariaDB-debug-log' socket: '/test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/mysql-test/var/tmp/mysqld.1.sock' port: 16000 MariaDB Server /test/10.5_dbg_san/strings/ctype-mb.c:406:66: runtime error: applying zero offset to null pointer SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype-mb.c:406:66 in /test/10.5_dbg_san/sql/sql_select.cc:3886:22: runtime error: applying non-zero offset 4054449126480 to null pointer SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/sql/sql_select.cc:3886:22 in 2024-05-24 13:31:04 0 [Note] /test/UBASAN_MD230524-mariadb-10.5.26-linux-x86_64-dbg/bin/mariadbd (initiated by: root[root] @ localhost [127.0.0.1]): Normal shutdown

Roel Van de Paar added a comment - 2024-05-24 03:35 - edited

Summary of all locations seen:

strings/ctype-mb.c:406:66

strings/ctype.c:1292:46

strings/ctype.c:870:27

sql/sql_select.cc:3886:22   # Split to MDEV-34227 (different bug)

sql/sql_select.cc:3328:32   # Split to MDEV-34227 (different bug)

Hopefully this help to see where the issue is.

Roel Van de Paar added a comment - 2024-05-24 03:35 - edited Summary of all locations seen: strings/ctype-mb.c:406:66 strings/ctype.c:1292:46 strings/ctype.c:870:27 sql/sql_select.cc:3886:22 # Split to MDEV-34227 (different bug) sql/sql_select.cc:3328:32 # Split to MDEV-34227 (different bug) Hopefully this help to see where the issue is.

Roel Van de Paar added a comment - 2024-05-24 06:00

Full stacks for strings/ctype.c:1292:46 and strings/ctype.c:870:27 as requested:

10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN)
/test/10.5_dbg_san/strings/ctype.c:1292:46: runtime error: applying zero offset to null pointer
#0 0x56127f583f06 in my_convert_fix /test/10.5_dbg_san/strings/ctype.c:1292:46
#1 0x561279ac67b0 in String_copier::well_formed_copy(charset_info_st const, char, unsigned long, charset_info_st const, char const, unsigned long, unsigned long) /test/10.5_dbg_san/sql/sql_string.cc:1111:17
#2 0x561278d776f7 in THD::copy_fix(charset_info_st const, st_mysql_lex_string, charset_info_st const, char const, unsigned long, String_copier*) /test/10.5_dbg_san/sql/sql_class.cc:2488:24
#3 0x561278d78555 in THD::copy_with_error(charset_info_st const, st_mysql_lex_string, charset_info_st const, char const, unsigned long) /test/10.5_dbg_san/sql/sql_class.cc:2526:10
#4 0x561278b9d109 in parse_client_handshake_packet(MPVIO_EXT, unsigned char*, unsigned long) /test/10.5_dbg_san/sql/sql_acl.cc:13802:7
#5 0x561278b0fd7b in server_mpvio_read_packet(st_plugin_vio, unsigned char*) /test/10.5_dbg_san/sql/sql_acl.cc:14047:14
#6 0x561278bb517d in native_password_authenticate(st_plugin_vio, st_mysql_server_auth_info) /test/10.5_dbg_san/sql/sql_acl.cc:14748:17
#7 0x561278b19118 in do_auth_once(THD, st_mysql_const_lex_string const, MPVIO_EXT*) /test/10.5_dbg_san/sql/sql_acl.cc:14234:12
#8 0x561278b0372f in acl_authenticate(THD*, unsigned int) /test/10.5_dbg_san/sql/sql_acl.cc:14377:10
#9 0x56127a182951 in check_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1083:12
#10 0x56127a17d9ff in login_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1149:10
#11 0x56127a18e659 in thd_prepare_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1333:7
#12 0x56127a18caa5 in do_handle_one_connection(CONNECT*, bool) /test/10.5_dbg_san/sql/sql_connect.cc:1407:9
#13 0x56127a18ae0d in handle_one_connection /test/10.5_dbg_san/sql/sql_connect.cc:1319:5
#14 0x14bc5c097ad9 in start_thread nptl/pthread_create.c:444:8
#15 0x14bc5c12847b in clone3 misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN)
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype.c:1292:46 in
/test/10.5_dbg_san/strings/ctype.c:870:27: runtime error: applying zero offset to null pointer
#0 0x56127f57fff1 in my_string_metadata_get_mb /test/10.5_dbg_san/strings/ctype.c:870:27
#1 0x56127f57fe68 in my_string_metadata_get /test/10.5_dbg_san/strings/ctype.c:916:5
#2 0x5612787536d7 in Item_basic_value::Metadata::Metadata(String const*) /test/10.5_dbg_san/sql/item.h:2831:7
#3 0x56127875228d in Item_string::Item_string(THD, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, charset_info_st const, Derivation) /test/10.5_dbg_san/sql/item.h:4529:24
#4 0x561278751b93 in Item_partition_func_safe_string::Item_partition_func_safe_string(THD, st_mysql_const_lex_string const&, unsigned int, charset_info_st const) /test/10.5_dbg_san/sql/item.h:4695:5
#5 0x5612787397f5 in Item_empty_string::Item_empty_string(THD, char const, unsigned int, charset_info_st const*) /test/10.5_dbg_san/sql/item.h:4721:5
#6 0x5612787fe0ce in show_master_info_get_fields(THD, List<Item>, bool, unsigned long) /test/10.5_dbg_san/sql/slave.cc:2902:25
#7 0x5612787f8c17 in show_master_info(THD, Master_info, bool) /test/10.5_dbg_san/sql/slave.cc:2873:3
#8 0x5612787f71bd in Sql_cmd_show_slave_status::execute(THD*) /test/10.5_dbg_san/sql/slave.cc:1530:12
#9 0x5612792836ee in mysql_execute_command(THD*) /test/10.5_dbg_san/sql/sql_parse.cc:6167:26
#10 0x5612791d4313 in mysql_parse(THD, char, unsigned int, Parser_state*, bool, bool) /test/10.5_dbg_san/sql/sql_parse.cc:8204:18
#11 0x5612791b3316 in dispatch_command(enum_server_command, THD, char, unsigned int, bool, bool) /test/10.5_dbg_san/sql/sql_parse.cc:1892:7
#12 0x5612791dc896 in do_command(THD*) /test/10.5_dbg_san/sql/sql_parse.cc:1376:17
#13 0x56127a18cbf5 in do_handle_one_connection(CONNECT*, bool) /test/10.5_dbg_san/sql/sql_connect.cc:1417:11
#14 0x56127a18ae0d in handle_one_connection /test/10.5_dbg_san/sql/sql_connect.cc:1319:5
#15 0x14bc5c097ad9 in start_thread nptl/pthread_create.c:444:8
#16 0x14bc5c12847b in clone3 misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

Roel Van de Paar added a comment - 2024-05-24 06:00 Full stacks for strings/ctype.c:1292:46 and strings/ctype.c:870:27 as requested: 10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN) /test/10.5_dbg_san/strings/ctype.c:1292:46: runtime error: applying zero offset to null pointer #0 0x56127f583f06 in my_convert_fix /test/10.5_dbg_san/strings/ctype.c:1292:46 #1 0x561279ac67b0 in String_copier::well_formed_copy(charset_info_st const*, char*, unsigned long, charset_info_st const*, char const*, unsigned long, unsigned long) /test/10.5_dbg_san/sql/sql_string.cc:1111:17 #2 0x561278d776f7 in THD::copy_fix(charset_info_st const*, st_mysql_lex_string*, charset_info_st const*, char const*, unsigned long, String_copier*) /test/10.5_dbg_san/sql/sql_class.cc:2488:24 #3 0x561278d78555 in THD::copy_with_error(charset_info_st const*, st_mysql_lex_string*, charset_info_st const*, char const*, unsigned long) /test/10.5_dbg_san/sql/sql_class.cc:2526:10 #4 0x561278b9d109 in parse_client_handshake_packet(MPVIO_EXT*, unsigned char**, unsigned long) /test/10.5_dbg_san/sql/sql_acl.cc:13802:7 #5 0x561278b0fd7b in server_mpvio_read_packet(st_plugin_vio*, unsigned char**) /test/10.5_dbg_san/sql/sql_acl.cc:14047:14 #6 0x561278bb517d in native_password_authenticate(st_plugin_vio*, st_mysql_server_auth_info*) /test/10.5_dbg_san/sql/sql_acl.cc:14748:17 #7 0x561278b19118 in do_auth_once(THD*, st_mysql_const_lex_string const*, MPVIO_EXT*) /test/10.5_dbg_san/sql/sql_acl.cc:14234:12 #8 0x561278b0372f in acl_authenticate(THD*, unsigned int) /test/10.5_dbg_san/sql/sql_acl.cc:14377:10 #9 0x56127a182951 in check_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1083:12 #10 0x56127a17d9ff in login_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1149:10 #11 0x56127a18e659 in thd_prepare_connection(THD*) /test/10.5_dbg_san/sql/sql_connect.cc:1333:7 #12 0x56127a18caa5 in do_handle_one_connection(CONNECT*, bool) /test/10.5_dbg_san/sql/sql_connect.cc:1407:9 #13 0x56127a18ae0d in handle_one_connection /test/10.5_dbg_san/sql/sql_connect.cc:1319:5 #14 0x14bc5c097ad9 in start_thread nptl/pthread_create.c:444:8 #15 0x14bc5c12847b in clone3 misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:78 10.5.26 736449d30ffb2ec71bd700ac84eb38ba30bb662c (Debug, UBASAN) SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /test/10.5_dbg_san/strings/ctype.c:1292:46 in /test/10.5_dbg_san/strings/ctype.c:870:27: runtime error: applying zero offset to null pointer #0 0x56127f57fff1 in my_string_metadata_get_mb /test/10.5_dbg_san/strings/ctype.c:870:27 #1 0x56127f57fe68 in my_string_metadata_get /test/10.5_dbg_san/strings/ctype.c:916:5 #2 0x5612787536d7 in Item_basic_value::Metadata::Metadata(String const*) /test/10.5_dbg_san/sql/item.h:2831:7 #3 0x56127875228d in Item_string::Item_string(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, charset_info_st const*, Derivation) /test/10.5_dbg_san/sql/item.h:4529:24 #4 0x561278751b93 in Item_partition_func_safe_string::Item_partition_func_safe_string(THD*, st_mysql_const_lex_string const&, unsigned int, charset_info_st const*) /test/10.5_dbg_san/sql/item.h:4695:5 #5 0x5612787397f5 in Item_empty_string::Item_empty_string(THD*, char const*, unsigned int, charset_info_st const*) /test/10.5_dbg_san/sql/item.h:4721:5 #6 0x5612787fe0ce in show_master_info_get_fields(THD*, List<Item>*, bool, unsigned long) /test/10.5_dbg_san/sql/slave.cc:2902:25 #7 0x5612787f8c17 in show_master_info(THD*, Master_info*, bool) /test/10.5_dbg_san/sql/slave.cc:2873:3 #8 0x5612787f71bd in Sql_cmd_show_slave_status::execute(THD*) /test/10.5_dbg_san/sql/slave.cc:1530:12 #9 0x5612792836ee in mysql_execute_command(THD*) /test/10.5_dbg_san/sql/sql_parse.cc:6167:26 #10 0x5612791d4313 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /test/10.5_dbg_san/sql/sql_parse.cc:8204:18 #11 0x5612791b3316 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /test/10.5_dbg_san/sql/sql_parse.cc:1892:7 #12 0x5612791dc896 in do_command(THD*) /test/10.5_dbg_san/sql/sql_parse.cc:1376:17 #13 0x56127a18cbf5 in do_handle_one_connection(CONNECT*, bool) /test/10.5_dbg_san/sql/sql_connect.cc:1417:11 #14 0x56127a18ae0d in handle_one_connection /test/10.5_dbg_san/sql/sql_connect.cc:1319:5 #15 0x14bc5c097ad9 in start_thread nptl/pthread_create.c:444:8 #16 0x14bc5c12847b in clone3 misc/../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

Roel Van de Paar added a comment - 2024-05-27 20:58

Thank you once again bar for this fix as well. These fixes are very appreciated as they assist UBSAN testing under clang, which is showing additional issues over GCC based UBSAN testing alone.

Roel Van de Paar added a comment - 2024-05-27 20:58 Thank you once again bar for this fix as well. These fixes are very appreciated as they assist UBSAN testing under clang, which is showing additional issues over GCC based UBSAN testing alone.

MariaDB Server

On startup: UBSAN: applying zero offset to null pointer in my_copy_fix_mb from strings/ctype-mb.c and other locations

Details

Description

Attachments

Issue Links

Activity

People

Dates

Git Integration