SIGSEGV in spider_tree_first and spider_db_rollback on SELECT

INSTALL PLUGIN Spider SONAME 'ha_spider.so';

CREATE TABLE t (c CHAR(1) KEY,c2 CHAR(1) BINARY CHARACTER SET 'utf8' COLLATE 'utf8_bin',c3 CHAR(1) BINARY,c4 VARCHAR(1) CHARACTER SET 'utf8' COLLATE 'utf8_bin') ENGINE=Spider ROW_FORMAT=COMPACT;

SET SESSION pseudo_slave_mode=ON;

CREATE TABLE t (pk INT,KEY(pk)) ENGINE=Spider;

XA START 'xa1';

INSERT INTO t (c) VALUES (1);

XA END 'xa1';

XA PREPARE 'xa1';

CREATE TABLE t3 (id INT) ENGINE=Spider PARTITION BY RANGE (id) (PARTITION p0 VALUES LESS THAN (0),PARTITION p VALUES LESS THAN (1),PARTITION p2 VALUES LESS THAN (200));

ALTER TABLE t3 REPAIR PARTITION p;

XA COMMIT 'xa1';

SELECT * FROM t;

Core was generated by `/test/MD090924-mariadb-11.7.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --max'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  spider_tree_first (top=0x14e72c5e71e8)at /test/server_dbg/storage/spider/spd_conn.cc:1605

[Current thread is 1 (LWP 2087095)]

(gdb) bt

#0  spider_tree_first (top=0x14e72c5e71e8)at /test/server_dbg/storage/spider/spd_conn.cc:1605

#1  0x000014e77f121b50 in spider_rollback (hton=<optimized out>, thd=0x14e72c000d58, all=<optimized out>)at /test/server_dbg/storage/spider/spd_trx.cc:3188

#2  0x000055c17d3b93d3 in ha_rollback_trans (thd=thd@entry=0x14e72c000d58, all=all@entry=false) at /test/server_dbg/sql/handler.cc:2336

#3  0x000055c17d22ffe0 in trans_rollback_stmt (thd=thd@entry=0x14e72c000d58)at /test/server_dbg/sql/transaction.cc:566

#4  0x000055c17d09bdbc in mysql_execute_command (thd=thd@entry=0x14e72c000d58, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false)at /test/server_dbg/sql/sql_parse.cc:5927

#5  0x000055c17d09c78c in mysql_parse (thd=thd@entry=0x14e72c000d58, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x14e7813b3260)at /test/server_dbg/sql/sql_parse.cc:7876

#6  0x000055c17d09ec23 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x14e72c000d58, packet=packet@entry=0x14e72c00b329 "SELECT * FROM t", packet_length=packet_length@entry=15, blocking=blocking@entry=true)at /test/server_dbg/sql/sql_class.h:256

#7  0x000055c17d0a0f71 in do_command (thd=0x14e72c000d58, blocking=blocking@entry=true) at /test/server_dbg/sql/sql_parse.cc:1405

#8  0x000055c17d219218 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55c1800aeb68, put_in_cache=put_in_cache@entry=true)at /test/server_dbg/sql/sql_connect.cc:1448

#9  0x000055c17d219524 in handle_one_connection (arg=arg@entry=0x55c1800aeb68)at /test/server_dbg/sql/sql_connect.cc:1350

#10 0x000055c17d66df79 in pfs_spawn_thread (arg=0x55c17fffe7b8)at /test/server_dbg/storage/perfschema/pfs.cc:2198

#11 0x000014e788c9ca94 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#12 0x000014e788d29c3c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

Core was generated by `/test/MD090924-mariadb-11.4.4-linux-x86_64-opt/bin/mariadbd --no-defaults --max'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  0x000014c916b42188 in spider_db_rollback (conn=conn@entry=0x14c8c40529c8)at /test/11.4_opt/storage/spider/spd_db_conn.cc:1134

[Current thread is 1 (LWP 2086276)]

(gdb) bt

#0  0x000014c916b42188 in spider_db_rollback (conn=conn@entry=0x14c8c40529c8)at /test/11.4_opt/storage/spider/spd_db_conn.cc:1134

#1  0x000014c916b3c001 in spider_rollback (hton=<optimized out>, thd=0x14c8c4000c68, all=<optimized out>)at /test/11.4_opt/storage/spider/spd_trx.cc:3196

#2  0x000056384206f8e8 in ha_rollback_trans (thd=thd@entry=0x14c8c4000c68, all=all@entry=false) at /test/11.4_opt/sql/handler.cc:2325

#3  0x0000563841f2bd03 in trans_rollback_stmt (thd=thd@entry=0x14c8c4000c68)at /test/11.4_opt/sql/transaction.cc:566

#4  0x0000563841ddbe90 in mysql_execute_command (thd=thd@entry=0x14c8c4000c68, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false)at /test/11.4_opt/sql/sql_parse.cc:5922

#5  0x0000563841de126e in mysql_parse (thd=0x14c8c4000c68, rawbuf=<optimized out>, length=<optimized out>, parser_state=<optimized out>) at /test/11.4_opt/sql/sql_parse.cc:7871

#6  0x0000563841de3c35 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x14c8c4000c68, packet=packet@entry=0x14c8c40087f9 "SELECT * FROM t", packet_length=packet_length@entry=15, blocking=blocking@entry=true)at /test/11.4_opt/sql/sql_parse.cc:1993

#7  0x0000563841de58bd in do_command (thd=0x14c8c4000c68, blocking=blocking@entry=true) at /test/11.4_opt/sql/sql_parse.cc:1407

#8  0x0000563841f1a4df in do_handle_one_connection (connect=<optimized out>, connect@entry=0x563844ccfd08, put_in_cache=put_in_cache@entry=true)at /test/11.4_opt/sql/sql_connect.cc:1439

#9  0x0000563841f1a84d in handle_one_connection (arg=arg@entry=0x563844ccfd08)at /test/11.4_opt/sql/sql_connect.cc:1341

#10 0x00005638422df883 in pfs_spawn_thread (arg=0x563844cf5ed8)at /test/11.4_opt/storage/perfschema/pfs.cc:2201

#11 0x000014c91fc9ca94 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#12 0x000014c91fd29c3c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78