Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-35029

ASAN errors in Lex_ident<Compare_ident_ci>::is_valid_ident upon DDL on table with vector index

    XMLWordPrintable

Details

    Description

      CREATE TABLE t (a INT, v BLOB NOT NULL, VECTOR KEY (v) DISTANCE_FUNCTION=euclidean);
      SHOW CREATE TABLE t;
      SET SESSION mhnsw_max_edges_per_node = @@mhnsw_max_edges_per_node + 1;
      CREATE TABLE t2 LIKE t;
      ALTER TABLE t FORCE;
       
      # Cleanup
      DROP TABLE t, t2;
      

      bb-11.6-MDEV-32887-vector f20a1f4e94f5fc700959ff6b7945aa8a5fd0c307

      ==3127586==ERROR: AddressSanitizer: use-after-poison on address 0x62900004d098 at pc 0x5614d20fb339 bp 0x7f9fc4282b30 sp 0x7f9fc4282b28
      READ of size 8 at 0x62900004d098 thread T11
          #0 0x5614d20fb338 in Lex_ident<Compare_ident_ci>::is_valid_ident() const /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/lex_ident.h:79
          #1 0x5614d20fab82 in Lex_ident<Compare_ident_ci>::streq(st_mysql_const_lex_string const&) const /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/lex_ident.h:118
          #2 0x5614d29826cd in parse_option_list(THD*, st_plugin_int*, void*, engine_option_value**, st_ha_create_table_option*, bool, st_mem_root*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/create_options.cc:283
          #3 0x5614d26b0311 in mysql_prepare_create_table_finalize /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_table.cc:3321
          #4 0x5614d26b9c09 in mysql_create_frm_image(THD*, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_table.cc:4411
          #5 0x5614d26bbb06 in create_table_impl /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_table.cc:4733
          #6 0x5614d26eb341 in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, Table_specification_st*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool, bool) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_table.cc:11220
          #7 0x5614d28c1448 in Sql_cmd_alter_table::execute(THD*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_alter.cc:701
          #8 0x5614d23d1a71 in mysql_execute_command(THD*, bool) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_parse.cc:5846
          #9 0x5614d23deb89 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_parse.cc:7873
          #10 0x5614d23b5bab in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_parse.cc:1892
          #11 0x5614d23b28bf in do_command(THD*, bool) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_parse.cc:1405
          #12 0x5614d28a2420 in do_handle_one_connection(CONNECT*, bool) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_connect.cc:1448
          #13 0x5614d28a1de1 in handle_one_connection /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_connect.cc:1350
          #14 0x5614d3543999 in pfs_spawn_thread /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/storage/perfschema/pfs.cc:2198
          #15 0x7f9febca8043 in start_thread nptl/pthread_create.c:442
          #16 0x7f9febd2861b in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
       
      0x62900004d098 is located 7832 bytes inside of 16400-byte region [0x62900004b200,0x62900004f210)
      allocated by thread T11 here:
          #0 0x7f9fec8b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
          #1 0x5614d42be891 in my_malloc /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/mysys/my_malloc.c:93
          #2 0x5614d4290e5d in root_alloc /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/mysys/my_alloc.c:66
          #3 0x5614d4291e52 in reset_root_defaults /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/mysys/my_alloc.c:244
          #4 0x5614d226d340 in THD::init_for_queries() /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_class.cc:1507
          #5 0x5614d28a16b2 in prepare_new_connection_state(THD*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_connect.cc:1276
          #6 0x5614d28a1e62 in thd_prepare_connection(THD*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_connect.cc:1371
          #7 0x5614d28a237a in do_handle_one_connection(CONNECT*, bool) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_connect.cc:1438
          #8 0x5614d28a1de1 in handle_one_connection /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/sql_connect.cc:1350
          #9 0x5614d3543999 in pfs_spawn_thread /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/storage/perfschema/pfs.cc:2198
          #10 0x7f9febca8043 in start_thread nptl/pthread_create.c:442
       
      Thread T11 created by T0 here:
          #0 0x7f9fec849726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
          #1 0x5614d353f73b in my_thread_create /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/storage/perfschema/my_thread.h:38
          #2 0x5614d3543d88 in pfs_spawn_thread_v1 /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/storage/perfschema/pfs.cc:2249
          #3 0x5614d1fcec33 in inline_mysql_thread_create /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/include/mysql/psi/mysql_thread.h:1139
          #4 0x5614d1fe73fa in create_thread_to_handle_connection(CONNECT*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/mysqld.cc:6267
          #5 0x5614d1fe7a1f in create_new_thread(CONNECT*) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/mysqld.cc:6329
          #6 0x5614d1fe7d0a in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/mysqld.cc:6391
          #7 0x5614d1fe8992 in handle_connections_sockets() /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/mysqld.cc:6504
          #8 0x5614d1fe6c77 in mysqld_main(int, char**) /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/mysqld.cc:6162
          #9 0x5614d1fcdd58 in main /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/main.cc:34
          #10 0x7f9febc461c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
       
      SUMMARY: AddressSanitizer: use-after-poison /data/bld/preview-11.7-bb-11.6-MDEV-32887-vector-asan/sql/lex_ident.h:79 in Lex_ident<Compare_ident_ci>::is_valid_ident() const
      Shadow bytes around the buggy address:
        0x0c52800019c0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c52800019d0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c52800019e0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c52800019f0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c5280001a00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
      =>0x0c5280001a10: f7 f7 f7[f7]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c5280001a20: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c5280001a30: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c5280001a40: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c5280001a50: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
        0x0c5280001a60: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
        Left alloca redzone:     ca
        Right alloca redzone:    cb
      

      Attachments

        Issue Links

          Activity

            People

              serg Sergei Golubchik
              elenst Elena Stepanova
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.