Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-35133

ASAN errors in spider_db_open_handler or spider_send_query upon HANDLER commands

    XMLWordPrintable

Details

    Description

      INSTALL SONAME 'ha_spider';
       
      --eval create server s foreign data wrapper mysql options (host "127.0.0.1", database "test", user "root", port $MASTER_MYPORT);
      CREATE TABLE t (f INT, KEY(f));
      CREATE TABLE t_spider (f INT, KEY(f)) ENGINE=SPIDER COMMENT = "wrapper 'mysql', srv 's', table 't'";
      HANDLER t_spider OPEN AS x;
      --error 12720
      HANDLER x READ NEXT;
      HANDLER x READ f LAST;
      

      10.5 b138f428ea2d3496a3a5a2212c424f8218547ef1

      ==842219==ERROR: AddressSanitizer: heap-use-after-free on address 0x61f00009f778 at pc 0x7f8f06dd09ee bp 0x7f8f080c3410 sp 0x7f8f080c3408
      READ of size 4 at 0x61f00009f778 thread T5
          #0 0x7f8f06dd09ed in spider_db_open_handler(ha_spider*, st_spider_conn*, int) /data/bld/10.5-asan/storage/spider/spd_db_conn.cc:10369
          #1 0x7f8f06f42031 in ha_spider::index_handler_init() /data/bld/10.5-asan/storage/spider/ha_spider.cc:9481
          #2 0x7f8f06ef6993 in ha_spider::index_last_internal(unsigned char*) /data/bld/10.5-asan/storage/spider/ha_spider.cc:2183
          #3 0x7f8f06ef8a40 in ha_spider::index_last(unsigned char*) /data/bld/10.5-asan/storage/spider/ha_spider.cc:2354
          #4 0x562c21b50414 in handler::ha_index_last(unsigned char*) /data/bld/10.5-asan/sql/handler.cc:3358
          #5 0x562c21216bb7 in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/10.5-asan/sql/sql_handler.cc:931
          #6 0x562c212f500f in mysql_execute_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:5774
          #7 0x562c213051fc in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:8236
          #8 0x562c212da4e2 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:1892
          #9 0x562c212d6e75 in do_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:1376
          #10 0x562c21730a87 in do_handle_one_connection(CONNECT*, bool) /data/bld/10.5-asan/sql/sql_connect.cc:1417
          #11 0x562c2173044a in handle_one_connection /data/bld/10.5-asan/sql/sql_connect.cc:1319
          #12 0x562c2238f0f5 in pfs_spawn_thread /data/bld/10.5-asan/storage/perfschema/pfs.cc:2201
          #13 0x7f8f118a8043 in start_thread nptl/pthread_create.c:442
          #14 0x7f8f1192861b in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
       
      0x61f00009f778 is located 760 bytes inside of 3032-byte region [0x61f00009f480,0x61f0000a0058)
      freed by thread T5 here:
          #0 0x7f8f122b76a8 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52
          #1 0x562c23142cad in my_free /data/bld/10.5-asan/mysys/my_malloc.c:213
          #2 0x7f8f06eb8c6e in spider_free_mem(st_spider_transaction*, void*, unsigned long) /data/bld/10.5-asan/storage/spider/spd_malloc.cc:182
          #3 0x7f8f06de2fc4 in spider_free_conn(st_spider_conn*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:816
          #4 0x7f8f06ddc789 in spider_free_conn_from_trx(st_spider_transaction*, st_spider_conn*, bool, bool, int*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:376
          #5 0x7f8f06d3ae4b in spider_free_trx_conn(st_spider_transaction*, bool) /data/bld/10.5-asan/storage/spider/spd_trx.cc:121
          #6 0x7f8f06d570c5 in spider_rollback(handlerton*, THD*, bool) /data/bld/10.5-asan/storage/spider/spd_trx.cc:3249
          #7 0x562c21b40b22 in ha_rollback_trans(THD*, bool) /data/bld/10.5-asan/sql/handler.cc:2160
          #8 0x562c217774b3 in trans_rollback_stmt(THD*) /data/bld/10.5-asan/sql/transaction.cc:535
          #9 0x562c2121763a in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/10.5-asan/sql/sql_handler.cc:1007
          #10 0x562c212f500f in mysql_execute_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:5774
          #11 0x562c213051fc in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:8236
          #12 0x562c212da4e2 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:1892
          #13 0x562c212d6e75 in do_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:1376
          #14 0x562c21730a87 in do_handle_one_connection(CONNECT*, bool) /data/bld/10.5-asan/sql/sql_connect.cc:1417
          #15 0x562c2173044a in handle_one_connection /data/bld/10.5-asan/sql/sql_connect.cc:1319
          #16 0x562c2238f0f5 in pfs_spawn_thread /data/bld/10.5-asan/storage/perfschema/pfs.cc:2201
          #17 0x7f8f118a8043 in start_thread nptl/pthread_create.c:442
       
      previously allocated by thread T5 here:
          #0 0x7f8f122b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
          #1 0x562c23141e7d in my_malloc /data/bld/10.5-asan/mysys/my_malloc.c:91
          #2 0x7f8f06eb937a in spider_bulk_alloc_mem(st_spider_transaction*, unsigned int, char const*, char const*, unsigned long, unsigned long, ...) /data/bld/10.5-asan/storage/spider/spd_malloc.cc:230
          #3 0x7f8f06ddd902 in spider_create_conn(st_spider_share*, ha_spider*, int, int, unsigned int, int*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:430
          #4 0x7f8f06de1da4 in spider_get_conn(st_spider_share*, int, char*, st_spider_transaction*, ha_spider*, bool, bool, unsigned int, int*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:721
          #5 0x7f8f06e4c305 in spider_get_share(char const*, TABLE*, THD*, ha_spider*, int*) /data/bld/10.5-asan/storage/spider/spd_table.cc:4619
          #6 0x7f8f06edf8b9 in ha_spider::open(char const*, int, unsigned int) /data/bld/10.5-asan/storage/spider/ha_spider.cc:358
          #7 0x562c21b4812a in handler::ha_open(TABLE*, char const*, int, unsigned int, st_mem_root*, List<String>*) /data/bld/10.5-asan/sql/handler.cc:3105
          #8 0x562c2164eca1 in open_table_from_share(THD*, TABLE_SHARE*, st_mysql_const_lex_string const*, unsigned int, unsigned int, unsigned int, TABLE*, bool, List<String>*) /data/bld/10.5-asan/sql/table.cc:4320
          #9 0x562c2114103d in open_table(THD*, TABLE_LIST*, Open_table_context*) /data/bld/10.5-asan/sql/sql_base.cc:2024
          #10 0x562c2114aa34 in open_and_process_table /data/bld/10.5-asan/sql/sql_base.cc:3819
          #11 0x562c2114d561 in open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) /data/bld/10.5-asan/sql/sql_base.cc:4303
          #12 0x562c2112287d in open_tables(THD*, TABLE_LIST**, unsigned int*, unsigned int) /data/bld/10.5-asan/sql/sql_base.h:479
          #13 0x562c212123f4 in mysql_ha_open(THD*, TABLE_LIST*, SQL_HANDLER*) /data/bld/10.5-asan/sql/sql_handler.cc:349
          #14 0x562c212f4c54 in mysql_execute_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:5759
          #15 0x562c213051fc in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:8236
          #16 0x562c212da4e2 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:1892
          #17 0x562c212d6e75 in do_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:1376
          #18 0x562c21730a87 in do_handle_one_connection(CONNECT*, bool) /data/bld/10.5-asan/sql/sql_connect.cc:1417
          #19 0x562c2173044a in handle_one_connection /data/bld/10.5-asan/sql/sql_connect.cc:1319
          #20 0x562c2238f0f5 in pfs_spawn_thread /data/bld/10.5-asan/storage/perfschema/pfs.cc:2201
          #21 0x7f8f118a8043 in start_thread nptl/pthread_create.c:442
       
      Thread T5 created by T0 here:
          #0 0x7f8f12249726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
          #1 0x562c2238ae28 in my_thread_create /data/bld/10.5-asan/storage/perfschema/my_thread.h:52
          #2 0x562c2238f4e4 in pfs_spawn_thread_v1 /data/bld/10.5-asan/storage/perfschema/pfs.cc:2252
          #3 0x562c20fb113e in inline_mysql_thread_create /data/bld/10.5-asan/include/mysql/psi/mysql_thread.h:1323
          #4 0x562c20fc7306 in create_thread_to_handle_connection(CONNECT*) /data/bld/10.5-asan/sql/mysqld.cc:6111
          #5 0x562c20fc7917 in create_new_thread(CONNECT*) /data/bld/10.5-asan/sql/mysqld.cc:6170
          #6 0x562c20fc7bea in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/bld/10.5-asan/sql/mysqld.cc:6235
          #7 0x562c20fc87db in handle_connections_sockets() /data/bld/10.5-asan/sql/mysqld.cc:6362
          #8 0x562c20fc6b83 in mysqld_main(int, char**) /data/bld/10.5-asan/sql/mysqld.cc:5757
          #9 0x562c20faf8f8 in main /data/bld/10.5-asan/sql/main.cc:25
          #10 0x7f8f118461c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
       
      SUMMARY: AddressSanitizer: heap-use-after-free /data/bld/10.5-asan/storage/spider/spd_db_conn.cc:10369 in spider_db_open_handler(ha_spider*, st_spider_conn*, int)
      Shadow bytes around the buggy address:
        0x0c3e8000be90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bea0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000beb0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bec0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bed0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
      =>0x0c3e8000bee0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]
        0x0c3e8000bef0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bf00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bf10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bf20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e8000bf30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
        Left alloca redzone:     ca
        Right alloca redzone:    cb
      

      11.4 b53b81e937b7b598ee73657501ec87c6f76334ec

      ==843340==ERROR: AddressSanitizer: heap-use-after-free on address 0x61f0000ceb94 at pc 0x7ff5320ecf79 bp 0x7ff5332aff10 sp 0x7ff5332aff08
      READ of size 4 at 0x61f0000ceb94 thread T5
          #0 0x7ff5320ecf78 in spider_send_query /data/bld/11.4-asan/storage/spider/ha_spider.cc:1359
          #1 0x7ff5320f5e97 in ha_spider::index_last_internal(unsigned char*) /data/bld/11.4-asan/storage/spider/ha_spider.cc:2076
          #2 0x7ff5320f6c0e in ha_spider::index_last(unsigned char*) /data/bld/11.4-asan/storage/spider/ha_spider.cc:2132
          #3 0x55bba9f917f4 in handler::ha_index_last(unsigned char*) /data/bld/11.4-asan/sql/handler.cc:3874
          #4 0x55bba9536e05 in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/11.4-asan/sql/sql_handler.cc:944
          #5 0x55bba9618b34 in mysql_execute_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:5453
          #6 0x55bba9628a1d in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/11.4-asan/sql/sql_parse.cc:7880
          #7 0x55bba95ffbac in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1894
          #8 0x55bba95fc8e4 in do_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1407
          #9 0x55bba9adc143 in do_handle_one_connection(CONNECT*, bool) /data/bld/11.4-asan/sql/sql_connect.cc:1439
          #10 0x55bba9adbaff in handle_one_connection /data/bld/11.4-asan/sql/sql_connect.cc:1341
          #11 0x55bbaa754b7d in pfs_spawn_thread /data/bld/11.4-asan/storage/perfschema/pfs.cc:2201
          #12 0x7ff53daa8043 in start_thread nptl/pthread_create.c:442
          #13 0x7ff53db2861b in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
       
      0x61f0000ceb94 is located 788 bytes inside of 3128-byte region [0x61f0000ce880,0x61f0000cf4b8)
      freed by thread T5 here:
          #0 0x7ff53e6b76a8 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52
          #1 0x55bbab4cb332 in my_free /data/bld/11.4-asan/mysys/my_malloc.c:221
          #2 0x7ff5320b8b5d in spider_free_mem(st_spider_transaction*, void*, unsigned long) /data/bld/11.4-asan/storage/spider/spd_malloc.cc:182
          #3 0x7ff531fdd43a in spider_free_conn(st_spider_conn*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:823
          #4 0x7ff531fd670b in spider_free_conn_from_trx(st_spider_transaction*, st_spider_conn*, bool, bool, int*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:370
          #5 0x7ff531f3be96 in spider_free_trx_conn(st_spider_transaction*, bool) /data/bld/11.4-asan/storage/spider/spd_trx.cc:113
          #6 0x7ff531f5869c in spider_rollback(handlerton*, THD*, bool) /data/bld/11.4-asan/storage/spider/spd_trx.cc:3218
          #7 0x55bba9f7f9da in ha_rollback_trans(THD*, bool) /data/bld/11.4-asan/sql/handler.cc:2325
          #8 0x55bba9b24be6 in trans_rollback_stmt(THD*) /data/bld/11.4-asan/sql/transaction.cc:566
          #9 0x55bba9537903 in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/11.4-asan/sql/sql_handler.cc:1022
          #10 0x55bba9618b34 in mysql_execute_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:5453
          #11 0x55bba9628a1d in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/11.4-asan/sql/sql_parse.cc:7880
          #12 0x55bba95ffbac in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1894
          #13 0x55bba95fc8e4 in do_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1407
          #14 0x55bba9adc143 in do_handle_one_connection(CONNECT*, bool) /data/bld/11.4-asan/sql/sql_connect.cc:1439
          #15 0x55bba9adbaff in handle_one_connection /data/bld/11.4-asan/sql/sql_connect.cc:1341
          #16 0x55bbaa754b7d in pfs_spawn_thread /data/bld/11.4-asan/storage/perfschema/pfs.cc:2201
          #17 0x7ff53daa8043 in start_thread nptl/pthread_create.c:442
       
      previously allocated by thread T5 here:
          #0 0x7ff53e6b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
          #1 0x55bbab4ca463 in my_malloc /data/bld/11.4-asan/mysys/my_malloc.c:93
          #2 0x7ff5320b9269 in spider_bulk_alloc_mem(st_spider_transaction*, unsigned int, char const*, char const*, unsigned long, unsigned long, ...) /data/bld/11.4-asan/storage/spider/spd_malloc.cc:230
          #3 0x7ff531fd7a16 in spider_create_conn(st_spider_share*, ha_spider*, int, int, int*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:423
          #4 0x7ff531fdc28e in spider_get_conn(st_spider_share*, int, char*, st_spider_transaction*, ha_spider*, bool, bool, int*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:728
          #5 0x7ff532050680 in spider_share_get_conns(ha_spider*, st_spider_share*, int*) /data/bld/11.4-asan/storage/spider/spd_table.cc:5198
          #6 0x7ff532053048 in spider_init_share(char const*, TABLE*, THD*, ha_spider*, int*, st_spider_share*, TABLE_SHARE*, bool) /data/bld/11.4-asan/storage/spider/spd_table.cc:5468
          #7 0x7ff532053f53 in spider_get_share(char const*, TABLE*, THD*, ha_spider*, int*) /data/bld/11.4-asan/storage/spider/spd_table.cc:5582
          #8 0x7ff5320deb28 in ha_spider::open(char const*, int, unsigned int) /data/bld/11.4-asan/storage/spider/ha_spider.cc:311
          #9 0x55bba9f88dfb in handler::ha_open(TABLE*, char const*, int, unsigned int, st_mem_root*, List<String>*) /data/bld/11.4-asan/sql/handler.cc:3585
          #10 0x55bba99f59ac in open_table_from_share(THD*, TABLE_SHARE*, st_mysql_const_lex_string const*, unsigned int, unsigned int, unsigned int, TABLE*, bool, List<String>*) /data/bld/11.4-asan/sql/table.cc:4579
          #11 0x55bba944eb23 in open_table(THD*, TABLE_LIST*, Open_table_context*) /data/bld/11.4-asan/sql/sql_base.cc:2247
          #12 0x55bba9459d16 in open_and_process_table /data/bld/11.4-asan/sql/sql_base.cc:4180
          #13 0x55bba945c86d in open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) /data/bld/11.4-asan/sql/sql_base.cc:4666
          #14 0x55bba942f30e in open_tables(THD*, TABLE_LIST**, unsigned int*, unsigned int) /data/bld/11.4-asan/sql/sql_base.h:501
          #15 0x55bba9532474 in mysql_ha_open(THD*, TABLE_LIST*, SQL_HANDLER*) /data/bld/11.4-asan/sql/sql_handler.cc:349
          #16 0x55bba961877a in mysql_execute_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:5438
          #17 0x55bba9628a1d in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/11.4-asan/sql/sql_parse.cc:7880
          #18 0x55bba95ffbac in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1894
          #19 0x55bba95fc8e4 in do_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1407
          #20 0x55bba9adc143 in do_handle_one_connection(CONNECT*, bool) /data/bld/11.4-asan/sql/sql_connect.cc:1439
          #21 0x55bba9adbaff in handle_one_connection /data/bld/11.4-asan/sql/sql_connect.cc:1341
          #22 0x55bbaa754b7d in pfs_spawn_thread /data/bld/11.4-asan/storage/perfschema/pfs.cc:2201
          #23 0x7ff53daa8043 in start_thread nptl/pthread_create.c:442
       
      Thread T5 created by T0 here:
          #0 0x7ff53e649726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
          #1 0x55bbaa7508b8 in my_thread_create /data/bld/11.4-asan/storage/perfschema/my_thread.h:52
          #2 0x55bbaa754f6c in pfs_spawn_thread_v1 /data/bld/11.4-asan/storage/perfschema/pfs.cc:2252
          #3 0x55bba92299d3 in inline_mysql_thread_create /data/bld/11.4-asan/include/mysql/psi/mysql_thread.h:1139
          #4 0x55bba9241530 in create_thread_to_handle_connection(CONNECT*) /data/bld/11.4-asan/sql/mysqld.cc:6178
          #5 0x55bba9241b55 in create_new_thread(CONNECT*) /data/bld/11.4-asan/sql/mysqld.cc:6240
          #6 0x55bba9241e40 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/bld/11.4-asan/sql/mysqld.cc:6302
          #7 0x55bba9242ac8 in handle_connections_sockets() /data/bld/11.4-asan/sql/mysqld.cc:6415
          #8 0x55bba9240dad in mysqld_main(int, char**) /data/bld/11.4-asan/sql/mysqld.cc:6073
          #9 0x55bba9228af8 in main /data/bld/11.4-asan/sql/main.cc:34
          #10 0x7ff53da461c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
       
      SUMMARY: AddressSanitizer: heap-use-after-free /data/bld/11.4-asan/storage/spider/ha_spider.cc:1359 in spider_send_query
      Shadow bytes around the buggy address:
        0x0c3e80011d20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011d30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011d40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011d50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011d60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
      =>0x0c3e80011d70: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011d80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011d90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011da0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011db0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
        0x0c3e80011dc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
        Left alloca redzone:     ca
        Right alloca redzone:    cb
      ==843340==ABORTING
      

      Attachments

        Activity

          People

            ycp Yuchen Pei
            elenst Elena Stepanova
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.