Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
10.5, 10.6, 10.11, 11.2(EOL), 11.4, 11.6(EOL)
-
None
Description
INSTALL SONAME 'ha_spider'; |
|
--eval create server s foreign data wrapper mysql options (host "127.0.0.1", database "test", user "root", port $MASTER_MYPORT);
|
CREATE TABLE t (f INT, KEY(f)); |
CREATE TABLE t_spider (f INT, KEY(f)) ENGINE=SPIDER COMMENT = "wrapper 'mysql', srv 's', table 't'"; |
HANDLER t_spider OPEN AS x; |
--error 12720
|
HANDLER x READ NEXT; |
HANDLER x READ f LAST; |
10.5 b138f428ea2d3496a3a5a2212c424f8218547ef1 |
==842219==ERROR: AddressSanitizer: heap-use-after-free on address 0x61f00009f778 at pc 0x7f8f06dd09ee bp 0x7f8f080c3410 sp 0x7f8f080c3408
|
READ of size 4 at 0x61f00009f778 thread T5
|
#0 0x7f8f06dd09ed in spider_db_open_handler(ha_spider*, st_spider_conn*, int) /data/bld/10.5-asan/storage/spider/spd_db_conn.cc:10369
|
#1 0x7f8f06f42031 in ha_spider::index_handler_init() /data/bld/10.5-asan/storage/spider/ha_spider.cc:9481
|
#2 0x7f8f06ef6993 in ha_spider::index_last_internal(unsigned char*) /data/bld/10.5-asan/storage/spider/ha_spider.cc:2183
|
#3 0x7f8f06ef8a40 in ha_spider::index_last(unsigned char*) /data/bld/10.5-asan/storage/spider/ha_spider.cc:2354
|
#4 0x562c21b50414 in handler::ha_index_last(unsigned char*) /data/bld/10.5-asan/sql/handler.cc:3358
|
#5 0x562c21216bb7 in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/10.5-asan/sql/sql_handler.cc:931
|
#6 0x562c212f500f in mysql_execute_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:5774
|
#7 0x562c213051fc in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:8236
|
#8 0x562c212da4e2 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:1892
|
#9 0x562c212d6e75 in do_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:1376
|
#10 0x562c21730a87 in do_handle_one_connection(CONNECT*, bool) /data/bld/10.5-asan/sql/sql_connect.cc:1417
|
#11 0x562c2173044a in handle_one_connection /data/bld/10.5-asan/sql/sql_connect.cc:1319
|
#12 0x562c2238f0f5 in pfs_spawn_thread /data/bld/10.5-asan/storage/perfschema/pfs.cc:2201
|
#13 0x7f8f118a8043 in start_thread nptl/pthread_create.c:442
|
#14 0x7f8f1192861b in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
|
|
0x61f00009f778 is located 760 bytes inside of 3032-byte region [0x61f00009f480,0x61f0000a0058)
|
freed by thread T5 here:
|
#0 0x7f8f122b76a8 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52
|
#1 0x562c23142cad in my_free /data/bld/10.5-asan/mysys/my_malloc.c:213
|
#2 0x7f8f06eb8c6e in spider_free_mem(st_spider_transaction*, void*, unsigned long) /data/bld/10.5-asan/storage/spider/spd_malloc.cc:182
|
#3 0x7f8f06de2fc4 in spider_free_conn(st_spider_conn*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:816
|
#4 0x7f8f06ddc789 in spider_free_conn_from_trx(st_spider_transaction*, st_spider_conn*, bool, bool, int*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:376
|
#5 0x7f8f06d3ae4b in spider_free_trx_conn(st_spider_transaction*, bool) /data/bld/10.5-asan/storage/spider/spd_trx.cc:121
|
#6 0x7f8f06d570c5 in spider_rollback(handlerton*, THD*, bool) /data/bld/10.5-asan/storage/spider/spd_trx.cc:3249
|
#7 0x562c21b40b22 in ha_rollback_trans(THD*, bool) /data/bld/10.5-asan/sql/handler.cc:2160
|
#8 0x562c217774b3 in trans_rollback_stmt(THD*) /data/bld/10.5-asan/sql/transaction.cc:535
|
#9 0x562c2121763a in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/10.5-asan/sql/sql_handler.cc:1007
|
#10 0x562c212f500f in mysql_execute_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:5774
|
#11 0x562c213051fc in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:8236
|
#12 0x562c212da4e2 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:1892
|
#13 0x562c212d6e75 in do_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:1376
|
#14 0x562c21730a87 in do_handle_one_connection(CONNECT*, bool) /data/bld/10.5-asan/sql/sql_connect.cc:1417
|
#15 0x562c2173044a in handle_one_connection /data/bld/10.5-asan/sql/sql_connect.cc:1319
|
#16 0x562c2238f0f5 in pfs_spawn_thread /data/bld/10.5-asan/storage/perfschema/pfs.cc:2201
|
#17 0x7f8f118a8043 in start_thread nptl/pthread_create.c:442
|
|
previously allocated by thread T5 here:
|
#0 0x7f8f122b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
|
#1 0x562c23141e7d in my_malloc /data/bld/10.5-asan/mysys/my_malloc.c:91
|
#2 0x7f8f06eb937a in spider_bulk_alloc_mem(st_spider_transaction*, unsigned int, char const*, char const*, unsigned long, unsigned long, ...) /data/bld/10.5-asan/storage/spider/spd_malloc.cc:230
|
#3 0x7f8f06ddd902 in spider_create_conn(st_spider_share*, ha_spider*, int, int, unsigned int, int*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:430
|
#4 0x7f8f06de1da4 in spider_get_conn(st_spider_share*, int, char*, st_spider_transaction*, ha_spider*, bool, bool, unsigned int, int*) /data/bld/10.5-asan/storage/spider/spd_conn.cc:721
|
#5 0x7f8f06e4c305 in spider_get_share(char const*, TABLE*, THD*, ha_spider*, int*) /data/bld/10.5-asan/storage/spider/spd_table.cc:4619
|
#6 0x7f8f06edf8b9 in ha_spider::open(char const*, int, unsigned int) /data/bld/10.5-asan/storage/spider/ha_spider.cc:358
|
#7 0x562c21b4812a in handler::ha_open(TABLE*, char const*, int, unsigned int, st_mem_root*, List<String>*) /data/bld/10.5-asan/sql/handler.cc:3105
|
#8 0x562c2164eca1 in open_table_from_share(THD*, TABLE_SHARE*, st_mysql_const_lex_string const*, unsigned int, unsigned int, unsigned int, TABLE*, bool, List<String>*) /data/bld/10.5-asan/sql/table.cc:4320
|
#9 0x562c2114103d in open_table(THD*, TABLE_LIST*, Open_table_context*) /data/bld/10.5-asan/sql/sql_base.cc:2024
|
#10 0x562c2114aa34 in open_and_process_table /data/bld/10.5-asan/sql/sql_base.cc:3819
|
#11 0x562c2114d561 in open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) /data/bld/10.5-asan/sql/sql_base.cc:4303
|
#12 0x562c2112287d in open_tables(THD*, TABLE_LIST**, unsigned int*, unsigned int) /data/bld/10.5-asan/sql/sql_base.h:479
|
#13 0x562c212123f4 in mysql_ha_open(THD*, TABLE_LIST*, SQL_HANDLER*) /data/bld/10.5-asan/sql/sql_handler.cc:349
|
#14 0x562c212f4c54 in mysql_execute_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:5759
|
#15 0x562c213051fc in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:8236
|
#16 0x562c212da4e2 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/bld/10.5-asan/sql/sql_parse.cc:1892
|
#17 0x562c212d6e75 in do_command(THD*) /data/bld/10.5-asan/sql/sql_parse.cc:1376
|
#18 0x562c21730a87 in do_handle_one_connection(CONNECT*, bool) /data/bld/10.5-asan/sql/sql_connect.cc:1417
|
#19 0x562c2173044a in handle_one_connection /data/bld/10.5-asan/sql/sql_connect.cc:1319
|
#20 0x562c2238f0f5 in pfs_spawn_thread /data/bld/10.5-asan/storage/perfschema/pfs.cc:2201
|
#21 0x7f8f118a8043 in start_thread nptl/pthread_create.c:442
|
|
Thread T5 created by T0 here:
|
#0 0x7f8f12249726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
|
#1 0x562c2238ae28 in my_thread_create /data/bld/10.5-asan/storage/perfschema/my_thread.h:52
|
#2 0x562c2238f4e4 in pfs_spawn_thread_v1 /data/bld/10.5-asan/storage/perfschema/pfs.cc:2252
|
#3 0x562c20fb113e in inline_mysql_thread_create /data/bld/10.5-asan/include/mysql/psi/mysql_thread.h:1323
|
#4 0x562c20fc7306 in create_thread_to_handle_connection(CONNECT*) /data/bld/10.5-asan/sql/mysqld.cc:6111
|
#5 0x562c20fc7917 in create_new_thread(CONNECT*) /data/bld/10.5-asan/sql/mysqld.cc:6170
|
#6 0x562c20fc7bea in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/bld/10.5-asan/sql/mysqld.cc:6235
|
#7 0x562c20fc87db in handle_connections_sockets() /data/bld/10.5-asan/sql/mysqld.cc:6362
|
#8 0x562c20fc6b83 in mysqld_main(int, char**) /data/bld/10.5-asan/sql/mysqld.cc:5757
|
#9 0x562c20faf8f8 in main /data/bld/10.5-asan/sql/main.cc:25
|
#10 0x7f8f118461c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
|
|
SUMMARY: AddressSanitizer: heap-use-after-free /data/bld/10.5-asan/storage/spider/spd_db_conn.cc:10369 in spider_db_open_handler(ha_spider*, st_spider_conn*, int)
|
Shadow bytes around the buggy address:
|
0x0c3e8000be90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bea0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000beb0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bec0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bed0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
=>0x0c3e8000bee0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]
|
0x0c3e8000bef0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bf00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bf10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bf20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e8000bf30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
Shadow byte legend (one shadow byte represents 8 application bytes):
|
Addressable: 00
|
Partially addressable: 01 02 03 04 05 06 07
|
Heap left redzone: fa
|
Freed heap region: fd
|
Stack left redzone: f1
|
Stack mid redzone: f2
|
Stack right redzone: f3
|
Stack after return: f5
|
Stack use after scope: f8
|
Global redzone: f9
|
Global init order: f6
|
Poisoned by user: f7
|
Container overflow: fc
|
Array cookie: ac
|
Intra object redzone: bb
|
ASan internal: fe
|
Left alloca redzone: ca
|
Right alloca redzone: cb
|
11.4 b53b81e937b7b598ee73657501ec87c6f76334ec |
==843340==ERROR: AddressSanitizer: heap-use-after-free on address 0x61f0000ceb94 at pc 0x7ff5320ecf79 bp 0x7ff5332aff10 sp 0x7ff5332aff08
|
READ of size 4 at 0x61f0000ceb94 thread T5
|
#0 0x7ff5320ecf78 in spider_send_query /data/bld/11.4-asan/storage/spider/ha_spider.cc:1359
|
#1 0x7ff5320f5e97 in ha_spider::index_last_internal(unsigned char*) /data/bld/11.4-asan/storage/spider/ha_spider.cc:2076
|
#2 0x7ff5320f6c0e in ha_spider::index_last(unsigned char*) /data/bld/11.4-asan/storage/spider/ha_spider.cc:2132
|
#3 0x55bba9f917f4 in handler::ha_index_last(unsigned char*) /data/bld/11.4-asan/sql/handler.cc:3874
|
#4 0x55bba9536e05 in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/11.4-asan/sql/sql_handler.cc:944
|
#5 0x55bba9618b34 in mysql_execute_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:5453
|
#6 0x55bba9628a1d in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/11.4-asan/sql/sql_parse.cc:7880
|
#7 0x55bba95ffbac in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1894
|
#8 0x55bba95fc8e4 in do_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1407
|
#9 0x55bba9adc143 in do_handle_one_connection(CONNECT*, bool) /data/bld/11.4-asan/sql/sql_connect.cc:1439
|
#10 0x55bba9adbaff in handle_one_connection /data/bld/11.4-asan/sql/sql_connect.cc:1341
|
#11 0x55bbaa754b7d in pfs_spawn_thread /data/bld/11.4-asan/storage/perfschema/pfs.cc:2201
|
#12 0x7ff53daa8043 in start_thread nptl/pthread_create.c:442
|
#13 0x7ff53db2861b in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
|
|
0x61f0000ceb94 is located 788 bytes inside of 3128-byte region [0x61f0000ce880,0x61f0000cf4b8)
|
freed by thread T5 here:
|
#0 0x7ff53e6b76a8 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:52
|
#1 0x55bbab4cb332 in my_free /data/bld/11.4-asan/mysys/my_malloc.c:221
|
#2 0x7ff5320b8b5d in spider_free_mem(st_spider_transaction*, void*, unsigned long) /data/bld/11.4-asan/storage/spider/spd_malloc.cc:182
|
#3 0x7ff531fdd43a in spider_free_conn(st_spider_conn*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:823
|
#4 0x7ff531fd670b in spider_free_conn_from_trx(st_spider_transaction*, st_spider_conn*, bool, bool, int*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:370
|
#5 0x7ff531f3be96 in spider_free_trx_conn(st_spider_transaction*, bool) /data/bld/11.4-asan/storage/spider/spd_trx.cc:113
|
#6 0x7ff531f5869c in spider_rollback(handlerton*, THD*, bool) /data/bld/11.4-asan/storage/spider/spd_trx.cc:3218
|
#7 0x55bba9f7f9da in ha_rollback_trans(THD*, bool) /data/bld/11.4-asan/sql/handler.cc:2325
|
#8 0x55bba9b24be6 in trans_rollback_stmt(THD*) /data/bld/11.4-asan/sql/transaction.cc:566
|
#9 0x55bba9537903 in mysql_ha_read(THD*, TABLE_LIST*, enum_ha_read_modes, char const*, List<Item>*, ha_rkey_function, Item*, unsigned long long, unsigned long long) /data/bld/11.4-asan/sql/sql_handler.cc:1022
|
#10 0x55bba9618b34 in mysql_execute_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:5453
|
#11 0x55bba9628a1d in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/11.4-asan/sql/sql_parse.cc:7880
|
#12 0x55bba95ffbac in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1894
|
#13 0x55bba95fc8e4 in do_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1407
|
#14 0x55bba9adc143 in do_handle_one_connection(CONNECT*, bool) /data/bld/11.4-asan/sql/sql_connect.cc:1439
|
#15 0x55bba9adbaff in handle_one_connection /data/bld/11.4-asan/sql/sql_connect.cc:1341
|
#16 0x55bbaa754b7d in pfs_spawn_thread /data/bld/11.4-asan/storage/perfschema/pfs.cc:2201
|
#17 0x7ff53daa8043 in start_thread nptl/pthread_create.c:442
|
|
previously allocated by thread T5 here:
|
#0 0x7ff53e6b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
|
#1 0x55bbab4ca463 in my_malloc /data/bld/11.4-asan/mysys/my_malloc.c:93
|
#2 0x7ff5320b9269 in spider_bulk_alloc_mem(st_spider_transaction*, unsigned int, char const*, char const*, unsigned long, unsigned long, ...) /data/bld/11.4-asan/storage/spider/spd_malloc.cc:230
|
#3 0x7ff531fd7a16 in spider_create_conn(st_spider_share*, ha_spider*, int, int, int*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:423
|
#4 0x7ff531fdc28e in spider_get_conn(st_spider_share*, int, char*, st_spider_transaction*, ha_spider*, bool, bool, int*) /data/bld/11.4-asan/storage/spider/spd_conn.cc:728
|
#5 0x7ff532050680 in spider_share_get_conns(ha_spider*, st_spider_share*, int*) /data/bld/11.4-asan/storage/spider/spd_table.cc:5198
|
#6 0x7ff532053048 in spider_init_share(char const*, TABLE*, THD*, ha_spider*, int*, st_spider_share*, TABLE_SHARE*, bool) /data/bld/11.4-asan/storage/spider/spd_table.cc:5468
|
#7 0x7ff532053f53 in spider_get_share(char const*, TABLE*, THD*, ha_spider*, int*) /data/bld/11.4-asan/storage/spider/spd_table.cc:5582
|
#8 0x7ff5320deb28 in ha_spider::open(char const*, int, unsigned int) /data/bld/11.4-asan/storage/spider/ha_spider.cc:311
|
#9 0x55bba9f88dfb in handler::ha_open(TABLE*, char const*, int, unsigned int, st_mem_root*, List<String>*) /data/bld/11.4-asan/sql/handler.cc:3585
|
#10 0x55bba99f59ac in open_table_from_share(THD*, TABLE_SHARE*, st_mysql_const_lex_string const*, unsigned int, unsigned int, unsigned int, TABLE*, bool, List<String>*) /data/bld/11.4-asan/sql/table.cc:4579
|
#11 0x55bba944eb23 in open_table(THD*, TABLE_LIST*, Open_table_context*) /data/bld/11.4-asan/sql/sql_base.cc:2247
|
#12 0x55bba9459d16 in open_and_process_table /data/bld/11.4-asan/sql/sql_base.cc:4180
|
#13 0x55bba945c86d in open_tables(THD*, DDL_options_st const&, TABLE_LIST**, unsigned int*, unsigned int, Prelocking_strategy*) /data/bld/11.4-asan/sql/sql_base.cc:4666
|
#14 0x55bba942f30e in open_tables(THD*, TABLE_LIST**, unsigned int*, unsigned int) /data/bld/11.4-asan/sql/sql_base.h:501
|
#15 0x55bba9532474 in mysql_ha_open(THD*, TABLE_LIST*, SQL_HANDLER*) /data/bld/11.4-asan/sql/sql_handler.cc:349
|
#16 0x55bba961877a in mysql_execute_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:5438
|
#17 0x55bba9628a1d in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/11.4-asan/sql/sql_parse.cc:7880
|
#18 0x55bba95ffbac in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1894
|
#19 0x55bba95fc8e4 in do_command(THD*, bool) /data/bld/11.4-asan/sql/sql_parse.cc:1407
|
#20 0x55bba9adc143 in do_handle_one_connection(CONNECT*, bool) /data/bld/11.4-asan/sql/sql_connect.cc:1439
|
#21 0x55bba9adbaff in handle_one_connection /data/bld/11.4-asan/sql/sql_connect.cc:1341
|
#22 0x55bbaa754b7d in pfs_spawn_thread /data/bld/11.4-asan/storage/perfschema/pfs.cc:2201
|
#23 0x7ff53daa8043 in start_thread nptl/pthread_create.c:442
|
|
Thread T5 created by T0 here:
|
#0 0x7ff53e649726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
|
#1 0x55bbaa7508b8 in my_thread_create /data/bld/11.4-asan/storage/perfschema/my_thread.h:52
|
#2 0x55bbaa754f6c in pfs_spawn_thread_v1 /data/bld/11.4-asan/storage/perfschema/pfs.cc:2252
|
#3 0x55bba92299d3 in inline_mysql_thread_create /data/bld/11.4-asan/include/mysql/psi/mysql_thread.h:1139
|
#4 0x55bba9241530 in create_thread_to_handle_connection(CONNECT*) /data/bld/11.4-asan/sql/mysqld.cc:6178
|
#5 0x55bba9241b55 in create_new_thread(CONNECT*) /data/bld/11.4-asan/sql/mysqld.cc:6240
|
#6 0x55bba9241e40 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/bld/11.4-asan/sql/mysqld.cc:6302
|
#7 0x55bba9242ac8 in handle_connections_sockets() /data/bld/11.4-asan/sql/mysqld.cc:6415
|
#8 0x55bba9240dad in mysqld_main(int, char**) /data/bld/11.4-asan/sql/mysqld.cc:6073
|
#9 0x55bba9228af8 in main /data/bld/11.4-asan/sql/main.cc:34
|
#10 0x7ff53da461c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
|
|
SUMMARY: AddressSanitizer: heap-use-after-free /data/bld/11.4-asan/storage/spider/ha_spider.cc:1359 in spider_send_query
|
Shadow bytes around the buggy address:
|
0x0c3e80011d20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011d30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011d40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011d50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011d60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
=>0x0c3e80011d70: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011d80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011d90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011da0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011db0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
0x0c3e80011dc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
|
Shadow byte legend (one shadow byte represents 8 application bytes):
|
Addressable: 00
|
Partially addressable: 01 02 03 04 05 06 07
|
Heap left redzone: fa
|
Freed heap region: fd
|
Stack left redzone: f1
|
Stack mid redzone: f2
|
Stack right redzone: f3
|
Stack after return: f5
|
Stack use after scope: f8
|
Global redzone: f9
|
Global init order: f6
|
Poisoned by user: f7
|
Container overflow: fc
|
Array cookie: ac
|
Intra object redzone: bb
|
ASan internal: fe
|
Left alloca redzone: ca
|
Right alloca redzone: cb
|
==843340==ABORTING
|