Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-36351

MariaDB crashes when trying to access information_schema.users under --skip-grant-tables

Details

    Description

      MariaDB crashes when executing a query that tries to access a table information_schema.users
      I haven't checked with other similar tables, but it surely does not happen with the tables "tables" and "columns" of the information_schema schema

      Following is the stack trace:

      [ERROR] mariadbd got signal 11 ;
      Sorry, we probably made a mistake, and this is a bug.
       
      Your assistance in bug reporting will enable us to fix this for the next release.
      To report this bug, see https://mariadb.com/kb/en/reporting-bugs about how to report
      a bug on https://jira.mariadb.org/.
       
      Please include the information from the server start above, to the end of the
      information below.
       
      Server version: 11.7.2-MariaDB-ubu2404 source revision: 80067a69feaeb5df30abb1bfaf7d4e713ccbf027
       
      The information page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mariadbd/
      contains instructions to obtain a better version of the backtrace below.
      Following these instructions will help MariaDB developers provide a fix quicker.
       
      Attempting backtrace. Include this in the bug report.
      (note: Retrieving this information may fail)
       
      Thread pointer: 0x7b8338000c68
      stack_bottom = 0x7b839cf33000 thread_stack 0x49000
      addr2line: 'mariadbd': No such file
      Printing to addr2line failed
      mariadbd(my_print_stacktrace+0x30)[0x597c5edc4550]
      mariadbd(handle_fatal_signal+0x1f3)[0x597c5e94e763]
      /lib/x86_64-linux-gnu/libc.so.6(+0x45330)[0x7b83b76cd330]
      addr2line: 'mariadbd': No such file
      mariadbd(_Z23fill_users_schema_tableP3THDP10TABLE_LISTP4Item+0x168)[0x597c5e5af418]
      mariadbd(_Z24get_schema_tables_resultP4JOIN23enum_schema_table_state+0x2aa)[0x597c5e70192a]
      mariadbd(_ZN4JOIN10exec_innerEv+0x9dd)[0x597c5e69742d]
      mariadbd(_ZN4JOIN4execEv+0x37)[0x597c5e697de7]
      mariadbd(_ZN30subselect_single_select_engine4execEv+0x149)[0x597c5ea21e09]
      mariadbd(_ZN24Item_singlerow_subselect7val_intEv+0x64)[0x597c5ea12bb4]
      mariadbd(_ZN14Arg_comparator18compare_int_signedEv+0x1d)[0x597c5e985d7d]
      mariadbd(_ZN12Item_func_eq8val_boolEv+0x2f)[0x597c5e986e0f]
      mariadbd(_ZN15Item_bool_func215remove_eq_condsEP3THDPN4Item11cond_resultEb+0x84)[0x597c5e6bba94]
      mariadbd(_ZN9Item_cond15remove_eq_condsEP3THDPN4Item11cond_resultEb+0x125)[0x597c5e6c43f5]
      mariadbd(+0x88dcdd)[0x597c5e6c3cdd]
      mariadbd(_ZN4JOIN14optimize_innerEv+0x5ca)[0x597c5e69f17a]
      mariadbd(_ZN4JOIN8optimizeEv+0x10a)[0x597c5e6a034a]
      mariadbd(_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0xcf)[0x597c5e6a047f]
      mariadbd(_Z13handle_selectP3THDP3LEXP13select_resulty+0x17a)[0x597c5e6a0faa]
      mariadbd(+0x810ee1)[0x597c5e646ee1]
      mariadbd(_Z21mysql_execute_commandP3THDb+0x3868)[0x597c5e652ba8]
      mariadbd(_Z11mysql_parseP3THDPcjP12Parser_state+0x19a)[0x597c5e65ac2a]
      mariadbd(_Z16dispatch_command19enum_server_commandP3THDPcjb+0xb08)[0x597c5e64c5f8]
      mariadbd(_Z10do_commandP3THDb+0x164)[0x597c5e64e1b4]
      mariadbd(_Z24do_handle_one_connectionP7CONNECTb+0x65b)[0x597c5e7dc8ab]
      mariadbd(handle_one_connection+0x71)[0x597c5e7dccf1]
      mariadbd(+0xd3ebde)[0x597c5eb74bde]
      /lib/x86_64-linux-gnu/libc.so.6(+0x9caa4)[0x7b83b7724aa4]
      /lib/x86_64-linux-gnu/libc.so.6(__clone+0x44)[0x7b83b77b1a34]
       
      Connection ID (thread ID): 5
      Status: NOT_KILLED
      Query (0x7b8338012f90): SELECT * FROM sometable WHERE something=1 AND (SELECT 1 FROM information_schema.users) = 1 -- 
       
      Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on,not_null_range_scan=off,hash_join_cardinality=on,cset_narrowing=on,sargable_casefold=on
       
      Writing a core file...
      Working directory at /var/lib/mysql
      Resource Limits (excludes unlimited resources):
      Limit                     Soft Limit           Hard Limit           Units
      Max stack size            8388608              unlimited            bytes
      Max open files            32190                32190                files
      Max locked memory         8388608              8388608              bytes
      Max pending signals       92541                92541                signals
      Max msgqueue size         819200               819200               bytes
      Max nice priority         0                    0
      Max realtime priority     0                    0
      Core pattern: |/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %h
       
      Kernel version: Linux version 6.13.6-arch1-1 (linux@archlinux) (gcc (GCC) 14.2.1 20250207, GNU ld (GNU Binutils) 2.44) #1 SMP PREEMPT_DYNAMIC Fri, 07 Mar 2025 20:19:00 +0000

      Attachments

        Activity

          People

            serg Sergei Golubchik
            golim Matteo Golinelli
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.