LP:684117 - Crash/valgrind warning in Bitmap<64u>::intersect in maria-5.1-wl21

backtrace:

#5 0x081c13a9 in Bitmap<64u>::intersect (this=0xae9dd114, map2=...) at sql_bitmap.h:153
#6 0x08386601 in sel_trees_have_common_keys (tree1=0xa905010, tree2=0x0, common_keys=0xae9dd114) at opt_range.cc:7818
#7 0x08386661 in sel_trees_can_be_ored (param=0xae9dd41c, tree1=0xa905010, tree2=0x0, common_keys=0xae9dd114) at opt_range.cc:7861
#8 0x08377839 in SEL_IMERGE::or_sel_tree_with_checks (this=0xa904fc0, param=0xae9dd41c, n_trees=3, tree=0x0, is_first_check_pass=true,
is_last_check_pass=0xae9dd183) at opt_range.cc:1101
#9 0x08377b0b in SEL_IMERGE::or_sel_imerge_with_checks (this=0xa904fc0, param=0xae9dd41c, n_trees=3, imerge=0xa905c80, is_first_check_pass=true,
is_last_check_pass=0xae9dd1cf) at opt_range.cc:1203
#10 0x08377ee7 in imerge_list_or_list (param=0xae9dd41c, im1=0xa9053c0, im2=0xa905c40) at opt_range.cc:1385
#11 0x083872a6 in tree_or (param=0xae9dd41c, tree1=0xa9052b0, tree2=0xa905b30) at opt_range.cc:8176
#12 0x0838413c in get_mm_tree (param=0xae9dd41c, cond=0xa901898) at opt_range.cc:6969
#13 0x0837b855 in SQL_SELECT::test_quick_select (this=0xa9041b8, thd=0xa76a4a0, keys_to_use=..., prev_tables=0, limit=18446744073709551615,
force_quick_range=false) at opt_range.cc:2983
#14 0x082e7b1b in get_quick_record_count (thd=0xa76a4a0, select=0xa9041b8, table=0xa8f3440, keys=0xa903904, limit=18446744073709551615) at sql_select.cc:2600
#15 0x082e98d9 in make_join_statistics (join=0xa902130, tables_arg=0xa901568, conds=0xa901898, keyuse_array=0xa903250) at sql_select.cc:3037
#16 0x082e2067 in JOIN::optimize (this=0xa902130) at sql_select.cc:1029
#17 0x082e7843 in mysql_select (thd=0xa76a4a0, rref_pointer_array=0xa76bb40, tables=0xa901568, wild_num=0, fields=..., conds=0xa901898, og_num=0, order=0x0,
group=0x0, having=0x0, proc_param=0x0, select_options=2147764736, result=0xa8eb4c8, unit=0xa76b7b0, select_lex=0xa76ba28) at sql_select.cc:2538
#18 0x082dff49 in handle_select (thd=0xa76a4a0, lex=0xa76b750, result=0xa8eb4c8, setup_tables_done_option=0) at sql_select.cc:280
#19 0x08286dda in execute_sqlcom_select (thd=0xa76a4a0, all_tables=0xa901568) at sql_parse.cc:5166
#20 0x0827d736 in mysql_execute_command (thd=0xa76a4a0) at sql_parse.cc:2340
#21 0x08288e46 in mysql_parse (thd=0xa76a4a0,
rawbuf=0xa8eb0f8 "SELECT f5 FROM t1\nWHERE f2 != 'Missouri'\nOR f1 IS NULL\nOR f4 = 4\nOR f2\nAND ( f4 BETWEEN 6 AND 255 OR f3 IS NULL )", length=113,
found_semicolon=0xae9e1220) at sql_parse.cc:6092
#22 0x0827b222 in dispatch_command (command=COM_QUERY, thd=0xa76a4a0,
packet=0xa8b2179 "SELECT f5 FROM t1\nWHERE f2 != 'Missouri'\nOR f1 IS NULL\nOR f4 = 4\nOR f2\nAND ( f4 BETWEEN 6 AND 255 OR f3 IS NULL ) ",
packet_length=114) at sql_parse.cc:1269
#23 0x0827a47f in do_command (thd=0xa76a4a0) at sql_parse.cc:895
#24 0x08277490 in handle_one_connection (arg=0xa76a4a0) at sql_connect.cc:1138
#25 0x00821919 in start_thread () from /lib/libpthread.so.0
#26 0x0076acce in clone () from /lib/libc.so.6

testcase:

CREATE TABLE t1 (f1 int,f2 int,f3 int,f4 int,f5 int,
PRIMARY KEY (f4),KEY (f1),KEY (f2),KEY (f3)) ;
INSERT IGNORE INTO t1 VALUES (0,0,NULL,9,5),(0,0,1,9425,NULL);

SELECT f5 FROM t1
WHERE f2 != 'Missouri'
OR f1 IS NULL
OR f4 = 4
OR f2
AND ( f4 BETWEEN 6 AND 255 OR f3 IS NULL ) ;