ASAN errors in ha_mroonga::generic_reset

INSTALL SONAME 'ha_mroonga';

CREATE TABLE t (m TEXT, FULLTEXT(m)) ENGINE=Mroonga;

CREATE VIEW v AS SELECT *, MATCH(m) AGAINST('flower') AS score FROM t;

SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_NAME = 'v';

DROP VIEW v;

DROP TABLE t;

UNINSTALL SONAME 'ha_mroonga';

==3515627==ERROR: AddressSanitizer: use-after-poison on address 0x62d00028d428 at pc 0x7fa71f89bfc8 bp 0x7fa7227a8180 sp 0x7fa7227a8178

READ of size 8 at 0x62d00028d428 thread T5

    #0 0x7fa71f89bfc7 in ha_mroonga::generic_reset() /data/bld/10.11-asan-ubsan/storage/mroonga/ha_mroonga.cpp:12185

    #1 0x7fa71f89d229 in ha_mroonga::storage_reset() /data/bld/10.11-asan-ubsan/storage/mroonga/ha_mroonga.cpp:12225

    #2 0x7fa71f89dc51 in ha_mroonga::reset() /data/bld/10.11-asan-ubsan/storage/mroonga/ha_mroonga.cpp:12241

    #3 0x55848d0bcdc7 in handler::ha_reset() /data/bld/10.11-asan-ubsan/sql/handler.cc:7352

    #4 0x55848ba429a9 in close_thread_table(THD*, TABLE**) /data/bld/10.11-asan-ubsan/sql/sql_base.cc:1063

    #5 0x55848ba4430e in close_thread_tables(THD*) /data/bld/10.11-asan-ubsan/sql/sql_base.cc:1003

    #6 0x55848c192cc2 in fill_schema_table_by_open /data/bld/10.11-asan-ubsan/sql/sql_show.cc:4820

    #7 0x55848c2207c1 in get_all_tables(THD*, TABLE_LIST*, Item*) /data/bld/10.11-asan-ubsan/sql/sql_show.cc:5456

    #8 0x55848c205fae in get_schema_tables_result(JOIN*, enum_schema_table_state) /data/bld/10.11-asan-ubsan/sql/sql_show.cc:9275

    #9 0x55848c110c56 in JOIN::exec_inner() /data/bld/10.11-asan-ubsan/sql/sql_select.cc:4943

    #10 0x55848c111e11 in JOIN::exec() /data/bld/10.11-asan-ubsan/sql/sql_select.cc:4769

    #11 0x55848c108be4 in mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/bld/10.11-asan-ubsan/sql/sql_select.cc:5244

    #12 0x55848c109da4 in handle_select(THD*, LEX*, select_result*, unsigned long long) /data/bld/10.11-asan-ubsan/sql/sql_select.cc:600

    #13 0x55848bda0540 in execute_sqlcom_select /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:6430

    #14 0x55848bde3a8c in mysql_execute_command(THD*, bool) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:4013

    #15 0x55848be05f64 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:8183

    #16 0x55848be0f238 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:1906

    #17 0x55848be1be74 in do_command(THD*, bool) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:1419

    #18 0x55848c60e01d in do_handle_one_connection(CONNECT*, bool) /data/bld/10.11-asan-ubsan/sql/sql_connect.cc:1386

    #19 0x55848c60f17a in handle_one_connection /data/bld/10.11-asan-ubsan/sql/sql_connect.cc:1298

    #20 0x55848df705b0 in pfs_spawn_thread /data/bld/10.11-asan-ubsan/storage/perfschema/pfs.cc:2201

    #21 0x7fa72c8a81c3 in start_thread nptl/pthread_create.c:442

    #22 0x7fa72c92885b in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81

0x62d00028d428 is located 12328 bytes inside of 32760-byte region [0x62d00028a400,0x62d0002923f8)

allocated by thread T5 here:

    #0 0x7fa72dcb89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69

    #1 0x55848f1d0167 in my_malloc /data/bld/10.11-asan-ubsan/mysys/my_malloc.c:92

    #2 0x55848f1a407d in root_alloc /data/bld/10.11-asan-ubsan/mysys/my_alloc.c:66

    #3 0x55848f1a4630 in init_alloc_root /data/bld/10.11-asan-ubsan/mysys/my_alloc.c:178

    #4 0x55848c21efe6 in get_all_tables(THD*, TABLE_LIST*, Item*) /data/bld/10.11-asan-ubsan/sql/sql_show.cc:5361

    #5 0x55848c205fae in get_schema_tables_result(JOIN*, enum_schema_table_state) /data/bld/10.11-asan-ubsan/sql/sql_show.cc:9275

    #6 0x55848c110c56 in JOIN::exec_inner() /data/bld/10.11-asan-ubsan/sql/sql_select.cc:4943

    #7 0x55848c111e11 in JOIN::exec() /data/bld/10.11-asan-ubsan/sql/sql_select.cc:4769

    #8 0x55848c108be4 in mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/bld/10.11-asan-ubsan/sql/sql_select.cc:5244

    #9 0x55848c109da4 in handle_select(THD*, LEX*, select_result*, unsigned long long) /data/bld/10.11-asan-ubsan/sql/sql_select.cc:600

    #10 0x55848bda0540 in execute_sqlcom_select /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:6430

    #11 0x55848bde3a8c in mysql_execute_command(THD*, bool) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:4013

    #12 0x55848be05f64 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:8183

    #13 0x55848be0f238 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:1906

    #14 0x55848be1be74 in do_command(THD*, bool) /data/bld/10.11-asan-ubsan/sql/sql_parse.cc:1419

    #15 0x55848c60e01d in do_handle_one_connection(CONNECT*, bool) /data/bld/10.11-asan-ubsan/sql/sql_connect.cc:1386

    #16 0x55848c60f17a in handle_one_connection /data/bld/10.11-asan-ubsan/sql/sql_connect.cc:1298

    #17 0x55848df705b0 in pfs_spawn_thread /data/bld/10.11-asan-ubsan/storage/perfschema/pfs.cc:2201

    #18 0x7fa72c8a81c3 in start_thread nptl/pthread_create.c:442

Thread T5 created by T0 here:

    #0 0x7fa72dc49726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207

    #1 0x55848df65e7c in my_thread_create /data/bld/10.11-asan-ubsan/storage/perfschema/my_thread.h:52

    #2 0x55848df6d7a4 in pfs_spawn_thread_v1 /data/bld/10.11-asan-ubsan/storage/perfschema/pfs.cc:2252

    #3 0x55848b675fca in inline_mysql_thread_create /data/bld/10.11-asan-ubsan/include/mysql/psi/mysql_thread.h:1139

    #4 0x55848b675fca in create_thread_to_handle_connection(CONNECT*) /data/bld/10.11-asan-ubsan/sql/mysqld.cc:6139

    #5 0x55848b687d23 in create_new_thread(CONNECT*) /data/bld/10.11-asan-ubsan/sql/mysqld.cc:6198

    #6 0x55848b687f41 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/bld/10.11-asan-ubsan/sql/mysqld.cc:6260

    #7 0x55848b688b82 in handle_connections_sockets() /data/bld/10.11-asan-ubsan/sql/mysqld.cc:6383

    #8 0x55848b68902e in run_main_loop /data/bld/10.11-asan-ubsan/sql/mysqld.cc:5639

    #9 0x55848b68a3f4 in mysqld_main(int, char**) /data/bld/10.11-asan-ubsan/sql/mysqld.cc:6040

    #10 0x55848b65d981 in main /data/bld/10.11-asan-ubsan/sql/main.cc:34

    #11 0x7fa72c846249 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: use-after-poison /data/bld/10.11-asan-ubsan/storage/mroonga/ha_mroonga.cpp:12185 in ha_mroonga::generic_reset()

Shadow bytes around the buggy address:

  0x0c5a80049a30: 00 00 f7 04 f7 02 f7 04 f7 02 f7 04 f7 05 f7 00

  0x0c5a80049a40: 05 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c5a80049a50: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c5a80049a60: f7 f7 f7 f7 f7 f7 00 00 00 f7 00 00 f7 07 f7 f7

  0x0c5a80049a70: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 00 00

=>0x0c5a80049a80: 03 f7 00 00 f7[f7]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c5a80049a90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7

  0x0c5a80049aa0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 00 00 f7 06 f7

  0x0c5a80049ab0: 00 00 f7 00 00 f7 00 00 f7 05 f7 00 05 f7 02 f7

  0x0c5a80049ac0: 04 f7 00 00 00 00 00 f7 02 f7 00 00 00 00 00 00

  0x0c5a80049ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Shadow byte legend (one shadow byte represents 8 application bytes):

  Addressable:           00

  Partially addressable: 01 02 03 04 05 06 07 

  Heap left redzone:       fa

  Freed heap region:       fd

  Stack left redzone:      f1

  Stack mid redzone:       f2

  Stack right redzone:     f3

  Stack after return:      f5

  Stack use after scope:   f8

  Global redzone:          f9

  Global init order:       f6

  Poisoned by user:        f7

  Container overflow:      fc

  Array cookie:            ac

  Intra object redzone:    bb

  ASan internal:           fe

  Left alloca redzone:     ca

  Right alloca redzone:    cb

==3515627==ABORTING