Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-37624

Server crashes at Item_string::save_in_field

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Duplicate
    • 12.1.1
    • N/A
    • Server
    • Ubuntu 20.04 x86-64, docker image mariadb:12.1.1
    • Not for Release Notes

    Description

      PoC:

      SELECT ( WITH x ( x ) AS ( SELECT 1 INTERSECT SELECT ( WITH x ( x ) AS ( SELECT json_normalize ( 'uri1' ) ) SELECT x FROM ( SELECT REPEAT ( instr ( ( x ) , -128 ) , CASE WHEN 0 THEN 'b' ELSE '1995-09-01' END ) x , 10 FROM x UNION SELECT x , x FROM x ) x ) ) ( SELECT x FROM x WHERE x = 'x' ) ) x
      

      docker log:

      #0 0x63367bf58888 (_ZN11Item_string13save_in_fieldEP5Fieldb+0xb8)
      #1 0x63367bb49354 (_ZN14store_key_item10copy_innerEv+0x94)
      #2 0x63367bb39815 (_ZN9store_key4copyEP3THD+0x155)
      #3 0x63367bb1a954 (_ZL18create_ref_for_keyP4JOINP13st_join_tableP8keyuse_tby+0x1864)
      #4 0x63367baee463 (_ZN4JOIN20get_best_combinationEv+0x7b3)
      #5 0x63367bad4116 (_ZN4JOIN15optimize_stage2Ev+0x96)
      #6 0x63367bae2fab (_ZN4JOIN14optimize_innerEv+0x2cfb)
      #7 0x63367bad3f8b (_ZN4JOIN8optimizeEv+0x13b)
      #8 0x63367ba18eac (_ZN13st_select_lex31optimize_unflattened_subqueriesEb+0x69c)
      #9 0x63367bd0d987 (_ZN4JOIN28optimize_constant_subqueriesEv+0x47)
      #10 0x63367bae108e (_ZN4JOIN14optimize_innerEv+0xdde)
      #11 0x63367bad3f8b (_ZN4JOIN8optimizeEv+0x13b)
      #12 0x63367bbed5ab (_ZN18st_select_lex_unit8optimizeEv+0x74b)
      #13 0x63367b9e4ed3 (_ZL22mysql_derived_optimizeP3THDP3LEXP10TABLE_LIST+0x183)
      #14 0x63367b9e7418 (_Z27mysql_handle_single_derivedP3LEXP10TABLE_LISTj+0x158)
      #15 0x63367bae2687 (_ZN4JOIN14optimize_innerEv+0x23d7)
      #16 0x63367bad3f8b (_ZN4JOIN8optimizeEv+0x13b)
      #17 0x63367bac9c04 (_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x514)
      #18 0x63367bac9635 (_Z13handle_selectP3THDP3LEXP13select_resulty+0x265)
      #19 0x63367ba69fc8 (_ZL21execute_sqlcom_selectP3THDP10TABLE_LIST+0x698)
      #20 0x63367ba60095 (_Z21mysql_execute_commandP3THDb+0x3f65)
      #21 0x63367ba55485 (_Z11mysql_parseP3THDPcjP12Parser_state+0x345)
      #22 0x63367ba519d1 (_Z16dispatch_command19enum_server_commandP3THDPcjb+0x16b1)
      #23 0x63367ba55cd1 (_Z10do_commandP3THDb+0x4b1)
      #24 0x63367bc8bb74 (_Z24do_handle_one_connectionP7CONNECTb+0x2a4)
      #25 0x63367bc8b7a3 (handle_one_connection+0xd3)
      #26 0x63367c3540b4 (pfs_spawn_thread+0x104)
      #27 0x77192e6b4609 (start_thread+0xd9)
      #28 0x77192e3d6353 (clone+0x43)
      

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              Yuxiao Guo Yuxiao Guo
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.