Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Duplicate
-
12.1.1
-
Ubuntu 20.04 x86-64, docker image mariadb:12.1.1
-
Not for Release Notes
Description
PoC:
SELECT ( WITH x AS ( WITH x ( x ) AS ( SELECT ( 1.000000 ) ) SELECT x FROM x ) SELECT * FROM x WHERE ( SELECT AVG ( x ) OVER ( ORDER BY JSON_ARRAY_INTERSECT ( '[["1", "7"], ["2", "6"], ["3", "8"]]' , '[["2","6"],["3","8"],["4","5"],["1","7"]]' ) ) FROM x ) ) |
docker log:
#0 0x597d1ec5fb17 (my_hash_delete+0x517)
|
#1 0x597d1e19ef71 (_ZN30Item_func_json_array_intersect7val_strEP6String+0x691)
|
#2 0x597d1e3c3275 (_ZN4Item17save_str_in_fieldEP5Fieldb+0xb5)
|
#3 0x597d1e3c3741 (_ZN4Item13save_in_fieldEP5Fieldb+0x51)
|
#4 0x597d1df9de19 (_ZL9end_writeP4JOINP13st_join_tableb+0x1b9)
|
#5 0x597d1df9ff06 (_ZL20evaluate_join_recordP4JOINP13st_join_tablei+0x596)
|
#6 0x597d1df33d46 (_Z10sub_selectP4JOINP13st_join_tableb+0x526)
|
#7 0x597d1df6aa29 (_ZN4JOIN10exec_innerEv+0x1489)
|
#8 0x597d1df694b6 (_ZN4JOIN4execEv+0x66)
|
#9 0x597d1e058e23 (_ZN18st_select_lex_unit10exec_innerEv+0x763)
|
#10 0x597d1de51804 (_ZL18mysql_derived_fillP3THDP3LEXP10TABLE_LIST+0x284)
|
#11 0x597d1de52418 (_Z27mysql_handle_single_derivedP3LEXP10TABLE_LISTj+0x158)
|
#12 0x597d1df8b2d6 (_ZN13st_join_table12preread_initEv+0xe6)
|
#13 0x597d1df6721f (_Z21join_init_read_recordP13st_join_table+0x24f)
|
#14 0x597d1e14e5c3 (_ZN10JOIN_CACHE21join_matching_recordsEb+0x233)
|
#15 0x597d1e14e1a2 (_ZN10JOIN_CACHE12join_recordsEb+0x2d2)
|
#16 0x597d1df9f6e8 (_Z16sub_select_cacheP4JOINP13st_join_tableb+0x48)
|
#17 0x597d1df6aaa5 (_ZN4JOIN10exec_innerEv+0x1505)
|
#18 0x597d1df694b6 (_ZN4JOIN4execEv+0x66)
|
#19 0x597d1df34cd4 (_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x5e4)
|
#20 0x597d1df34635 (_Z13handle_selectP3THDP3LEXP13select_resulty+0x265)
|
#21 0x597d1ded4fc8 (_ZL21execute_sqlcom_selectP3THDP10TABLE_LIST+0x698)
|
#22 0x597d1decb095 (_Z21mysql_execute_commandP3THDb+0x3f65)
|
#23 0x597d1dec0485 (_Z11mysql_parseP3THDPcjP12Parser_state+0x345)
|
#24 0x597d1debc9d1 (_Z16dispatch_command19enum_server_commandP3THDPcjb+0x16b1)
|
#25 0x597d1dec0cd1 (_Z10do_commandP3THDb+0x4b1)
|
#26 0x597d1e0f6b74 (_Z24do_handle_one_connectionP7CONNECTb+0x2a4)
|
#27 0x597d1e0f67a3 (handle_one_connection+0xd3)
|
#28 0x597d1e7bf0b4 (pfs_spawn_thread+0x104)
|
#29 0x7123186b1609 (start_thread+0xd9)
|
#30 0x7123183d3353 (clone+0x43)
|
Attachments
Issue Links
- duplicates
-
MDEV-36809 json_array_intersect crashs when unused table ref provided
-
- In Review
-