Details
-
Bug
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Duplicate
-
12.1.1
-
Ubuntu 20.04 x86-64, docker image mariadb:12.1.1
-
Not for Release Notes
Description
PoC:
SELECT ( ( 360 ) IN ( WITH x AS ( SELECT 1 ) ( SELECT ( x ) FROM x ) ) ) FROM ( WITH x ( x ) AS ( SELECT json_normalize ( 'uri1' ) ) SELECT x FROM ( SELECT REPEAT ( instr ( ( x ) , -128 ) , CASE WHEN 0 THEN 'b' ELSE '1995-09-01' END ) x , 10 FROM x UNION SELECT x , x FROM x ) x ) x; |
docker log:
#0 0x5c141f665b17 (heap_rkey+0x37)
|
#1 0x5c141f13a022 (_ZN7handler17ha_index_read_mapEPhPKhm16ha_rkey_function+0x162)
|
#2 0x5c141ed4f71c (_Z14join_read_key2P3THDP13st_join_tableP5TABLEP12st_table_ref+0x3dc)
|
#3 0x5c141ef3279e (_ZN25Expression_cache_tmptable11check_valueEPP4Item+0x4e)
|
#4 0x5c141f17c54b (_ZN18Item_cache_wrapper7val_intEv+0xdb)
|
#5 0x5c141f1d1396 (_ZN12cmp_item_int11store_valueEP4Item+0x36)
|
#6 0x5c141f1ae9c3 (_ZN12cmp_item_row11store_valueEP4Item+0x73)
|
#7 0x5c141f1b3971 (_ZN12Item_func_in8val_boolEv+0x241)
|
#8 0x5c141f1b725c (_ZN13Item_cond_and8val_boolEv+0x4c)
|
#9 0x5c141eaef99a (_ZN14Item_bool_func7val_intEv+0x2a)
|
#10 0x5c141efda1c9 (_ZNK17Type_handler_long9Item_sendEP4ItemP8ProtocolP8st_value+0x39)
|
#11 0x5c141eb0a66f (_ZN8Protocol19send_result_set_rowEP4ListI4ItemE+0x13f)
|
#12 0x5c141ebd477e (_ZN11select_send9send_dataER4ListI4ItemE+0x4e)
|
#13 0x5c141ebd4234 (_ZN18select_result_sink20send_data_with_checkER4ListI4ItemEP18st_select_lex_unity+0x74)
|
#14 0x5c141ed11a27 (_ZL8end_sendP4JOINP13st_join_tableb+0x3f7)
|
#15 0x5c141ed4ef06 (_ZL20evaluate_join_recordP4JOINP13st_join_tablei+0x596)
|
#16 0x5c141ece2d46 (_Z10sub_selectP4JOINP13st_join_tableb+0x526)
|
#17 0x5c141ed19a29 (_ZN4JOIN10exec_innerEv+0x1489)
|
#18 0x5c141ed184b6 (_ZN4JOIN4execEv+0x66)
|
#19 0x5c141ece3cd4 (_Z12mysql_selectP3THDP10TABLE_LISTR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x5e4)
|
#20 0x5c141ece3635 (_Z13handle_selectP3THDP3LEXP13select_resulty+0x265)
|
#21 0x5c141ec83fc8 (_ZL21execute_sqlcom_selectP3THDP10TABLE_LIST+0x698)
|
#22 0x5c141ec7a095 (_Z21mysql_execute_commandP3THDb+0x3f65)
|
#23 0x5c141ec6f485 (_Z11mysql_parseP3THDPcjP12Parser_state+0x345)
|
#24 0x5c141ec6b9d1 (_Z16dispatch_command19enum_server_commandP3THDPcjb+0x16b1)
|
#25 0x5c141ec6fcd1 (_Z10do_commandP3THDb+0x4b1)
|
#26 0x5c141eea5b74 (_Z24do_handle_one_connectionP7CONNECTb+0x2a4)
|
#27 0x5c141eea57a3 (handle_one_connection+0xd3)
|
#28 0x5c141f56e0b4 (pfs_spawn_thread+0x104)
|
#29 0x786bd395b609 (start_thread+0xd9)
|
#30 0x786bd367d353 (clone+0x43)
|
Attachments
Issue Links
- duplicates
-
MDEV-37647 Crash at set_field_to_null_with_conversions
-
- Confirmed
-