Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-38395

Assertion `(yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)' failed in MYSQLparse

    XMLWordPrintable

Details

    • Not for Release Notes

    Description

      New regression in 12.1

      SET max_session_mem_used=8192;
      SELECT * FROM mysql.user;
      

      Or

      SET max_session_mem_used=8192;
      DELETE FROM mysql.user WHERE USER='' OR USER='';
      

      Leads to:

      CS 12.2.0 fd15fd2765b53d0c070dd01d86fb231024b8f284 (Debug, Clang 21.1.3-20250923) Build 10/11/2025

      mariadbd: /test/12.2_dbg/sql/sql_yacc.yy:9591: int MYSQLparse(THD *): Assertion `(yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)' failed.
      

      CS 12.2.0 fd15fd2765b53d0c070dd01d86fb231024b8f284 (Debug, Clang 21.1.3-20250923) Build 10/11/2025

      Core was generated by `/test/MD101125-mariadb-12.2.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --max'.
      Program terminated with signal SIGABRT, Aborted.
      Download failed: Invalid argument.  Continuing without source file ./nptl/./nptl/pthread_kill.c.
      #0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44
       
      [Current thread is 1 (LWP 4118652)]
      (gdb) bt
      #0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44
      #1  __pthread_kill_internal (signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:78
      #2  __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6)at ./nptl/pthread_kill.c:89
      #3  0x000071e77ac4526e in __GI_raise (sig=sig@entry=6)at ../sysdeps/posix/raise.c:26
      #4  0x000071e77ac288ff in __GI_abort () at ./stdlib/abort.c:79
      #5  0x000071e77ac2881b in __assert_fail_base (fmt=0x71e77add01e8 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x6432b8e02613 "(yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)", file=file@entry=0x6432b8edefea "/test/12.2_dbg/sql/sql_yacc.yy", line=line@entry=9591, function=function@entry=0x6432b8e02d4c "int MYSQLparse(THD *)")at ./assert/assert.c:94
      #6  0x000071e77ac3b507 in __assert_fail (assertion=0x6432b8e02613 "(yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)", file=0x6432b8edefea "/test/12.2_dbg/sql/sql_yacc.yy", line=9591, function=0x6432b8e02d4c "int MYSQLparse(THD *)") at ./assert/assert.c:103
      #7  0x00006432b99a3d56 in MYSQLparse (thd=0x71e648000d58)at /test/12.2_dbg/sql/sql_yacc.yy:9591
      #8  0x00006432b9a55a18 in parse_sql (thd=0x71e648000d58, parser_state=0x71e7703fafd0, creation_ctx=0x71e64801ec20, do_pfs_digest=false) at /test/12.2_dbg/sql/sql_parse.cc:10308
      #9  0x00006432b9bbb489 in mysql_make_view (thd=0x71e648000d58, share=0x71e648024c70, view_table_alias=0x71e64801a738, open_view_no_parse=false) at /test/12.2_dbg/sql/sql_view.cc:1535
      #10 0x00006432b98e76ee in open_table (thd=0x71e648000d58, table_list=0x71e64801a738, ot_ctx=0x71e7703fbfd8)at /test/12.2_dbg/sql/sql_base.cc:2230
      #11 0x00006432b98ecba1 in open_and_process_table (thd=0x71e648000d58, tables=0x71e64801a738, counter=0x71e64801b770, flags=0, prelocking_strategy=0x71e64801b7a8, has_prelocking_list=false, ot_ctx=0x71e7703fbfd8) at /test/12.2_dbg/sql/sql_base.cc:4273
      #12 0x00006432b98eb9eb in open_tables (thd=0x71e648000d58, options=@0x71e648006764: {m_options = DDL_options_st::OPT_NONE}, start=0x71e7703fc0e8, counter=0x71e64801b770, flags=0, prelocking_strategy=0x71e64801b7a8) at /test/12.2_dbg/sql/sql_base.cc:4756
      #13 0x00006432b98eec8a in open_tables (thd=0x71e648000d58, tables=0x71e7703fc0e8, counter=0x71e64801b770, flags=0, prelocking_strategy=0x71e64801b7a8) at /test/12.2_dbg/sql/sql_base.h:275
      #14 0x00006432b98eee2b in open_tables_for_query (thd=0x71e648000d58, tables=0x71e64801a738, table_count=0x71e64801b770, flags=0, prelocking_strategy=0x71e64801b7a8) at /test/12.2_dbg/sql/sql_base.cc:5937
      #15 0x00006432b9af73d0 in Sql_cmd_dml::prepare (this=0x71e64801b758, thd=0x71e648000d58) at /test/12.2_dbg/sql/sql_select.cc:34735
      #16 0x00006432b9af75bb in Sql_cmd_dml::execute (this=0x71e64801b758, thd=0x71e648000d58) at /test/12.2_dbg/sql/sql_select.cc:34798
      #17 0x00006432b9a4980e in mysql_execute_command (thd=0x71e648000d58, is_called_from_prepared_stmt=false) at /test/12.2_dbg/sql/sql_parse.cc:4400
      #18 0x00006432b9a40cf8 in mysql_parse (thd=0x71e648000d58, rawbuf=0x71e648019ee0 "DELETE FROM mysql.user WHERE USER='' OR USER=''", length=47, parser_state=0x71e7703fda00)at /test/12.2_dbg/sql/sql_parse.cc:7888
      #19 0x00006432b9a3e4d9 in dispatch_command (command=COM_QUERY, thd=0x71e648000d58, packet=0x71e64800b239 "DELETE FROM mysql.user WHERE USER='' OR USER=''", packet_length=47, blocking=true) at /test/12.2_dbg/sql/sql_parse.cc:1878
      #20 0x00006432b9a4177a in do_command (thd=0x71e648000d58, blocking=true)at /test/12.2_dbg/sql/sql_parse.cc:1417
      #21 0x00006432b9c34afe in do_handle_one_connection (connect=0x6432bbe6f098, put_in_cache=true) at /test/12.2_dbg/sql/sql_connect.cc:1503
      #22 0x00006432b9c348e1 in handle_one_connection (arg=0x6432bbdae878)at /test/12.2_dbg/sql/sql_connect.cc:1415
      #23 0x000071e77ac9ca94 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #24 0x000071e77ad29c3c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Bug Detection Matrix

          Rel    o/d  Build   Commit                                    UniqueID observed             
      CS  10.6   dbg  101125  759e3523e3d832b174cf0a612704da38b2557b40  No bug found                  
      CS  10.6   opt  101125  759e3523e3d832b174cf0a612704da38b2557b40  No bug found                  
      CS  10.11  dbg  101125  536cd151f0370216d9ba4c15f40c7037060972a5  No bug found                  
      CS  10.11  opt  101125  536cd151f0370216d9ba4c15f40c7037060972a5  No bug found                  
      CS  11.4   dbg  101125  a1bb5c94fda453baa99e57e3927eaa7cd3c8bafe  No bug found                  
      CS  11.4   opt  101125  a1bb5c94fda453baa99e57e3927eaa7cd3c8bafe  No bug found                  
      CS  11.8   dbg  101125  e0428264d0095472c015eb58c46be68ca1a320ee  No bug found                  
      CS  11.8   opt  101125  e0428264d0095472c015eb58c46be68ca1a320ee  No bug found                  
      CS  12.1   dbg  101125  ba00960fdaee67a4efff6866e31f446bf486a1c2  (yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)|SIGABRT|MYSQLparse|parse_sql|mysql_make_view|open_table
      CS  12.1   opt  101125  ba00960fdaee67a4efff6866e31f446bf486a1c2  No bug found                  
      CS  12.2   dbg  101125  fd15fd2765b53d0c070dd01d86fb231024b8f284  (yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)|SIGABRT|MYSQLparse|parse_sql|mysql_make_view|open_table
      CS  12.2   opt  101125  fd15fd2765b53d0c070dd01d86fb231024b8f284  No bug found                  
      CS  12.3   dbg  091225  e85bc659188be021897e8578aec42becfbb58c27  (yyvsp[-3].simple_string) < (yyvsp[-1].simple_string)|SIGABRT|MYSQLparse|parse_sql|mysql_make_view|open_table
      CS  12.3   opt  091225  e85bc659188be021897e8578aec42becfbb58c27  No bug found                  
      ES  10.6   dbg  101125  f0d4d34fb0314b03fddb71fb9dbde372744a8c13  No bug found                  
      ES  10.6   opt  101125  f0d4d34fb0314b03fddb71fb9dbde372744a8c13  No bug found                  
      ES  11.4   dbg  101125  b81ec4b57a5ddce88b8e2b2d16b64625ffdaa0e6  No bug found                  
      ES  11.4   opt  101125  b81ec4b57a5ddce88b8e2b2d16b64625ffdaa0e6  No bug found                  
      ES  11.8   dbg  101125  db36e8fb3bcdae26dd0acdcb2b52f7f4eb014df6  No bug found                  
      ES  11.8   opt  101125  db36e8fb3bcdae26dd0acdcb2b52f7f4eb014df6  No bug found                  
      MS  5.5    dbg  070123  bac287c315b1792e7ae33f91add6a60292f9bae8  No bug found                  
      MS  5.5    opt  070123  bac287c315b1792e7ae33f91add6a60292f9bae8  No bug found                  
      MS  5.6    dbg  070123  dab95781a1244104d6b87020ac2fc4d190ba2946  No bug found                  
      MS  5.6    opt  070123  dab95781a1244104d6b87020ac2fc4d190ba2946  No bug found                  
      MS  5.7    dbg  070525  f7680e98b6bbe3500399fbad465d08a6b75d7a5c  No bug found                  
      MS  5.7    opt  070525  f7680e98b6bbe3500399fbad465d08a6b75d7a5c  No bug found                  
      MS  8.0    dbg  060224  49ef33f7edadef3ae04665e73d1babd40179a4f1  No bug found                  
      MS  8.0    opt  060224  49ef33f7edadef3ae04665e73d1babd40179a4f1  No bug found                  
      MS  9.1    dbg  211024  61a3a1d8ef15512396b4c2af46e922a19bf2b174  No bug found                  
      MS  9.1    opt  211024  61a3a1d8ef15512396b4c2af46e922a19bf2b174  No bug found                  
      

      Caused by:

      ba00960fdaee67a4efff6866e31f446bf486a1c2 is the first bad commit
      commit ba00960fdaee67a4efff6866e31f446bf486a1c2
      Merge: 4af88ced488 c21d462e6ad
      Author: Oleksandr Byelkin <sanja@mariadb.com>
      Date:   Tue Nov 4 22:47:26 2025 +0100
       
          Merge branch 'bb-11.8-release' into bb-12.1-release
      

      Issue is very lightly sporadic. Testcase is CLI and MTR compatible. There are likely additional ways to trigger this assert. Seen regularly in recent testing.

      Attachments

        Issue Links

          Activity

            People

              serg Sergei Golubchik
              Roel Roel Van de Paar
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.