Details
-
Bug
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
10.6, 10.11, 11.4
-
Can result in hang or crash
Description
--source include/have_innodb.inc
|
CREATE TABLE t (a INT KEY,b CHAR(0),c TEXT)Engine=InnoDB; |
ALTER TABLE t MODIFY a CHAR(0); |
SELECT * FROM t; |
SELECT * FROM t WHERE a IN (0x0ffffffffffffffe,0x0fffffffffffffff); |
Leads to:
|
CS 10.11.16 c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a (Debug, Clang 18.1.3-11) Build 27/01/2026 |
mariadbd: /test/10.11_dbg/storage/innobase/btr/btr0pcur.cc:83: void btr_pcur_store_position(btr_pcur_t *, mtr_t *): Assertion `block->page.buf_fix_count()' failed.
|
|
CS 10.11.16 c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a (Debug, Clang 18.1.3-11) Build 27/01/2026 |
Core was generated by `/test/MD270126-mariadb-10.11.16-linux-x86_64-dbg/bin/mariadbd --no-defaults --m'.
|
Program terminated with signal SIGABRT, Aborted.
|
Download failed: Invalid argument. Continuing without source file ./nptl/./nptl/pthread_kill.c.
|
#0 __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44
|
 |
[Current thread is 1 (LWP 2887116)]
|
(gdb) bt
|
#0 __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44
|
#1 __pthread_kill_internal (signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:78
|
#2 __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6)at ./nptl/pthread_kill.c:89
|
#3 0x00007671daa4527e in __GI_raise (sig=sig@entry=6)at ../sysdeps/posix/raise.c:26
|
#4 0x00007671daa288ff in __GI_abort () at ./stdlib/abort.c:79
|
#5 0x00007671daa2881b in __assert_fail_base (fmt=0x7671dabd01e8 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x604ceac9a7c8 "block->page.buf_fix_count()", file=file@entry=0x604ceac9ea2e "/test/10.11_dbg/storage/innobase/btr/btr0pcur.cc", line=line@entry=83, function=function@entry=0x604ceac9ea5f "void btr_pcur_st
|
ore_position(btr_pcur_t *, mtr_t *)") at ./assert/assert.c:96
|
#6 0x00007671daa3b517 in __assert_fail (assertion=0x604ceac9a7c8 "block->page.buf_fix_count()", file=0x604ceac9ea2e "/test/10.11_dbg/storage/innobase/btr/btr0pcur.cc", line=83, function=0x604ceac9ea5f "void btr_pcur_store_position(btr_pcur_t *, mtr_t *)") at ./assert/assert.c:105
|
#7 0x0000604cea6a2812 in btr_pcur_store_position (cursor=0x7670f006b178, mtr=0x7671d836c058) at /test/10.11_dbg/storage/innobase/btr/btr0pcur.cc:83
|
#8 0x0000604cea5acd9f in row_search_mvcc (buf=0x7670f0069768 "\377", mode=PAGE_CUR_GE, prebuilt=0x7670f006afb0, match_mode=0, direction=0)at /test/10.11_dbg/storage/innobase/row/row0sel.cc:5848
|
#9 0x0000604cea34cac9 in ha_innobase::index_read (this=0x7670f0068f68, buf=0x7670f0069768 "\377", key_ptr=0x7670f0085000 "\245\217\217\217\217\217\217\217\245\217\217\217\217\217\217\217", key_len=0, find_flag=HA_READ_KEY_OR_NEXT)at /test/10.11_dbg/storage/innobase/handler/ha_innodb.cc:9021
|
#10 0x0000604ce9e968ea in handler::index_read_map (this=0x7670f0068f68, buf=0x7670f0069768 "\377", key=0x7670f0085000 "\245\217\217\217\217\217\217\217\245\217\217\217\217\217\217\217", keypart_map=1, find_flag=HA_READ_KEY_OR_NEXT)at /test/10.11_dbg/sql/handler.h:3877
|
#11 0x0000604ce9f7fa1b in handler::ha_index_read_map (this=0x7670f0068f68, buf=0x7670f0069768 "\377", key=0x7670f0085000 "\245\217\217\217\217\217\217\217\245\217\217\217\217\217\217\217", keypart_map=1, find_flag=HA_READ_KEY_OR_NEXT)at /test/10.11_dbg/sql/handler.cc:3670
|
#12 0x0000604ce9f88924 in handler::read_range_first (this=0x7670f0068f68, start_key=0x7670f00690b0, end_key=0x7670f00690d0, eq_range_arg=false, sorted=true) at /test/10.11_dbg/sql/handler.cc:6839
|
#13 0x0000604ce9dc7c78 in handler::multi_range_read_next (this=0x7670f0068f68, range_info=0x7671d836c6b8) at /test/10.11_dbg/sql/multi_range_read.cc:518
|
#14 0x0000604ce9dc7d89 in Mrr_simple_index_reader::get_next (this=0x7670f00695e8, range_info=0x7671d836c6b8)at /test/10.11_dbg/sql/multi_range_read.cc:555
|
#15 0x0000604ce9dca5ea in DsMrr_impl::dsmrr_next (this=0x7670f0069498, range_info=0x7671d836c6b8) at /test/10.11_dbg/sql/multi_range_read.cc:1659
|
#16 0x0000604cea365ab4 in ha_innobase::multi_range_read_next (this=0x7670f0068f68, range_info=0x7671d836c6b8)at /test/10.11_dbg/storage/innobase/handler/ha_innodb.cc:20200
|
#17 0x0000604ce9a28bb3 in QUICK_RANGE_SELECT::get_next (this=0x7670f0084dc0)at /test/10.11_dbg/sql/opt_range.cc:12985
|
#18 0x0000604ce9a51d0d in rr_quick (info=0x7670f0017408)at /test/10.11_dbg/sql/records.cc:403
|
#19 0x0000604ce9a3acb6 in READ_RECORD::read_record (this=0x7670f0017408)at /test/10.11_dbg/sql/records.h:81
|
#20 0x0000604ce9c20fc6 in join_init_read_record (tab=0x7670f0017330)at /test/10.11_dbg/sql/sql_select.cc:24116
|
#21 0x0000604ce9bfdd11 in sub_select (join=0x7670f0014fd0, join_tab=0x7670f0017330, end_of_records=false)at /test/10.11_dbg/sql/sql_select.cc:23073
|
#22 0x0000604ce9c240dd in do_select (join=0x7670f0014fd0, procedure=0x0)at /test/10.11_dbg/sql/sql_select.cc:22599
|
#23 0x0000604ce9c2346f in JOIN::exec_inner (this=0x7670f0014fd0)at /test/10.11_dbg/sql/sql_select.cc:5023
|
#24 0x0000604ce9c22700 in JOIN::exec (this=0x7670f0014fd0)at /test/10.11_dbg/sql/sql_select.cc:4807
|
#25 0x0000604ce9bfe656 in mysql_select (thd=0x7670f0000d58, tables=0x7670f0013b78, fields=@0x7670f0013800: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x7670f0013b28, last = 0x7670f0015b38, elements = 3}, <No data fields>}, conds=0x7670f0014540, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=216452
|
5824, result=0x7670f0014fa8, unit=0x7670f0005028, select_lex=0x7670f0013548)at /test/10.11_dbg/sql/sql_select.cc:5285
|
#26 0x0000604ce9bfe0e5 in handle_select (thd=0x7670f0000d58, lex=0x7670f0004f50, result=0x7670f0014fa8, setup_tables_done_option=0)at /test/10.11_dbg/sql/sql_select.cc:601
|
#27 0x0000604ce9ba5711 in execute_sqlcom_select (thd=0x7670f0000d58, all_tables=0x7670f0013b78) at /test/10.11_dbg/sql/sql_parse.cc:6463
|
#28 0x0000604ce9b991ea in mysql_execute_command (thd=0x7670f0000d58, is_called_from_prepared_stmt=false)at /test/10.11_dbg/sql/sql_parse.cc:4042
|
#29 0x0000604ce9b91314 in mysql_parse (thd=0x7670f0000d58, rawbuf=0x7670f0013460 "SELECT * FROM t WHERE a IN (0x0", 'f' <repeats 14 times>, "e,0x0", 'f' <repeats 15 times>, ")", length=66, parser_state=0x7671d836ea20) at /test/10.11_dbg/sql/sql_parse.cc:8223
|
#30 0x0000604ce9b8e7b9 in dispatch_command (command=COM_QUERY, thd=0x7670f0000d58, packet=0x7670f000aee9 "", packet_length=66, blocking=true) at /test/10.11_dbg/sql/sql_parse.cc:1924
|
#31 0x0000604ce9b91ec3 in do_command (thd=0x7670f0000d58, blocking=true)at /test/10.11_dbg/sql/sql_parse.cc:1434
|
#32 0x0000604ce9d6f429 in do_handle_one_connection (connect=0x604cff4eb058, put_in_cache=true) at /test/10.11_dbg/sql/sql_connect.cc:1475
|
#33 0x0000604ce9d6f1c2 in handle_one_connection (arg=0x604cff5d2238)at /test/10.11_dbg/sql/sql_connect.cc:1387
|
#34 0x00007671daa9caa4 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
|
#35 0x00007671dab29c6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
|
|
Bug Detection Matrix |
Rel o/d Build Commit UniqueID observed
|
CS 10.6 dbg 270126 5b6ad325d2e523b95ab7463f093bd8c0d9529edd block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
|
CS 10.6 opt 270126 5b6ad325d2e523b95ab7463f093bd8c0d9529edd No bug found
|
CS 10.11 dbg 270126 c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
|
CS 10.11 opt 270126 c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a No bug found
|
CS 11.4 dbg 270126 ca39e66060d4735f91fd46d9784b4c91ed6746aa block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
|
CS 11.4 opt 270126 ca39e66060d4735f91fd46d9784b4c91ed6746aa No bug found
|
CS 11.8 dbg 270126 8a0f327675e9b4a1e0ae2e3a97fe001122a9db03 No bug found
|
CS 11.8 opt 270126 8a0f327675e9b4a1e0ae2e3a97fe001122a9db03 No bug found
|
CS 12.2 dbg 270126 d640758b9478f4da9ac0023b1ac389ffc23aa9bb No bug found
|
CS 12.2 opt 270126 d640758b9478f4da9ac0023b1ac389ffc23aa9bb No bug found
|
CS 12.3 dbg 270126 346c7afe9b7071ce9c47892a83d69944b608b3da No bug found
|
CS 12.3 opt 270126 346c7afe9b7071ce9c47892a83d69944b608b3da No bug found
|
ES 10.6 dbg 270126 0fe345fff3a0463224ca714831303d40fb83648b block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
|
ES 10.6 opt 270126 0fe345fff3a0463224ca714831303d40fb83648b No bug found
|
ES 11.4 dbg 270126 34f616d5fd2c649d0c79acb4e2423c90b8f10436 block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
|
ES 11.4 opt 270126 34f616d5fd2c649d0c79acb4e2423c90b8f10436 No bug found
|
ES 11.8 dbg 270126 405ee76b60c4ab82155f339136ed20d3b7363717 No bug found
|
ES 11.8 opt 270126 405ee76b60c4ab82155f339136ed20d3b7363717 No bug found
|
Attachments
Issue Links
- is blocked by
-
MDEV-36438 Server hangs or fails on assertion after modifying key column to CHAR(0) or BINARY(0), various UBSAN issues
-
- Confirmed
-
- relates to
-
MDEV-24796 Assertion `page_has_next(block->frame) || rec_is_alter_metadata(p, *index) || block->page.id().page_no() != index->page' failed in btr_pcur_store_position and other related asserts
-
- Closed
-