Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-38725

void btr_pcur_store_position(btr_pcur_t *, mtr_t *): Assertion `block->page.buf_fix_count()' failed

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      --source include/have_innodb.inc
      CREATE TABLE t (a INT KEY,b CHAR(0),c TEXT)Engine=InnoDB;
      ALTER TABLE t MODIFY a CHAR(0);
      SELECT * FROM t;
      SELECT * FROM t WHERE a IN (0x0ffffffffffffffe,0x0fffffffffffffff);
      

      Leads to:

      CS 10.11.16 c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a (Debug, Clang 18.1.3-11) Build 27/01/2026

      mariadbd: /test/10.11_dbg/storage/innobase/btr/btr0pcur.cc:83: void btr_pcur_store_position(btr_pcur_t *, mtr_t *): Assertion `block->page.buf_fix_count()' failed.
      

      CS 10.11.16 c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a (Debug, Clang 18.1.3-11) Build 27/01/2026

      Core was generated by `/test/MD270126-mariadb-10.11.16-linux-x86_64-dbg/bin/mariadbd --no-defaults --m'.
      Program terminated with signal SIGABRT, Aborted.
      Download failed: Invalid argument.  Continuing without source file ./nptl/./nptl/pthread_kill.c.
      #0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44
       
      [Current thread is 1 (LWP 2887116)]
      (gdb) bt
      #0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44
      #1  __pthread_kill_internal (signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:78
      #2  __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6)at ./nptl/pthread_kill.c:89
      #3  0x00007671daa4527e in __GI_raise (sig=sig@entry=6)at ../sysdeps/posix/raise.c:26
      #4  0x00007671daa288ff in __GI_abort () at ./stdlib/abort.c:79
      #5  0x00007671daa2881b in __assert_fail_base (fmt=0x7671dabd01e8 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x604ceac9a7c8 "block->page.buf_fix_count()", file=file@entry=0x604ceac9ea2e "/test/10.11_dbg/storage/innobase/btr/btr0pcur.cc", line=line@entry=83, function=function@entry=0x604ceac9ea5f "void btr_pcur_st
      ore_position(btr_pcur_t *, mtr_t *)") at ./assert/assert.c:96
      #6  0x00007671daa3b517 in __assert_fail (assertion=0x604ceac9a7c8 "block->page.buf_fix_count()", file=0x604ceac9ea2e "/test/10.11_dbg/storage/innobase/btr/btr0pcur.cc", line=83, function=0x604ceac9ea5f "void btr_pcur_store_position(btr_pcur_t *, mtr_t *)") at ./assert/assert.c:105
      #7  0x0000604cea6a2812 in btr_pcur_store_position (cursor=0x7670f006b178, mtr=0x7671d836c058) at /test/10.11_dbg/storage/innobase/btr/btr0pcur.cc:83
      #8  0x0000604cea5acd9f in row_search_mvcc (buf=0x7670f0069768 "\377", mode=PAGE_CUR_GE, prebuilt=0x7670f006afb0, match_mode=0, direction=0)at /test/10.11_dbg/storage/innobase/row/row0sel.cc:5848
      #9  0x0000604cea34cac9 in ha_innobase::index_read (this=0x7670f0068f68, buf=0x7670f0069768 "\377", key_ptr=0x7670f0085000 "\245\217\217\217\217\217\217\217\245\217\217\217\217\217\217\217", key_len=0, find_flag=HA_READ_KEY_OR_NEXT)at /test/10.11_dbg/storage/innobase/handler/ha_innodb.cc:9021
      #10 0x0000604ce9e968ea in handler::index_read_map (this=0x7670f0068f68, buf=0x7670f0069768 "\377", key=0x7670f0085000 "\245\217\217\217\217\217\217\217\245\217\217\217\217\217\217\217", keypart_map=1, find_flag=HA_READ_KEY_OR_NEXT)at /test/10.11_dbg/sql/handler.h:3877
      #11 0x0000604ce9f7fa1b in handler::ha_index_read_map (this=0x7670f0068f68, buf=0x7670f0069768 "\377", key=0x7670f0085000 "\245\217\217\217\217\217\217\217\245\217\217\217\217\217\217\217", keypart_map=1, find_flag=HA_READ_KEY_OR_NEXT)at /test/10.11_dbg/sql/handler.cc:3670
      #12 0x0000604ce9f88924 in handler::read_range_first (this=0x7670f0068f68, start_key=0x7670f00690b0, end_key=0x7670f00690d0, eq_range_arg=false, sorted=true) at /test/10.11_dbg/sql/handler.cc:6839
      #13 0x0000604ce9dc7c78 in handler::multi_range_read_next (this=0x7670f0068f68, range_info=0x7671d836c6b8) at /test/10.11_dbg/sql/multi_range_read.cc:518
      #14 0x0000604ce9dc7d89 in Mrr_simple_index_reader::get_next (this=0x7670f00695e8, range_info=0x7671d836c6b8)at /test/10.11_dbg/sql/multi_range_read.cc:555
      #15 0x0000604ce9dca5ea in DsMrr_impl::dsmrr_next (this=0x7670f0069498, range_info=0x7671d836c6b8) at /test/10.11_dbg/sql/multi_range_read.cc:1659
      #16 0x0000604cea365ab4 in ha_innobase::multi_range_read_next (this=0x7670f0068f68, range_info=0x7671d836c6b8)at /test/10.11_dbg/storage/innobase/handler/ha_innodb.cc:20200
      #17 0x0000604ce9a28bb3 in QUICK_RANGE_SELECT::get_next (this=0x7670f0084dc0)at /test/10.11_dbg/sql/opt_range.cc:12985
      #18 0x0000604ce9a51d0d in rr_quick (info=0x7670f0017408)at /test/10.11_dbg/sql/records.cc:403
      #19 0x0000604ce9a3acb6 in READ_RECORD::read_record (this=0x7670f0017408)at /test/10.11_dbg/sql/records.h:81
      #20 0x0000604ce9c20fc6 in join_init_read_record (tab=0x7670f0017330)at /test/10.11_dbg/sql/sql_select.cc:24116
      #21 0x0000604ce9bfdd11 in sub_select (join=0x7670f0014fd0, join_tab=0x7670f0017330, end_of_records=false)at /test/10.11_dbg/sql/sql_select.cc:23073
      #22 0x0000604ce9c240dd in do_select (join=0x7670f0014fd0, procedure=0x0)at /test/10.11_dbg/sql/sql_select.cc:22599
      #23 0x0000604ce9c2346f in JOIN::exec_inner (this=0x7670f0014fd0)at /test/10.11_dbg/sql/sql_select.cc:5023
      #24 0x0000604ce9c22700 in JOIN::exec (this=0x7670f0014fd0)at /test/10.11_dbg/sql/sql_select.cc:4807
      #25 0x0000604ce9bfe656 in mysql_select (thd=0x7670f0000d58, tables=0x7670f0013b78, fields=@0x7670f0013800: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x7670f0013b28, last = 0x7670f0015b38, elements = 3}, <No data fields>}, conds=0x7670f0014540, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=216452
      5824, result=0x7670f0014fa8, unit=0x7670f0005028, select_lex=0x7670f0013548)at /test/10.11_dbg/sql/sql_select.cc:5285
      #26 0x0000604ce9bfe0e5 in handle_select (thd=0x7670f0000d58, lex=0x7670f0004f50, result=0x7670f0014fa8, setup_tables_done_option=0)at /test/10.11_dbg/sql/sql_select.cc:601
      #27 0x0000604ce9ba5711 in execute_sqlcom_select (thd=0x7670f0000d58, all_tables=0x7670f0013b78) at /test/10.11_dbg/sql/sql_parse.cc:6463
      #28 0x0000604ce9b991ea in mysql_execute_command (thd=0x7670f0000d58, is_called_from_prepared_stmt=false)at /test/10.11_dbg/sql/sql_parse.cc:4042
      #29 0x0000604ce9b91314 in mysql_parse (thd=0x7670f0000d58, rawbuf=0x7670f0013460 "SELECT * FROM t WHERE a IN (0x0", 'f' <repeats 14 times>, "e,0x0", 'f' <repeats 15 times>, ")", length=66, parser_state=0x7671d836ea20) at /test/10.11_dbg/sql/sql_parse.cc:8223
      #30 0x0000604ce9b8e7b9 in dispatch_command (command=COM_QUERY, thd=0x7670f0000d58, packet=0x7670f000aee9 "", packet_length=66, blocking=true) at /test/10.11_dbg/sql/sql_parse.cc:1924
      #31 0x0000604ce9b91ec3 in do_command (thd=0x7670f0000d58, blocking=true)at /test/10.11_dbg/sql/sql_parse.cc:1434
      #32 0x0000604ce9d6f429 in do_handle_one_connection (connect=0x604cff4eb058, put_in_cache=true) at /test/10.11_dbg/sql/sql_connect.cc:1475
      #33 0x0000604ce9d6f1c2 in handle_one_connection (arg=0x604cff5d2238)at /test/10.11_dbg/sql/sql_connect.cc:1387
      #34 0x00007671daa9caa4 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #35 0x00007671dab29c6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Bug Detection Matrix

          Rel    o/d  Build   Commit                                    UniqueID observed
      CS  10.6   dbg  270126  5b6ad325d2e523b95ab7463f093bd8c0d9529edd  block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
      CS  10.6   opt  270126  5b6ad325d2e523b95ab7463f093bd8c0d9529edd  No bug found
      CS  10.11  dbg  270126  c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a  block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
      CS  10.11  opt  270126  c0acc3cc8f1ec24e96b1ee192fdf6e4b6ccf4e0a  No bug found
      CS  11.4   dbg  270126  ca39e66060d4735f91fd46d9784b4c91ed6746aa  block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
      CS  11.4   opt  270126  ca39e66060d4735f91fd46d9784b4c91ed6746aa  No bug found
      CS  11.8   dbg  270126  8a0f327675e9b4a1e0ae2e3a97fe001122a9db03  No bug found
      CS  11.8   opt  270126  8a0f327675e9b4a1e0ae2e3a97fe001122a9db03  No bug found
      CS  12.2   dbg  270126  d640758b9478f4da9ac0023b1ac389ffc23aa9bb  No bug found
      CS  12.2   opt  270126  d640758b9478f4da9ac0023b1ac389ffc23aa9bb  No bug found
      CS  12.3   dbg  270126  346c7afe9b7071ce9c47892a83d69944b608b3da  No bug found
      CS  12.3   opt  270126  346c7afe9b7071ce9c47892a83d69944b608b3da  No bug found
      ES  10.6   dbg  270126  0fe345fff3a0463224ca714831303d40fb83648b  block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
      ES  10.6   opt  270126  0fe345fff3a0463224ca714831303d40fb83648b  No bug found
      ES  11.4   dbg  270126  34f616d5fd2c649d0c79acb4e2423c90b8f10436  block->page.buf_fix_count()|SIGABRT|btr_pcur_store_position|row_search_mvcc|ha_innobase::index_read|handler::index_read_map
      ES  11.4   opt  270126  34f616d5fd2c649d0c79acb4e2423c90b8f10436  No bug found
      ES  11.8   dbg  270126  405ee76b60c4ab82155f339136ed20d3b7363717  No bug found
      ES  11.8   opt  270126  405ee76b60c4ab82155f339136ed20d3b7363717  No bug found
      

      Attachments

        Issue Links

          Activity

            People

              thiru Thirunarayanan Balathandayuthapani
              saahil Saahil Alam
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.