json_keys crashes in binary value with IN( ... )

Version: '12.3.1-MariaDB'  socket: ''  port: 3333  MariaDB Server

260428  7:37:22 [ERROR] bin\mariadbd.exe got exception 0xc0000005 ;

Sorry, we probably made a mistake, and this is a bug.

Your assistance in bug reporting will enable us to fix this for the next release.

To report this bug, see https://mariadb.com/kb/en/reporting-bugs about how to report

a bug on https://jira.mariadb.org/.

Please include the information from the server start above, to the end of the

information below.

Server version: 12.3.1-MariaDB source revision: 21a0714a118614982d20bfa504763d7247800091

The information page at https://mariadb.com/kb/en/how-to-produce-a-full-stack-trace-for-mariadbd/

contains instructions to obtain a better version of the backtrace below.

Following these instructions will help MariaDB developers provide a fix quicker.

Attempting backtrace. Include this in the bug report.

(note: Retrieving this information may fail)

Thread pointer: 0x1defcc1af98

server.dll!String::append()[sql_string.cc:549]

server.dll!Item_func_json_keys::val_str()[item_jsonfunc.cc:4134]

server.dll!in_string::set()[item_cmpfunc.cc:3899]

server.dll!Item_func_in::fix_in_vector()[item_cmpfunc.cc:4756]

server.dll!Item_func_in::fix_for_scalar_comparison_using_bisection()[item_cmpfunc.h:2748]

server.dll!Type_handler_string_result::Item_func_in_fix_comparator_compatible_types()[sql_type.cc:6053]

server.dll!Item_func_in::fix_length_and_dec()[item_cmpfunc.cc:4722]

server.dll!Item_func::fix_fields()[item_func.cc:412]

server.dll!Item_func_in::fix_fields()[item_cmpfunc.cc:4551]

server.dll!setup_fields()[sql_base.cc:8217]

server.dll!mysql_do()[sql_do.cc:32]

server.dll!mysql_execute_command()[sql_parse.cc:4016]

server.dll!mysql_parse()[sql_parse.cc:7944]

server.dll!dispatch_command()[sql_parse.cc:1898]

server.dll!do_command()[sql_parse.cc:1432]

server.dll!tp_callback()[threadpool_common.cc:252]

KERNEL32.DLL!BasepConstructSxsCreateProcessMessage()

ntdll.dll!TpWaitForTimer()

ntdll.dll!RtlSetThreadSubProcessTag()

KERNEL32.DLL!BaseThreadInitThunk()

ntdll.dll!RtlUserThreadStart()

Connection ID (thread ID): 3

Status: NOT_KILLED

Query (0x1defcc24fa0): do 0x0 not in('',json_keys('{}'))

do 0x0 not in('',json_keys('{}'));