Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-39556

SIGSEGV in ha_mroonga::storage_set_keys_in_use on SELECT

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      --source include/have_innodb.inc
      CREATE TABLE t (c INT KEY,c2 GEOMETRY NOT NULL,SPATIAL INDEX idx_sp (c2)) ENGINE=InnoDB;
      INSTALL SONAME 'ha_mroonga';
      ALTER TABLE t ENGINE=Mroonga;
      CHECK TABLE t;
      SELECT * FROM information_schema.STATISTICS;
      

      Leads to:

      CS 11.4.11 0d9db6bbcc5532e0bde0a63e5991cb5ebee060eb (Debug, Clang 18.1.3-11) Build 23/04/2026

      Core was generated by `/test/MD230426-mariadb-11.4.11-linux-x86_64-dbg/bin/mariadbd --no-defaults --ma'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  0x000076c404ec5df5 in ha_mroonga::storage_set_keys_in_use (this=0x6ec3356b90d8) at /test/11.4_dbg/storage/mroonga/ha_mroonga.cpp:5237
      5237	    if (!grn_index_tables[i]) {
      [Current thread is 1 (LWP 266673)]
      (gdb) bt
      #0  0x000076c404ec5df5 in ha_mroonga::storage_set_keys_in_use (this=0x6ec3356b90d8) at /test/11.4_dbg/storage/mroonga/ha_mroonga.cpp:5237
      #1  0x000076c404ec7b09 in ha_mroonga::storage_info (this=0x6ec3356b90d8, flag=30) at /test/11.4_dbg/storage/mroonga/ha_mroonga.cpp:5324
      #2  0x000076c404ec8327 in ha_mroonga::info (this=0x6ec3356b90d8, flag=30)at /test/11.4_dbg/storage/mroonga/ha_mroonga.cpp:5383
      #3  0x00005c7bb2356f3b in get_schema_stat_record (thd=0x6ec334000d58, tables=0x6ec3295174b0, table=0x6ec32953ced0, res=false, db_name=0x6ec3340205a0, table_name=0x6ec3340205f8)at /test/11.4_dbg/sql/sql_show.cc:7220
      #4  0x00005c7bb2345c7f in fill_schema_table_by_open (thd=0x6ec334000d58, mem_root=0x76c424540d20, is_show_fields_or_keys=false, table=0x6ec32953ced0, schema_table=0x5c7bb3bcd8b0 <schema_tables+2368>, orig_db_name=0x6ec3340205a0, orig_table_name=0x6ec3340205f8, open_tables_state_backup=0x76c424540d80, can_deadlock=false)at /test/11.4_dbg/sql/sql_show.cc:4873
      #5  0x00005c7bb2345468 in get_all_tables (thd=0x6ec334000d58, tables=0x6ec33401a160, cond=0x0) at /test/11.4_dbg/sql/sql_show.cc:5599
      #6  0x00005c7bb23524ca in get_schema_tables_result (join=0x6ec33401ba68, executed_place=PROCESSED_BY_JOIN_EXEC)at /test/11.4_dbg/sql/sql_show.cc:9472
      #7  0x00005c7bb22ed218 in JOIN::exec_inner (this=0x6ec33401ba68)at /test/11.4_dbg/sql/sql_select.cc:5066
      #8  0x00005c7bb22ec6d0 in JOIN::exec (this=0x6ec33401ba68)at /test/11.4_dbg/sql/sql_select.cc:4893
      #9  0x00005c7bb22c73fc in mysql_select (thd=0x6ec334000d58, tables=0x6ec33401a160, fields=@0x6ec334019dc0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x6ec33401a0f0, last = 0x6ec33401d9e8, elements = 17}, <No data fields>}, conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2701396736, result=0x6ec33401ba40, unit=0x6ec334005018, select_lex=0x6ec334019b08) at /test/11.4_dbg/sql/sql_select.cc:5416
      #10 0x00005c7bb22c6e75 in handle_select (thd=0x6ec334000d58, lex=0x6ec334004f38, result=0x6ec33401ba40, setup_tables_done_option=0)at /test/11.4_dbg/sql/sql_select.cc:643
      #11 0x00005c7bb226d9a1 in execute_sqlcom_select (thd=0x6ec334000d58, all_tables=0x6ec33401a160) at /test/11.4_dbg/sql/sql_parse.cc:6224
      #12 0x00005c7bb2262972 in mysql_execute_command (thd=0x6ec334000d58, is_called_from_prepared_stmt=false) at /test/11.4_dbg/sql/sql_parse.cc:4012
      #13 0x00005c7bb225a9f4 in mysql_parse (thd=0x6ec334000d58, rawbuf=0x6ec334019a50 "SELECT * FROM information_schema.STATISTICS", length=43, parser_state=0x76c424543a30)at /test/11.4_dbg/sql/sql_parse.cc:7945
      #14 0x00005c7bb2257e19 in dispatch_command (command=COM_QUERY, thd=0x6ec334000d58, packet=0x6ec33400afa9 "SELECT * FROM information_schema.STATISTICS", packet_length=43, blocking=true) at /test/11.4_dbg/sql/sql_parse.cc:1925
      #15 0x00005c7bb225b5a3 in do_command (thd=0x6ec334000d58, blocking=true)at /test/11.4_dbg/sql/sql_parse.cc:1433
      #16 0x00005c7bb2441439 in do_handle_one_connection (connect=0x5c7bda8da198, put_in_cache=true) at /test/11.4_dbg/sql/sql_connect.cc:1497
      #17 0x00005c7bb24411d2 in handle_one_connection (arg=0x5c7bda9179d8)at /test/11.4_dbg/sql/sql_connect.cc:1409
      #18 0x000076c451a9caa4 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #19 0x000076c451b29c6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Bug Detection Matrix

          Rel    o/d  Build   Commit                                    UniqueID observed             
      CS  10.6   dbg  230426  855ee88362e3664caafccb734b8196a77e4d7e68  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      CS  10.6   opt  230426  855ee88362e3664caafccb734b8196a77e4d7e68  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      CS  10.11  dbg  230426  c44f9c456f3b1761c8300d237ce6c139756a3fd9  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      CS  10.11  opt  230426  c44f9c456f3b1761c8300d237ce6c139756a3fd9  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      CS  11.4   dbg  230426  0d9db6bbcc5532e0bde0a63e5991cb5ebee060eb  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      CS  11.4   opt  230426  0d9db6bbcc5532e0bde0a63e5991cb5ebee060eb  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      CS  11.8   dbg  230426  d3767f9649a21a6478e8e784805f894497b93eaa  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      CS  11.8   opt  230426  d3767f9649a21a6478e8e784805f894497b93eaa  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      CS  12.3   dbg  230426  5d234b2aa891ad6be34fcfb2cf607f48efd93272  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      CS  12.3   opt  230426  5d234b2aa891ad6be34fcfb2cf607f48efd93272  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      CS  13.0   dbg  230426  2c6903675f1c23363188ac3db039e4ba1cd1a670  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      CS  13.0   opt  230426  2c6903675f1c23363188ac3db039e4ba1cd1a670  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      ES  10.6   dbg  230426  55cfada6c54d1b08f2372adc1369a5e5e76f472d  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      ES  10.6   opt  230426  55cfada6c54d1b08f2372adc1369a5e5e76f472d  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      ES  11.4   dbg  230426  90f707057d44f1b5c013a0c3672fd12f32ea7085  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      ES  11.4   opt  230426  90f707057d44f1b5c013a0c3672fd12f32ea7085  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      ES  11.8   dbg  230426  1499789de285a8109d68d79347de0281865b28f4  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      ES  11.8   opt  230426  1499789de285a8109d68d79347de0281865b28f4  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      ES  12.3   dbg  230426  613a6253fe9efc12e166f83a97663ba263db8317  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|ha_mroonga::info|get_schema_stat_record
      ES  12.3   opt  230426  613a6253fe9efc12e166f83a97663ba263db8317  SIGSEGV|ha_mroonga::storage_set_keys_in_use|ha_mroonga::storage_info|get_schema_stat_record|fill_schema_table_by_open
      

      Attachments

        Activity

          People

            sanja Oleksandr Byelkin
            saahil Saahil Alam
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.