Assertion `size <= 0xFFFFFFFFUL' failed in String::append

SELECT EXTRACTVALUE('<a></a><![CDATA[', '/');

mariadbd: /12.3/src/sql/sql_string.cc:541: bool String::append(const char*, size_t): Assertion `size <= 0xFFFFFFFFUL' failed.

260512 14:15:43 [ERROR] /12.3/bld/sql/mariadbd got signal 6 ;

Server version: 12.3.2-MariaDB-asan-debug-log source revision: 181f13ec49fdf14a873e9ebf7440133b3e0d70d9

nptl/pthread_kill.c:44(__pthread_kill_implementation)[0x7c1124a9eb2c]

posix/raise.c:27(__GI_raise)[0x7c1124a4527e]

stdlib/abort.c:81(__GI_abort)[0x7c1124a288ff]

intl/loadmsgcat.c:1177(_nl_load_domain)[0x7c1124a2881b]

/lib/x86_64-linux-gnu/libc.so.6(+0x3b517)[0x7c1124a3b517]

sql/sql_string.h:116(Charset::mbminlen() const)[0x6134f66510db]

sql/item_xmlfunc.cc:187(Item_nodeset_func::val_str(String*))[0x6134f6b2a901]

sql/item_xmlfunc.cc:3082(Item_func_xml_extractvalue::val_str(String*))[0x6134f6825c87]

sql/sql_type.h:5746(Type_handler_string_result::Item_send(Item*, Protocol*, st_value*) const)[0x6134f5fccb6b]

sql/item.h:1237(Item::send(Protocol*, st_value*))[0x6134f609a1fa]

sql/protocol.cc:1358(Protocol::send_result_set_row(List<Item>*))[0x6134f6247700]

sql/sql_class.cc:3411(select_send::send_data(List<Item>&))[0x6134f62565d8]

sql/sql_class.cc:3309(select_result_sink::send_data_with_check(List<Item>&, st_select_lex_unit*, unsigned long long))[0x6134f656e0d4]

sql/sql_select.cc:4996(JOIN::exec_inner())[0x6134f656f52a]

sql/sql_select.cc:5439(mysql_select(THD*, TABLE_LIST*, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*))[0x6134f656aead]

sql/sql_select.cc:636(handle_select(THD*, LEX*, select_result*, unsigned long long))[0x6134f656b6b9]

sql/sql_parse.cc:6221(execute_sqlcom_select(THD*, TABLE_LIST*))[0x6134f63a0813]

sql/sql_parse.cc:3994(mysql_execute_command(THD*, bool))[0x6134f63bf504]

sql/sql_parse.cc:7949(mysql_parse(THD*, char*, unsigned int, Parser_state*))[0x6134f63ccbb9]

sql/sql_parse.cc:1903(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x6134f63d0969]

sql/sql_parse.cc:1437(do_command(THD*, bool))[0x6134f63d5706]

sql/sql_connect.cc:1503(do_handle_one_connection(CONNECT*, bool))[0x6134f68964bc]

sql/sql_connect.cc:1415(handle_one_connection)[0x6134f68969a1]

perfschema/pfs.cc:2201(pfs_spawn_thread)[0x6134f757b958]

asan/asan_interceptors.cpp:234(asan_thread_start(void*))[0x7c1125a5ea42]

nptl/pthread_create.c:447(start_thread)[0x7c1124a9caa4]

x86_64/clone3.S:80(clone3)[0x7c1124b29c6c]

Query (0x52d00017c448): SELECT (EXTRACTVALUE('<a></a><![CDATA[', '/'))