Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-3983

Server crashes in free_root called by TABLE_SHARE::destroy on ANALYZE TABLE

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • None
    • None
    • None
    • None

    Description

      #2  0x00000000007cf984 in handle_fatal_signal (sig=11) at 10.0-base/sql/signal_handler.cc:262
      #3  <signal handler called>
      #4  0x0000000000ca5484 in free_root (root=0x7fcfbc48c100, MyFlags=0) at 10.0-base/mysys/my_alloc.c:364
      #5  0x00000000006d4e0b in TABLE_SHARE::destroy (this=0x7fcf94005718) at 10.0-base/sql/table.cc:458
      #6  0x00000000006d4ec8 in free_table_share (share=0x7fcf94005718) at 10.0-base/sql/table.cc:482
      #7  0x00000000005a8b9a in table_def_free_entry (share=0x7fcf94005718) at 10.0-base/sql/sql_base.cc:370
      #8  0x0000000000c8e8c9 in my_hash_delete (hash=0x14b5640, record=0x7fcf94005718 "\002") at 10.0-base/mysys/hash.c:604
      #9  0x00000000005a9992 in release_table_share (share=0x7fcf94005718) at 10.0-base/sql/sql_base.cc:798
      #10 0x00000000006dbec8 in closefrm (table=0x7fcf94003af0, free_share=true) at 10.0-base/sql/table.cc:2753
      #11 0x00000000005aa068 in intern_close_table (table=0x7fcf94003af0) at 10.0-base/sql/sql_base.cc:935
      #12 0x00000000005aa0d5 in free_cache_entry (table=0x7fcf94003af0) at 10.0-base/sql/sql_base.cc:958
      #13 0x00000000005ab8e8 in close_thread_table (thd=0x4260410, table_ptr=0x42604c8) at 10.0-base/sql/sql_base.cc:1648
      #14 0x00000000005aaf54 in close_open_tables (thd=0x4260410) at 10.0-base/sql/sql_base.cc:1383
      #15 0x00000000005ab5df in close_thread_tables (thd=0x4260410) at 10.0-base/sql/sql_base.cc:1595
      #16 0x0000000000727531 in mysql_admin_table(THD *, TABLE_LIST *, HA_CHECK_OPT *, const char *, thr_lock_type, bool, bool, uint, int (*)(THD *, TABLE_LIST *, HA_CHECK_OPT *), struct {...}, int (*)(THD *, TABLE_LIST *)) (thd=0x4260410, tables=0x4241670, check_opt=0x4263760, operator_name=0xd51aa1 "analyze", lock_type=TL_READ_NO_INSERT, open_for_modify=true, repair_table_use_frm=false, extra_open_options=0, prepare_func=0, operator_func=(int (handler::*)(handler * const, THD *, HA_CHECK_OPT *)) 0x7d7006 <handler::ha_analyze(THD*, st_ha_check_opt*)>, view_operator_func=0) at 10.0-base/sql/sql_admin.cc:967
      #17 0x0000000000727a77 in Analyze_table_statement::execute (this=0x4241c40, thd=0x4260410) at 10.0-base/sql/sql_admin.cc:1088
      #18 0x0000000000613328 in mysql_execute_command (thd=0x4260410) at 10.0-base/sql/sql_parse.cc:4592
      #19 0x000000000061650f in mysql_parse (thd=0x4260410, rawbuf=0x4241528 "ANALYZE TABLE `table0_myisam` PERSISTENT FOR ALL", length=48, parser_state=0x7fcfbc48d550) at 10.0-base/sql/sql_parse.cc:5874
      #20 0x00000000006096cb in dispatch_command (command=COM_QUERY, thd=0x4260410, packet=0x4266a01 "", packet_length=48) at 10.0-base/sql/sql_parse.cc:1072
      #21 0x0000000000608982 in do_command (thd=0x4260410) at 10.0-base/sql/sql_parse.cc:811
      #22 0x0000000000716f47 in do_handle_one_connection (thd_arg=0x4260410) at 10.0-base/sql/sql_connect.cc:1253
      #23 0x0000000000716932 in handle_one_connection (arg=0x4260410) at 10.0-base/sql/sql_connect.cc:1168
      #24 0x00007fcfbbae4efc in start_thread (arg=0x7fcfbc48e700) at pthread_create.c:304

      Trying to get some variables.
      Some pointers may be invalid and cause the dump to abort.
      Query (0x4241528): ANALYZE TABLE `table0_myisam` PERSISTENT FOR ALL
      Connection ID (thread ID): 6
      Status: NOT_KILLED
       
      Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_in
      tersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,lo
      osescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cac
      he=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,jo
      in_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=off,table_elimination=on,extended_keys=off

      To reproduce, follow the instruction provided in MDEV-3979. As it says, I was getting both crashes by repeating the exact same test several times. I'm not sure whether it means it's a duplicate of the other bug, or that they are just triggered by the same scenario. Also, due to the nature of the test, I cannot run it on a tree without MDEV-3806 to see if it crashes there too.

      Attachments

        Issue Links

          Activity

            People

              igor Igor Babaev
              elenst Elena Stepanova
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.