Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40130

SIGSEGV in Field_iterator_table::set_table at sql/table.h:3350

    XMLWordPrintable

Details

    • Bug
    • Status: Open (View Workflow)
    • Critical
    • Resolution: Unresolved
    • 13.1
    • 13.1
    • Triggers
    • None
    • Not for Release Notes

    Description

      CREATE TABLE tt (a INT, b INT);
      CREATE TRIGGER tg BEFORE INSERT ON tt FOR EACH ROW SET NEW = ROW(NEW.a, NEW.b);
      INSERT INTO tt VALUES (1,2);
       
      # cleanup
      DROP TABLE tt;
      

      Leads to

      MDEV-34723 CS 13.0.0 8945d56739e6eaacb674f145d60eb607a8b43a1a (Optimized, Clang 18.1.3-11) Build 19/06/2026

      Core was generated by `/test/mtest/MDEV-34723/MD190626-mariadb-13.0.0-linux-x86_64-opt/bin/mariadbd --'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  Field_iterator_table::set_table (table=0x0, this=<optimized out>)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/table.h:3350
       
      [Current thread is 1 (LWP 1123976)]
      (gdb) bt
      #0  Field_iterator_table::set_table (table=0x0, this=<optimized out>)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/table.h:3350
      #1  Item_trigger_row::populate_with_trigger_fields (this=this@entry=0x7ec06c02bbc8, thd=thd@entry=0x7ec06c000c68)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/item.cc:10863
      #2  0x0000601c1a296f1b in Item_trigger_row::fix_fields (this=0x7ec06c02bbc8, thd=0x7ec06c000c68, it=<optimized out>)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/item.cc:10833
      #3  0x0000601c1a297240 in Item::fix_fields_if_needed (this=0x7ec06c02bbc8, thd=0x7ec06c000c68, ref=0x0)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/item.h:1147
      #4  Item_trigger_row::set_value (this=0x7ec06c02bbc8, thd=0x7ec06c000c68, ctx=<optimized out>, it=0x7ec06c02bdf8)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/item.cc:10893
      #5  0x0000601c1a199699 in sp_instr_set_trigger_row::exec_core (this=0x7ec06c02bd28, thd=0x7ec06c000c68, nextp=0x7ee3241b22d4)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sp_instr.cc:1740
      #6  0x0000601c1a19687f in sp_lex_keeper::reset_lex_and_exec_core (this=this@entry=0x7ec06c02bd60, thd=thd@entry=0x7ec06c000c68, nextp=nextp@entry=0x7ee3241b22d4, open_tables=true, instr=instr@entry=0x7ec06c02bd28, rerun_the_same_instr=<optimized out>)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sp_instr.cc:420
      #7  0x0000601c1a196e9b in sp_lex_keeper::validate_lex_and_exec_core (this=0x7ec06c02bd60, thd=0x7ec06c000c68, nextp=0x7ee3241b22d4, open_tables=<optimized out>, instr=0x7ec06c02bd28)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sp_instr.cc:599
      #8  0x0000601c19f3995a in sp_head::execute (this=this@entry=0x7ec06c02a630, thd=thd@entry=0x7ec06c000c68, merge_da_on_success=false)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sp_head.cc:1293
      #9  0x0000601c19f3aa27 in sp_head::execute_trigger (this=0x7ec06c02a630, thd=0x7ec06c000c68, db_name=<optimized out>, table_name=<optimized out>, grant_info=<optimized out>)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sp_head.cc:1806
      #10 0x0000601c1a0b4bb3 in Table_triggers_list::process_triggers (this=0x7ec06c028538, thd=0x7ec06c000c68, event=TRG_EVENT_INSERT, time_type=<optimized out>, old_row_is_record1=<optimized out>, skip_row_indicator=0x7ee3241b2d88, fields_in_update_stmt=0x0)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_trigger.cc:2880
      #11 0x0000601c19f787a1 in fill_record_n_invoke_before_triggers (thd=thd@entry=0x7ec06c000c68, table=0x7ec06c024d28, ptr=0x7ec06c0281b0, values=@0x7ec06c018630: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x7ec06c0186d8, last = 0x7ec06c018778, elements = 2}, <No data fields>}, ignore_errors=<optimized out>, event=event@entry=TRG_EVENT_INSERT, skip_row_indicator=0x7ee3241b2d88)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_base.cc:9598
      #12 0x0000601c19fa9c9b in mysql_insert (thd=thd@entry=0x7ec06c000c68, table_list=0x7ec06c017a08, fields=@0x7ec06c006158: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x601c1b2ea338 <end_of_list>, last = 0x7ec06c006158, elements = 0}, <No data fields>}, values_list=@0x7ec06c0061a0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x7ec06c018788, last = 0x7ec06c018788, elements = 1}, <No data fields>}, update_fields=@0x7ec06c006188: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x601c1b2ea338 <end_of_list>, last = 0x7ec06c006188, elements = 0}, <No data fields>}, update_values=@0x7ec06c006170: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x601c1b2ea338 <end_of_list>, last = 0x7ec06c006170, elements = 0}, <No data fields>}, duplic=DUP_ERROR, ignore=<optimized out>, result=0x0)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_insert.cc:1193
      #13 0x0000601c19fe93da in mysql_execute_command (thd=thd@entry=0x7ec06c000c68, is_called_from_prepared_stmt=false)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_parse.cc:4498
      #14 0x0000601c19fe1e41 in mysql_parse (thd=thd@entry=0x7ec06c000c68, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7ee3241b3410)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_parse.cc:7937
      #15 0x0000601c19fe025d in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x7ec06c000c68, packet=packet@entry=0x7ec06c008cc9 "INSERT INTO tt VALUES (1,2)", packet_length=packet_length@entry=27, blocking=true)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_parse.cc:1896
      #16 0x0000601c19fe2251 in do_command (thd=thd@entry=0x7ec06c000c68, blocking=true)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_parse.cc:1432
      #17 0x0000601c1a112fad in do_handle_one_connection (connect=<optimized out>, connect@entry=0x601c32c08f88, put_in_cache=true)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_connect.cc:1503
      #18 0x0000601c1a112d6f in handle_one_connection (arg=arg@entry=0x601c32c08f88)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/sql/sql_connect.cc:1415
      #19 0x0000601c1a4d4bb3 in pfs_spawn_thread (arg=0x601c32babf18)at /test/mtest/MDEV-34723/bb-13.0-MDEV-34723_opt/storage/perfschema/pfs.cc:2198
      #20 0x00007ee32829caa4 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #21 0x00007ee328329c6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Attachments

        Issue Links

          Activity

            People

              rucha174 Rucha Deodhar
              ramesh Ramesh Sivaraman
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0d
                  0d
                  Logged:
                  Time Spent - 0.5h
                  0.5h

                  Git Integration

                    Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.