Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40597

UBSAN | SIGSEGV in ORAparse | parse_sql | sp_compile | Sp_handler::db_load_routine

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 13.1
    • N/A
    • Stored routines
    • None
    • Not for Release Notes
    • Q3/2026 Server Development

    Description

      MTR testcase is attached

      MDEV-39587 CS 13.1.0 0fdad9d9d485ac04422fb2ba0042b09ad1179172 (Debug, UBASAN, Clang 18.1.3-11) Build 03/07/2026

      Core was generated by `/test/mtest/MDEV-39587/UBASAN_MD030726-mariadb-13.1.0-linux-x86_64-dbg/bin/mari'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  __pthread_kill_implementation (no_tid=0, signo=11, threadid=<optimized out>) at ./nptl/pthread_kill.c:44
       
      [Current thread is 1 (LWP 532498)]
      (gdb) bt
      #0  __pthread_kill_implementation (no_tid=0, signo=11, threadid=<optimized out>) at ./nptl/pthread_kill.c:44
      #1  __pthread_kill_internal (signo=11, threadid=<optimized out>)at ./nptl/pthread_kill.c:78
      #2  __GI___pthread_kill (threadid=<optimized out>, signo=11)at ./nptl/pthread_kill.c:89
      #3  0x0000618d1ef2d075 in handle_fatal_signal (sig=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/signal_handler.cc:298
      #4  <signal handler called>
      #5  __memcpy_evex_unaligned_erms ()at ../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:344
      #6  0x0000618d1e4bc047 in __asan_memcpy ()
      #7  0x0000618d1f4b3c23 in ORAparse (thd=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/yy_oracle.cc:30474
      #8  0x0000618d1f7ec725 in parse_sql (thd=thd@entry=0x52c000080220, parser_state=0x7be348947620, creation_ctx=creation_ctx@entry=0x5250077cfc88, do_pfs_digest=false)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_parse.cc:10372
      #9  0x0000618d1f13479b in sp_compile (thd=0x52c000080220, defstr=<optimized out>, sql_mode=<optimized out>, parent=<optimized out>, creation_ctx=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:909
      #10 0x0000618d1f1323fa in Sp_handler::db_load_routine (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sphp=<optimized out>, sql_mode=<optimized out>, sql_path=<optimized out>, params=<optimized out>, returns=<optimized out>, body=<optimized out>, chistics=<optimized out>, definer=<optimized out>, created=<optimized out>, modified=<optimized out>, parent=<optimized out>, creation_ctx=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:1036
      #11 0x0000618d1f131619 in Sp_handler::db_find_routine (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sphp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:776
      #12 0x0000618d1f133be6 in Sp_handler::db_find_and_cache_routine (this=0x618d222cd1c0 <sp_handler_package_spec>, thd=thd@entry=0x52c000080220, name=name@entry=0x7be3487bf240, sp=0x7be3487bf220)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:800
      #13 0x0000618d1f14c723 in Sp_handler::sp_cache_routine (this=0x618d222cd1c0 <sp_handler_package_spec>, thd=<optimized out>, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:3010
      #14 0x0000618d1f147c2b in Sp_handler::sp_cache_routine_reentrant (this=<optimized out>, thd=thd@entry=0x52c000080220, name=name@entry=0x7be3487bf240, sp=sp@entry=0x7be3487bf220)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2524
      #15 0x0000618d1f147f78 in Sp_handler::sp_cache_routine_reentrant_suppress_errors (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2540
      #16 0x0000618d1f148207 in Sp_handler::find_package_spec (thd=<optimized out>, db=<optimized out>, package=@0x7be3491464a0: {str = 0x5250077cfa50 "pkg1500", length = 7})at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2560
      #17 0x0000618d1f18ea00 in sp_head::get_typedef_package_spec_or_error (this=0x5250077ce1e0, thd=<optimized out>, tdef=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp_head.cc:4465
      #18 0x0000618d1f7239af in LEX::declare_type_ref_cursor_return_typedef (this=<optimized out>, thd=0x52c000080220, type_name=<optimized out>, db=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_lex.cc:13389
      #19 0x0000618d1f4f3447 in ORAparse (thd=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_yacc.yy:20908
      #20 0x0000618d1f7ec725 in parse_sql (thd=thd@entry=0x52c000080220, parser_state=0x7be348a3c820, creation_ctx=creation_ctx@entry=0x5250090644a8, do_pfs_digest=false)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_parse.cc:10372
      #21 0x0000618d1f13479b in sp_compile (thd=0x52c000080220, defstr=<optimized out>, sql_mode=<optimized out>, parent=<optimized out>, creation_ctx=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:909
      #22 0x0000618d1f1323fa in Sp_handler::db_load_routine (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sphp=<optimized out>, sql_mode=<optimized out>, sql_path=<optimized out>, params=<optimized out>, returns=<optimized out>, body=<optimized out>, chistics=<optimized out>, definer=<optimized out>, created=<optimized out>, modified=<optimized out>, parent=<optimized out>, creation_ctx=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:1036
      #23 0x0000618d1f131619 in Sp_handler::db_find_routine (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sphp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:776
      #24 0x0000618d1f133be6 in Sp_handler::db_find_and_cache_routine (this=0x618d222cd1c0 <sp_handler_package_spec>, thd=thd@entry=0x52c000080220, name=name@entry=0x7be3487bbec0, sp=0x7be3487bbea0)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:800
      #25 0x0000618d1f14c723 in Sp_handler::sp_cache_routine (this=0x618d222cd1c0 <sp_handler_package_spec>, thd=<optimized out>, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:3010
      #26 0x0000618d1f147c2b in Sp_handler::sp_cache_routine_reentrant (this=<optimized out>, thd=thd@entry=0x52c000080220, name=name@entry=0x7be3487bbec0, sp=sp@entry=0x7be3487bbea0)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2524
      #27 0x0000618d1f147f78 in Sp_handler::sp_cache_routine_reentrant_suppress_errors (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2540
      #28 0x0000618d1f148207 in Sp_handler::find_package_spec (thd=<optimized out>, db=<optimized out>, package=@0x7be34914d1a0: {str = 0x525009064250 "pkg1499", length = 7})at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2560
      #29 0x0000618d1f18ea00 in sp_head::get_typedef_package_spec_or_error (this=0x5250090629e0, thd=<optimized out>, tdef=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp_head.cc:4465
      #30 0x0000618d1f7239af in LEX::declare_type_ref_cursor_return_typedef (this=<optimized out>, thd=0x52c000080220, type_name=<optimized out>, db=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_lex.cc:13389
      #31 0x0000618d1f4f3447 in ORAparse (thd=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_yacc.yy:20908
      #32 0x0000618d1f7ec725 in parse_sql (thd=thd@entry=0x52c000080220, parser_state=0x7be348a32020, creation_ctx=creation_ctx@entry=0x525007bcbca8, do_pfs_digest=false)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_parse.cc:10372
      #33 0x0000618d1f13479b in sp_compile (thd=0x52c000080220, defstr=<optimized out>, sql_mode=<optimized out>, parent=<optimized out>, creation_ctx=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:909
      #34 0x0000618d1f1323fa in Sp_handler::db_load_routine (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sphp=<optimized out>, sql_mode=<optimized out>, sql_path=<optimized out>, params=<optimized out>, returns=<optimized out>, body=<optimized out>, chistics=<optimized out>, definer=<optimized out>, created=<optimized out>, modified=<optimized out>, parent=<optimized out>, creation_ctx=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:1036
      #35 0x0000618d1f131619 in Sp_handler::db_find_routine (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sphp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:776
      #36 0x0000618d1f133be6 in Sp_handler::db_find_and_cache_routine (this=0x618d222cd1c0 <sp_handler_package_spec>, thd=thd@entry=0x52c000080220, name=name@entry=0x7be3487b8b40, sp=0x7be3487b8b20)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:800
      #37 0x0000618d1f14c723 in Sp_handler::sp_cache_routine (this=0x618d222cd1c0 <sp_handler_package_spec>, thd=<optimized out>, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:3010
      #38 0x0000618d1f147c2b in Sp_handler::sp_cache_routine_reentrant (this=<optimized out>, thd=thd@entry=0x52c000080220, name=name@entry=0x7be3487b8b40, sp=sp@entry=0x7be3487b8b20)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2524
      #39 0x0000618d1f147f78 in Sp_handler::sp_cache_routine_reentrant_suppress_errors (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2540
      #40 0x0000618d1f148207 in Sp_handler::find_package_spec (thd=<optimized out>, db=<optimized out>, package=@0x7be349153ea0: {str = 0x525007bcba50 "pkg1498", length = 7})at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2560
      #41 0x0000618d1f18ea00 in sp_head::get_typedef_package_spec_or_error (this=0x525007bca1e0, thd=<optimized out>, tdef=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp_head.cc:4465
      #42 0x0000618d1f7239af in LEX::declare_type_ref_cursor_return_typedef (this=<optimized out>, thd=0x52c000080220, type_name=<optimized out>, db=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_lex.cc:13389
      #43 0x0000618d1f4f3447 in ORAparse (thd=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_yacc.yy:20908
      #44 0x0000618d1f7ec725 in parse_sql (thd=thd@entry=0x52c000080220, parser_state=0x7be348a27a20, creation_ctx=creation_ctx@entry=0x5250054b1ca8, do_pfs_digest=false)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_parse.cc:10372
      [..]
      #243 0x0000618d1f147f78 in Sp_handler::sp_cache_routine_reentrant_suppress_errors (this=<optimized out>, thd=0x52c000080220, name=<optimized out>, sp=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2540
      #244 0x0000618d1f148207 in Sp_handler::find_package_spec (thd=<optimized out>, db=<optimized out>, package=@0x7be3491c7ba0: {str = 0x525002982a50 "pkg1481", length = 7})at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp.cc:2560
      #245 0x0000618d1f18ea00 in sp_head::get_typedef_package_spec_or_error (this=0x5250029811e0, thd=<optimized out>, tdef=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sp_head.cc:4465
      #246 0x0000618d1f7239af in LEX::declare_type_ref_cursor_return_typedef (this=<optimized out>, thd=0x52c000080220, type_name=<optimized out>, db=<optimized out>, package=<optimized out>, type=<optimized out>)at /test/mtest/MDEV-39587/bb-13.1-bar-MDEV-39587_dbg_san/sql/sql_lex.cc:13389
      #247 0x0000618d1f4f3447 in ORAparse (thd=<optimized out>)
      

      Attachments

        Issue Links

          Activity

            People

              bar Alexander Barkov
              ramesh Ramesh Sivaraman
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0d
                  0d
                  Remaining:
                  Remaining Estimate - 0d
                  0d
                  Logged:
                  Time Spent - 1d 5.75h
                  1d 5.75h

                  Git Integration

                    Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.