Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-41065

SIGSEGV in Item::delete_self on table close after UNINSTALL SONAME w/ plugin function in GENERATED COLUMN

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      INSTALL SONAME 'func_test';
      CREATE TABLE t1 (b VARBINARY(64) GENERATED ALWAYS AS (strnxfrm(_latin1'a',4,4,0)) VIRTUAL);
      DESCRIBE t1;
      UNINSTALL SONAME 'func_test';
      FLUSH TABLES;
      

      Leads to:

      CS 13.1.0 b2a8c2234dbc276fe3947633c9ffea454badf48f (Optimized, Clang 18.1.3-11) Build 07/09/2026

      Core was generated by `/test/MD070926-mariadb-13.1.0-linux-x86_64-opt/bin/mariadbd --no-defaults --loo'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  0x00005c3989d864ba in Item::delete_self (this=0x6a27c4055ce0)at /test/13.1_opt/sql/item.h:2684
      2684	    cleanup();
      [Current thread is 1 (LWP 2144252)]
      (gdb) bt
      #0  0x00005c3989d864ba in Item::delete_self (this=0x6a27c4055ce0)at /test/13.1_opt/sql/item.h:2684
      #1  Query_arena::free_items (this=0x6a27c4055180)at /test/13.1_opt/sql/sql_class.cc:4311
      #2  0x00005c3989ed530b in closefrm (table=table@entry=0x6a27c403c640)at /test/13.1_opt/sql/table.cc:4911
      #3  0x00005c3989fd3438 in intern_close_table (table=0x6a27c403c640)at /test/13.1_opt/sql/table_cache.cc:230
      #4  tc_purge () at /test/13.1_opt/sql/table_cache.cc:324
      #5  0x00005c3989d6bdc8 in purge_tables () at /test/13.1_opt/sql/sql_base.cc:338
      #6  close_cached_tables (thd=thd@entry=0x6a27c4000c70, tables=tables@entry=0x0, wait_for_refresh=true, timeout=<optimized out>)at /test/13.1_opt/sql/sql_base.cc:367
      #7  0x00005c3989f295b6 in reload_acl_and_cache (thd=thd@entry=0x6a27c4000c70, options=4, tables=tables@entry=0x0, write_to_binlog=write_to_binlog@entry=0x7228a57fe160)at /test/13.1_opt/sql/sql_reload.cc:370
      #8  0x00005c3989de5c6f in mysql_execute_command (thd=thd@entry=0x6a27c4000c70, is_called_from_prepared_stmt=false) at /test/13.1_opt/sql/sql_parse.cc:5403
      #9  0x00005c3989dded52 in mysql_parse (thd=thd@entry=0x6a27c4000c70, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x7228a57fe580)at /test/13.1_opt/sql/sql_parse.cc:7968
      #10 0x00005c3989ddd310 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x6a27c4000c70, packet=packet@entry=0x6a27c4008e61 "FLUSH TABLES", packet_length=packet_length@entry=12, blocking=true)at /test/13.1_opt/sql/sql_parse.cc:1903
      #11 0x00005c3989ddf1d1 in do_command (thd=thd@entry=0x6a27c4000c70, blocking=true) at /test/13.1_opt/sql/sql_parse.cc:1437
      #12 0x00005c3989f0b0cd in do_handle_one_connection (connect=<optimized out>, connect@entry=0x5c39b0238480, put_in_cache=true)at /test/13.1_opt/sql/sql_connect.cc:1514
      #13 0x00005c3989f0af02 in handle_one_connection (arg=arg@entry=0x5c39b0238480)at /test/13.1_opt/sql/sql_connect.cc:1426
      #14 0x00005c398a2b74a3 in pfs_spawn_thread (arg=0x5c39b0258e70)at /test/13.1_opt/storage/perfschema/pfs.cc:2198
      #15 0x00007228d509cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #16 0x00007228d5129d6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      CS 13.1.0 b2a8c2234dbc276fe3947633c9ffea454badf48f (Debug, Clang 18.1.3-11) Build 07/09/2026

      Core was generated by `/test/MD070926-mariadb-13.1.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --loo'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  0x00005bd05d12b0a7 in Item::delete_self (this=0x72238806de80)at /test/13.1_dbg/sql/item.h:2684
      2684	    cleanup();
      [Current thread is 1 (LWP 2144186)]
      (gdb) bt
      #0  0x00005bd05d12b0a7 in Item::delete_self (this=0x72238806de80)at /test/13.1_dbg/sql/item.h:2684
      #1  0x00005bd05d115bd9 in Query_arena::free_items (this=0x72238806d310)at /test/13.1_dbg/sql/sql_class.cc:4311
      #2  0x00005bd05d359031 in closefrm (table=0x7223880453c0)at /test/13.1_dbg/sql/table.cc:4911
      #3  0x00005bd05d515ac3 in intern_close_table (table=0x7223880453c0)at /test/13.1_dbg/sql/table_cache.cc:230
      #4  0x00005bd05d515798 in tc_purge () at /test/13.1_dbg/sql/table_cache.cc:324
      #5  0x00005bd05d0e203e in purge_tables () at /test/13.1_dbg/sql/sql_base.cc:338
      #6  0x00005bd05d0e2201 in close_cached_tables (thd=0x722388000d60, tables=0x0, wait_for_refresh=true, timeout=86400) at /test/13.1_dbg/sql/sql_base.cc:367
      #7  0x00005bd05d3fc485 in reload_acl_and_cache (thd=0x722388000d60, options=4, tables=0x0, write_to_binlog=0x7a24780e5bb4)at /test/13.1_dbg/sql/sql_reload.cc:370
      #8  0x00005bd05d1c4ba1 in mysql_execute_command (thd=0x722388000d60, is_called_from_prepared_stmt=false) at /test/13.1_dbg/sql/sql_parse.cc:5403
      #9  0x00005bd05d1b6294 in mysql_parse (thd=0x722388000d60, rawbuf=0x72238801a490 "FLUSH TABLES", length=12, parser_state=0x7a24780e6a80) at /test/13.1_dbg/sql/sql_parse.cc:7968
      #10 0x00005bd05d1b35bd in dispatch_command (command=COM_QUERY, thd=0x722388000d60, packet=0x72238800b6c1 "FLUSH TABLES", packet_length=12, blocking=true) at /test/13.1_dbg/sql/sql_parse.cc:1903
      #11 0x00005bd05d1b6e43 in do_command (thd=0x722388000d60, blocking=true)at /test/13.1_dbg/sql/sql_parse.cc:1437
      #12 0x00005bd05d3bc289 in do_handle_one_connection (connect=0x5bd06e3a4e40, put_in_cache=true) at /test/13.1_dbg/sql/sql_connect.cc:1514
      #13 0x00005bd05d3bc02e in handle_one_connection (arg=0x5bd06e418340)at /test/13.1_dbg/sql/sql_connect.cc:1426
      #14 0x00007a248349cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #15 0x00007a2483529d6c in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Bug Detection Matrix

          Rel    o/d  Build   Commit                                    UniqueID observed
      CS  10.6   dbg  170826  210ab6edf47fa73f3b77e974ed2e9357ccdd051c  No bug found
      CS  10.6   opt  170826  210ab6edf47fa73f3b77e974ed2e9357ccdd051c  No bug found
      CS  10.11  dbg  020926  1bc9eca856a32065fddce1db68edcfa6f4342578  No bug found
      CS  10.11  opt  020926  1bc9eca856a32065fddce1db68edcfa6f4342578  No bug found
      CS  11.4   dbg  020926  79f96bf15d2538cb78201cc85681571f56548957  No bug found
      CS  11.4   opt  020926  79f96bf15d2538cb78201cc85681571f56548957  No bug found
      CS  11.8   dbg  170826  d26f9ab217a7fcf9d4eccc62c01020ff275ff42e  No bug found
      CS  11.8   opt  170826  d26f9ab217a7fcf9d4eccc62c01020ff275ff42e  No bug found
      CS  12.3   dbg  170826  91156c3de58762196605150ab3f756fe952592d1  No bug found
      CS  12.3   opt  170826  91156c3de58762196605150ab3f756fe952592d1  No bug found
      CS  13.0   dbg  170826  a848493c6fe031f23606144420c1ca1e467cbd81  No bug found
      CS  13.0   opt  170826  a848493c6fe031f23606144420c1ca1e467cbd81  No bug found
      CS  13.1   dbg  070926  b2a8c2234dbc276fe3947633c9ffea454badf48f  SIGSEGV|Item::delete_self|Query_arena::free_items|closefrm|intern_close_table
      CS  13.1   opt  070926  b2a8c2234dbc276fe3947633c9ffea454badf48f  SIGSEGV|Item::delete_self|Query_arena::free_items|closefrm|intern_close_table
      ES  11.4   dbg  060526  90f707057d44f1b5c013a0c3672fd12f32ea7085  No bug found
      ES  11.4   opt  060526  90f707057d44f1b5c013a0c3672fd12f32ea7085  No bug found
      ES  11.8   dbg  060526  1499789de285a8109d68d79347de0281865b28f4  No bug found
      ES  11.8   opt  060526  1499789de285a8109d68d79347de0281865b28f4  No bug found
      

      Attachments

        Activity

          People

            midenok Aleksey Midenkov
            ramesh Ramesh Sivaraman
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 0.5h
                0.5h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.