SIGSEGV in sec_part_shift / Assertion `dec <= 6' failed

CREATE TABLE t1 (a INT);

(SELECT 1 FROM t1 LIMIT 1) ORDER BY PERCENTILE_DISC(1) WITHIN GROUP(ORDER BY TIME'0') OVER();

Core was generated by `/test/MD261026-mariadb-13.2.0-linux-x86_64-opt/bin/mariadbd --no-defaults --loo'.

Program terminated with signal SIGSEGV, Segmentation fault.

#0  0x00005f10f1285b26 in sec_part_shift (second_part=3020400000000, digits=10)at /test/13.1_opt/include/my_time.h:250

[Current thread is 1 (LWP 1203118)]

(gdb) bt

#0  0x00005f10f1285b26 in sec_part_shift (second_part=3020400000000, digits=10)at /test/13.1_opt/include/my_time.h:250

#1  Field_time_hires::Field_time_hires (this=0x6fb02c06e3c0, ptr_arg=<optimized out>, null_ptr_arg=<optimized out>, null_bit_arg=1 '\001', unireg_check_arg=Field::NONE, field_name_arg=0x6fb02c019850, dec_arg=10)at /test/13.1_opt/sql/field.h:3881

#2  new_Field_time (root=<optimized out>, ptr=<optimized out>, null_ptr=<optimized out>, null_bit=1 '\001', unireg_check=unireg_check@entry=Field::NONE, field_name=0x6fb02c019850, dec=10) at /test/13.1_opt/sql/field.h:4184

#3  0x00005f10f1288c7b in Type_handler_time2::make_table_field (this=<optimized out>, root=0x6fb02c06e3c0, name=0x0, addr=<optimized out>, attr=<optimized out>, share=<optimized out>)at /test/13.1_opt/sql/sql_type.cc:3962

#4  0x00005f10f128845b in Type_handler::make_and_init_table_field_ex (this=0x6fb02c06e3c0, root=0x0, name=0x0, name@entry=0x6fb02c019850, addr=@0x5f10f240f040: {m_ptr = 0x1 <error: Cannot access memory at address 0x1>, m_null = {m_ptr = 0xa <error: Cannot acce

ss memory at address 0xa>, m_offs = 100 'd'}}, attr=<error reading variable: Cannot access memory at address 0x1>, param=0x0, param@entry=0x77b10404b412, table=0x6fb02c06d700)at /test/13.1_opt/sql/sql_type.cc:3746

#5  0x00005f10f1136bd6 in Item_result_field::create_tmp_field_ex_from_handler (this=0x6fb02c019800, root=0x0, table=<optimized out>, src=<optimized out>, param=0x77b10404b412, type_handler=0x6fb02c06e3c0)at /test/13.1_opt/sql/sql_select.cc:22143

#6  0x00005f10f1136d07 in create_tmp_field (table=table@entry=0x6fb02c06d700, item=item@entry=0x6fb02c019800, copy_func=copy_func@entry=0x77b10404b4a0, from_field=from_field@entry=0x6fb02c06e060, default_field=0x6fb02c06e040, group=false, modify_item=<optimize

d out>, table_cant_handle_bit_fields=<optimized out>, make_copy_field=<optimized out>, part_of_unique_key=false)at /test/13.1_opt/sql/sql_select.cc:22234

#7  0x00005f10f1137f0c in Create_tmp_table::add_fields (this=this@entry=0x77b10404b538, thd=thd@entry=0x6fb02c000c70, table=0x6fb02c06d700, param=param@entry=0x6fb02c01f390, fields=@0x6fb02c01b580: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x6f

b02c01c520, last = 0x6fb02c019ff0, elements = 2}, <No data fields>})at /test/13.1_opt/sql/sql_select.cc:22731

#8  0x00005f10f111c837 in create_tmp_table (thd=0x6fb02c000c70, param=param@entry=0x6fb02c01f390, fields=@0x6fb02c01b580: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x6fb02c01c520, last = 0x6fb02c019ff0, elements = 2}, <No data fields>}, group=g

roup@entry=0x0, distinct=<optimized out>, save_sum_fields=<optimized out>, select_options=2164525824, rows_limit=18446744073709551615, table_alias=0x5f10f2225ee0 <empty_clex_str>, do_not_open=<optimized out>, keep_row_order=<optimized out>) at /test/13.1_opt/s

ql/sql_select.cc:23547

#9  0x00005f10f111d403 in JOIN::create_postjoin_aggr_table (this=0x6fb02c01b1e0, tab=tab@entry=0x6fb02c066978, table_fields=table_fields@entry=0x6fb02c01b580, table_group=0x0, save_sum_fields=false, distinct=false, keep_row_order=<optimized out>)at /test/13.1_

opt/sql/sql_select.cc:4430

#10 0x00005f10f111abc8 in JOIN::make_aggr_tables_info (this=this@entry=0x6fb02c01b1e0) at /test/13.1_opt/sql/sql_select.cc:3990

#11 0x00005f10f110f6af in JOIN::optimize_stage2 (this=this@entry=0x6fb02c01b1e0) at /test/13.1_opt/sql/sql_select.cc:3598

#12 0x00005f10f110de1f in JOIN::optimize_inner (this=this@entry=0x6fb02c01b1e0)at /test/13.1_opt/sql/sql_select.cc:2805

#13 0x00005f10f1107059 in JOIN::optimize (this=0x6fb02c01b1e0)at /test/13.1_opt/sql/sql_select.cc:2032

#14 mysql_select (thd=thd@entry=0x6fb02c000c70, tables=<optimized out>, fields=@0x6fb02c019c78: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x6fb02c019ff0, last = 0x6fb02c019ff0, elements = 1}, <No data fields>}, conds=<optimized out>, og_num=<optimized out>, order=<optimized out>, group=0x0, having=0x0, proc_param=0x0, select_options=<optimized out>, result=0x6fb02c01b1b0, unit=0x6fb02c005230, select_lex=0x6fb02c0199c0)at /test/13.1_opt/sql/sql_select.cc:5447

#15 0x00005f10f1106af0 in handle_select (thd=thd@entry=0x6fb02c000c70, lex=lex@entry=0x6fb02c005150, result=result@entry=0x6fb02c01b1b0, setup_tables_done_option=setup_tables_done_option@entry=0)at /test/13.1_opt/sql/sql_select.cc:652

#16 0x00005f10f10d2257 in execute_sqlcom_select (thd=thd@entry=0x6fb02c000c70, all_tables=0x6fb02c01a040) at /test/13.1_opt/sql/sql_parse.cc:6266

#17 0x00005f10f10cdafd in mysql_execute_command (thd=thd@entry=0x6fb02c000c70, is_called_from_prepared_stmt=false) at /test/13.1_opt/sql/sql_parse.cc:4038

#18 0x00005f10f10c8cfd in mysql_parse (thd=thd@entry=0x6fb02c000c70, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x77b10404c4e0)at /test/13.1_opt/sql/sql_parse.cc:8005

#19 0x00005f10f10c74cd in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x6fb02c000c70, packet=packet@entry=0x6fb02c008e31 "(SELECT 1 FROM t1 LIMIT 1) ORDER BY PERCENTILE_DISC(1) WITHIN GROUP(ORDER BY TIME'0') OVER()", packet_length=packet_length@entry=92, blocking=true)at /test/13.1_opt/sql/sql_parse.cc:1903

#20 0x00005f10f10c9180 in do_command (thd=thd@entry=0x6fb02c000c70, blocking=true) at /test/13.1_opt/sql/sql_parse.cc:1437

#21 0x00005f10f11f735d in do_handle_one_connection (connect=<optimized out>, connect@entry=0x5f11240f03c0, put_in_cache=true)at /test/13.1_opt/sql/sql_connect.cc:1514

#22 0x00005f10f11f7192 in handle_one_connection (arg=arg@entry=0x5f11240f03c0)at /test/13.1_opt/sql/sql_connect.cc:1426

#23 0x00005f10f15a7723 in pfs_spawn_thread (arg=0x5f1124111180)at /test/13.1_opt/storage/perfschema/pfs.cc:2198

#24 0x000077b105a9cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#25 0x000077b105b29ecc in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

mariadbd: /test/13.1_dbg/sql/field.h:3855: Field_time_with_dec::Field_time_with_dec(uchar *, uchar *, uchar, enum utype, const LEX_CSTRING *, decimal_digits_t): Assertion `dec <= 6' failed.

Core was generated by `/test/MD261026-mariadb-13.2.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --loo'.

Program terminated with signal SIGABRT, Aborted.

#0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44

[Current thread is 1 (LWP 1204434)]

(gdb) bt

#0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:44

#1  __pthread_kill_internal (signo=6, threadid=<optimized out>)at ./nptl/pthread_kill.c:78

#2  __GI___pthread_kill (threadid=<optimized out>, signo=signo@entry=6)at ./nptl/pthread_kill.c:89

#3  0x00007a188964527e in __GI_raise (sig=sig@entry=6)at ../sysdeps/posix/raise.c:26

#4  0x00007a18896288ff in __GI_abort () at ./stdlib/abort.c:79

#5  0x00007a188962881b in __assert_fail_base (fmt=0x7a18897d1208 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x5ba7780f1727 "dec <= 6", file=file@entry=0x5ba7780d9139 "/test/13.1_dbg/sql/field.h", line=line@entry=3855, function=function@entry=0x5ba77815695b "Field_time_with_dec::Field_time_with_dec(uchar *, uchar *, uchar, enum utype, const LEX_CSTRING *, decimal_digits_t)") at ./assert/assert.c:96

#6  0x00007a188963b517 in __assert_fail (assertion=0x5ba7780f1727 "dec <= 6", file=0x5ba7780d9139 "/test/13.1_dbg/sql/field.h", line=3855, function=0x5ba77815695b "Field_time_with_dec::Field_time_with_dec(uchar *, uchar *, uchar, enum utype, const LEX_CSTRING *, decimal_digits_t)")at ./assert/assert.c:105

#7  0x00005ba7773b9caf in Field_time_with_dec::Field_time_with_dec (this=0x721770092390, ptr_arg=0x0, null_ptr_arg=0x5ba778313767 "", null_bit_arg=1 '\001', unireg_check_arg=Field::NONE, field_name_arg=0x72177001c0b0, dec_arg=10)at /test/13.1_dbg/sql/field.h:3855

#8  0x00005ba7773b9a33 in Field_time_hires::Field_time_hires (this=0x721770092390, ptr_arg=0x0, null_ptr_arg=0x5ba778313767 "", null_bit_arg=1 '\001', unireg_check_arg=Field::NONE, field_name_arg=0x72177001c0b0, dec_arg=10)at /test/13.1_dbg/sql/field.h:3876

#9  0x00005ba777394cce in new_Field_time (root=0x721770091760, ptr=0x0, null_ptr=0x5ba778313767 "", null_bit=1 '\001', unireg_check=Field::NONE, field_name=0x72177001c0b0, dec=10) at /test/13.1_dbg/sql/field.h:4184

#10 0x00005ba777398f03 in Type_handler_time2::make_table_field (this=0x5ba778e2e368 <type_handler_time2>, root=0x721770091760, name=0x72177001c0b0, addr=@0x7a18638d0bd0: {m_ptr = 0x0, m_null = {m_ptr = 0x5ba778313767 "", m_offs = 0 '\000'}}, attr=@0x72177001c060: {<Type_std_attributes> = {<Type_numeric_attributes> = {max_length = 17, decimals = 10, unsigned_flag = false}, collation = {collation = 0x5ba778c8acc0 <my_charset_latin1>, derivation = DERIVATION_NUMERIC, repertoire = MY_REPERTOIRE_ASCII}}, _vptr$Type_all_attributes = 0x5ba778b74eb8 <vtable for Item_window_func+16>, static _vtable$ = <optimized out>}, share=0x721770091880) at /test/13.1_dbg/sql/sql_type.cc:3962

#11 0x00005ba777299e55 in Type_handler::make_table_field_ex (this=0x5ba778e2e368 <type_handler_time2>, root=0x721770091760, name=0x72177001c0b0, addr=@0x7a18638d0bd0: {m_ptr = 0x0, m_null = {m_ptr = 0x5ba778313767 "", m_offs = 0 '\000'}}, attr=@0x72177001c060: {<Type_std_attributes> = {<Type_numeric_attributes> = {max_length = 17, decimals = 10, unsigned_flag = false}, collation = {collation = 0x5ba778c8acc0 <my_charset_latin1>, derivation = DERIVATION_NUMERIC, repertoire = MY_REPERTOIRE_ASCII}}, _vptr$Type_all_attributes = 0x5ba778b74eb8 <vtable for Item_window_func+16>, static _vtable$ = <optimized out>}, param=0x7a18638d0c6a, share=0x721770091880)at /test/13.1_dbg/sql/sql_type.h:4470

#12 0x00005ba7773981f0 in Type_handler::make_and_init_table_field_ex (this=0x5ba778e2e368 <type_handler_time2>, root=0x721770091760, name=0x72177001c0b0, addr=@0x7a18638d0bd0: {m_ptr = 0x0, m_null = {m_ptr = 0x5ba778313767 "", m_offs = 0 '\000'}}, attr=@0x72177001c060: {<Type_std_attributes> = {<Type_numeric_attributes> = {max_length = 17, decimals = 10, unsigned_flag = false}, collation = {collation = 0x5ba778c8acc0 <my_charset_latin1>, derivation = DERIVATION_NUMERIC, repertoire = MY_REPERTOIRE_ASCII}}, _vptr$Type_all_attributes = 0x5ba778b74eb8 <vtable for Item_window_func+16>, static _vtable$ = <optimized out>}, param=0x7a18638d0c6a, table=0x721770091460)at /test/13.1_dbg/sql/sql_type.cc:3746

#13 0x00005ba777184039 in Item_result_field::create_tmp_field_ex_from_handler (this=0x72177001c060, root=0x721770091760, table=0x721770091460, src=0x7a18638d0c70, param=0x7a18638d0c6a, type_handler=0x5ba778e2e368 <type_handler_time2>)at /test/13.1_dbg/sql/sql_select.cc:22143

#14 0x00005ba776f67fbb in Item_result_field::create_tmp_field_ex (this=0x72177001c060, root=0x721770091760, table=0x721770091460, src=0x7a18638d0c70, param=0x7a18638d0c6a) at /test/13.1_dbg/sql/item.h:3751

#15 0x00005ba77718423a in create_tmp_field (table=0x721770091460, item=0x72177001c060, copy_func=0x7a18638d0e30, from_field=0x721770091f90, default_field=0x721770091f50, group=false, modify_item=true, table_cant_handle_bit_fields=false, make_copy_field=false, part_of_unique_key=false) at /test/13.1_dbg/sql/sql_select.cc:22234

#16 0x00005ba7771865be in Create_tmp_table::add_fields (this=0x7a18638d0ec8, thd=0x721770000d60, table=0x721770091460, param=0x721770021e80, fields=@0x72177001dde8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x72177001ed90, last = 0x72177001c850, elements = 2}, <No data fields>})at /test/13.1_dbg/sql/sql_select.cc:22731

#17 0x00005ba777162540 in create_tmp_table (thd=0x721770000d60, param=0x721770021e80, fields=@0x72177001dde8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x72177001ed90, last = 0x72177001c850, elements = 2}, <No data fields>}, group=0x0, distinct=false, save_sum_fields=false, select_options=2164525824, rows_limit=18446744073709551615, table_alias=0x5ba7789f74a0 <empty_clex_str>, do_not_open=true, keep_row_order=false) at /test/13.1_dbg/sql/sql_select.cc:23547

#18 0x00005ba7771637fd in JOIN::create_postjoin_aggr_table (this=0x72177001da40, tab=0x72177008a748, table_fields=0x72177001dde8, table_group=0x0, save_sum_fields=false, distinct=false, keep_row_order=false) at /test/13.1_dbg/sql/sql_select.cc:4430

#19 0x00005ba7771603f2 in JOIN::make_aggr_tables_info (this=0x72177001da40)at /test/13.1_dbg/sql/sql_select.cc:3990

#20 0x00005ba7771511a7 in JOIN::optimize_stage2 (this=0x72177001da40)at /test/13.1_dbg/sql/sql_select.cc:3598

#21 0x00005ba77714eeef in JOIN::optimize_inner (this=0x72177001da40)at /test/13.1_dbg/sql/sql_select.cc:2805

#22 0x00005ba77714cac6 in JOIN::optimize (this=0x72177001da40)at /test/13.1_dbg/sql/sql_select.cc:2032

#23 0x00005ba77714528d in mysql_select (thd=0x721770000d60, tables=0x72177001c8a0, fields=@0x72177001c4d8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x72177001c850, last = 0x72177001c850, elements = 1}, <No data fields>}, conds=0x0, og_num=1, order=0x72177001c170, group=0x0, having=0x0, proc_param=0x0, select_options=2164525824, result=0x72177001da10, unit=0x7217700052f8, select_lex=0x72177001c220)at /test/13.1_dbg/sql/sql_select.cc:5447

#24 0x00005ba777144e8d in handle_select (thd=0x721770000d60, lex=0x721770005218, result=0x72177001da10, setup_tables_done_option=0)at /test/13.1_dbg/sql/sql_select.cc:652

#25 0x00005ba7770e97b6 in execute_sqlcom_select (thd=0x721770000d60, all_tables=0x72177001c8a0) at /test/13.1_dbg/sql/sql_parse.cc:6266

#26 0x00005ba7770dfa4b in mysql_execute_command (thd=0x721770000d60, is_called_from_prepared_stmt=false) at /test/13.1_dbg/sql/sql_parse.cc:4038

#27 0x00005ba7770d8718 in mysql_parse (thd=0x721770000d60, rawbuf=0x72177001a460 "(SELECT 1 FROM t1 LIMIT 1) ORDER BY PERCENTILE_DISC(1) WITHIN GROUP(ORDER BY TIME'0') OVER()", length=92, parser_state=0x7a18638d39c0) at /test/13.1_dbg/sql/sql_parse.cc:8005

#28 0x00005ba7770d5ece in dispatch_command (command=COM_QUERY, thd=0x721770000d60, packet=0x72177000b691 "(SELECT 1 FROM t1 LIMIT 1) ORDER BY PERCENTILE_DISC(1) WITHIN GROUP(ORDER BY TIME'0') OVER()", packet_length=92, blocking=true)at /test/13.1_dbg/sql/sql_parse.cc:1903

#29 0x00005ba7770d919a in do_command (thd=0x721770000d60, blocking=true)at /test/13.1_dbg/sql/sql_parse.cc:1437

#30 0x00005ba7772b40ce in do_handle_one_connection (connect=0x5ba791cee0e0, put_in_cache=true) at /test/13.1_dbg/sql/sql_connect.cc:1514

#31 0x00005ba7772b3eb1 in handle_one_connection (arg=0x5ba791ca2cb0)at /test/13.1_dbg/sql/sql_connect.cc:1426

#32 0x00007a188969cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447

#33 0x00007a1889729ecc in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78

    Rel    o/d  Build   Commit                                    UniqueID observed

CS  10.11  dbg  261026  6a063120d4d3d451bff3ea84b3ffbee288b33be8  No bug found  

CS  10.11  opt  261026  6a063120d4d3d451bff3ea84b3ffbee288b33be8  No bug found  

CS  11.4   dbg  261026  b6406d42c8e26be3d86a4a743180f6b415a4559b  No bug found  

CS  11.4   opt  261026  b6406d42c8e26be3d86a4a743180f6b415a4559b  No bug found  

CS  11.8   dbg  261026  274dd0d8d90bc773090d13303b8d5e36d2390241  No bug found  

CS  11.8   opt  261026  274dd0d8d90bc773090d13303b8d5e36d2390241  No bug found  

CS  12.3   dbg  261026  788a07c52132d9f42b6991e599510c62d1625c0f  No bug found  

CS  12.3   opt  261026  788a07c52132d9f42b6991e599510c62d1625c0f  No bug found  

CS  13.0   dbg  261026  620a4b5624222048fece7fe1789978ae0675cae2  dec <= 6|SIGABRT|Field_time_with_dec::Field_time_with_dec|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

CS  13.0   opt  261026  620a4b5624222048fece7fe1789978ae0675cae2  SIGSEGV|sec_part_shift|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

CS  13.2   dbg  261026  c894d97781b54fbf074677c9d67f81cd60a162ac  dec <= 6|SIGABRT|Field_time_with_dec::Field_time_with_dec|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

CS  13.2   opt  261026  c894d97781b54fbf074677c9d67f81cd60a162ac  SIGSEGV|sec_part_shift|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  10.6   dbg  261026  45fbb1583d8cdcc7da5a123a844b3bf512f31c9d  dec <= 6|SIGABRT|Field_time_with_dec::Field_time_with_dec|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  10.6   opt  261026  45fbb1583d8cdcc7da5a123a844b3bf512f31c9d  SIGSEGV|sec_part_shift|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  11.4   dbg  261026  6b2ae48e6e2488060adfdd02a7114bb60d4d150c  dec <= 6|SIGABRT|Field_time_with_dec::Field_time_with_dec|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  11.4   opt  261026  6b2ae48e6e2488060adfdd02a7114bb60d4d150c  SIGSEGV|sec_part_shift|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  11.8   dbg  261026  6e6ba60bdc2b3f478513c5afa3faa062d8e73736  dec <= 6|SIGABRT|Field_time_with_dec::Field_time_with_dec|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  11.8   opt  261026  6e6ba60bdc2b3f478513c5afa3faa062d8e73736  SIGSEGV|sec_part_shift|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  12.3   dbg  261026  781803ca9943d806ecb4b3b3fb39264dfafe1cf0  dec <= 6|SIGABRT|Field_time_with_dec::Field_time_with_dec|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field

ES  12.3   opt  261026  781803ca9943d806ecb4b3b3fb39264dfafe1cf0  SIGSEGV|sec_part_shift|Field_time_hires::Field_time_hires|new_Field_time|Type_handler_time2::make_table_field