Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-41997

SIGSEGV in Dep_analysis_context::dbug_print_deps

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      CREATE TABLE t1 (c1 INT);
      SET debug_dbug='+d';
      CREATE TABLE t5 (c1 FLOAT);
      select * from (t1 natural join t1 t3) natural right join t5;
      

      Leads to:

      CS 13.2.0 c894d97781b54fbf074677c9d67f81cd60a162ac (Debug, Clang 22.1.8-20260621) Build 26/10/2026

      Core was generated by `/test/MD261026-mariadb-13.2.0-linux-x86_64-dbg/bin/mariadbd --no-defaults --loo'.
      Program terminated with signal SIGSEGV, Segmentation fault.
      #0  0x000055bba7135ecb in Dep_analysis_context::dbug_print_deps (this=0x7db410072c00) at /test/13.1_dbg/sql/opt_table_elimination.cc:2178
       
      [Current thread is 1 (LWP 3430126)]
      (gdb) bt
      #0  0x000055bba7135ecb in Dep_analysis_context::dbug_print_deps (this=0x7db410072c00) at /test/13.1_dbg/sql/opt_table_elimination.cc:2178
      #1  0x000055bba71369e3 in check_func_dependency (join=0x75b2dc01dda0, dep_tables=3, it=0x7db410072ec0, oj_tbl=0x0, cond=0x75b2dc01f210)at /test/13.1_dbg/sql/opt_table_elimination.cc:1029
      #2  0x000055bba71349c5 in eliminate_tables_for_list (join=0x75b2dc01dda0, join_list=0x75b2dc01c290, list_tables=3, on_expr=0x75b2dc01f210, tables_used_elsewhere=4, trace_eliminate_tables=0x7db410073158)at /test/13
      .1_dbg/sql/opt_table_elimination.cc:938
      #3  0x000055bba71347fd in eliminate_tables_for_list (join=0x75b2dc01dda0, join_list=0x75b2dc01a6f8, list_tables=7, on_expr=0x0, tables_used_elsewhere=4, trace_eliminate_tables=0x7db410073158)at /test/13.1_dbg/sql/
      opt_table_elimination.cc:898
      #4  0x000055bba713469c in eliminate_tables (join=0x75b2dc01dda0)at /test/13.1_dbg/sql/opt_table_elimination.cc:834
      #5  0x000055bba6f5ec68 in make_join_statistics (join=0x75b2dc01dda0, tables_list=@0x75b2dc01a758: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x75b2dc01e570, last = 0x75b2dc01e590, elements = 3}, <No
       data fields>}, keyuse_array=0x75b2dc01e100) at /test/13.1_dbg/sql/sql_select.cc:5896
      #6  0x000055bba6f58df9 in JOIN::optimize_inner (this=0x75b2dc01dda0)at /test/13.1_dbg/sql/sql_select.cc:2779
      #7  0x000055bba6f56ac6 in JOIN::optimize (this=0x75b2dc01dda0)at /test/13.1_dbg/sql/sql_select.cc:2032
      #8  0x000055bba6f4f28d in mysql_select (thd=0x75b2dc000d60, tables=0x75b2dc01abe0, fields=@0x75b2dc01a7f8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x75b2dc01ab70, last = 0x75b2dc01ab70, elements 
      = 1}, <No data fields>}, conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2164525824, result=0x75b2dc01dd70, unit=0x75b2dc0052f8, select_lex=0x75b2dc01a540) at /test/13.1_dbg/s
      ql/sql_select.cc:5447
      #9  0x000055bba6f4ee8d in handle_select (thd=0x75b2dc000d60, lex=0x75b2dc005218, result=0x75b2dc01dd70, setup_tables_done_option=0)at /test/13.1_dbg/sql/sql_select.cc:652
      #10 0x000055bba6ef37b6 in execute_sqlcom_select (thd=0x75b2dc000d60, all_tables=0x75b2dc01abe0) at /test/13.1_dbg/sql/sql_parse.cc:6266
      #11 0x000055bba6ee9a4b in mysql_execute_command (thd=0x75b2dc000d60, is_called_from_prepared_stmt=false) at /test/13.1_dbg/sql/sql_parse.cc:4038
      #12 0x000055bba6ee2718 in mysql_parse (thd=0x75b2dc000d60, rawbuf=0x75b2dc01a460 "select * from (t1 natural join t1 t3) natural right join t5", length=59, parser_state=0x7db4100759c0)at /test/13.1_dbg/sql/sql_pars
      e.cc:8005
      #13 0x000055bba6edfece in dispatch_command (command=COM_QUERY, thd=0x75b2dc000d60, packet=0x75b2dc00b691 "select * from (t1 natural join t1 t3) natural right join t5", packet_length=59, blocking=true)at /test/13.1
      _dbg/sql/sql_parse.cc:1903
      #14 0x000055bba6ee319a in do_command (thd=0x75b2dc000d60, blocking=true)at /test/13.1_dbg/sql/sql_parse.cc:1437
      #15 0x000055bba70be0ce in do_handle_one_connection (connect=0x55bbc2b9df30, put_in_cache=true) at /test/13.1_dbg/sql/sql_connect.cc:1514
      #16 0x000055bba70bdeb1 in handle_one_connection (arg=0x55bbc2b368e0)at /test/13.1_dbg/sql/sql_connect.cc:1426
      #17 0x00007db41389cb84 in start_thread (arg=<optimized out>)at ./nptl/pthread_create.c:447
      #18 0x00007db413929ecc in clone3 ()at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:78
      

      Bug Detection Matrix

          Rel    o/d  Build   Commit                                    UniqueID observed             
      CS  10.11  dbg  261026  6a063120d4d3d451bff3ea84b3ffbee288b33be8  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      CS  10.11  opt  261026  6a063120d4d3d451bff3ea84b3ffbee288b33be8  No bug found                  
      CS  11.4   dbg  261026  b6406d42c8e26be3d86a4a743180f6b415a4559b  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      CS  11.4   opt  261026  b6406d42c8e26be3d86a4a743180f6b415a4559b  No bug found                  
      CS  11.8   dbg  261026  274dd0d8d90bc773090d13303b8d5e36d2390241  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      CS  11.8   opt  261026  274dd0d8d90bc773090d13303b8d5e36d2390241  No bug found                  
      CS  12.3   dbg  261026  788a07c52132d9f42b6991e599510c62d1625c0f  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      CS  12.3   opt  261026  788a07c52132d9f42b6991e599510c62d1625c0f  No bug found                  
      CS  13.0   dbg  261026  620a4b5624222048fece7fe1789978ae0675cae2  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      CS  13.0   opt  261026  620a4b5624222048fece7fe1789978ae0675cae2  No bug found
      CS  13.2   dbg  261026  c894d97781b54fbf074677c9d67f81cd60a162ac  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      CS  13.2   opt  261026  c894d97781b54fbf074677c9d67f81cd60a162ac  No bug found
      ES  10.6   dbg  261026  45fbb1583d8cdcc7da5a123a844b3bf512f31c9d  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      ES  10.6   opt  261026  45fbb1583d8cdcc7da5a123a844b3bf512f31c9d  No bug found
      ES  11.4   dbg  261026  6b2ae48e6e2488060adfdd02a7114bb60d4d150c  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      ES  11.4   opt  261026  6b2ae48e6e2488060adfdd02a7114bb60d4d150c  No bug found
      ES  11.8   dbg  261026  6e6ba60bdc2b3f478513c5afa3faa062d8e73736  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      ES  11.8   opt  261026  6e6ba60bdc2b3f478513c5afa3faa062d8e73736  No bug found
      ES  12.3   dbg  261026  781803ca9943d806ecb4b3b3fb39264dfafe1cf0  SIGSEGV|Dep_analysis_context::dbug_print_deps|check_func_dependency|eliminate_tables_for_list|eliminate_tables_for_list
      ES  12.3   opt  261026  781803ca9943d806ecb4b3b3fb39264dfafe1cf0  No bug found
      

      Attachments

        Activity

          People

            Johnston Rex Johnston
            saahil Saahil Alam
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 1.5h
                1.5h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.