DNAMES: Assertion `offset < 0x1f' failed in type_and_offset_store on COLUMN_ADD

mysqld: 5.5-dnames/mysys/ma_dyncol.c:1155: type_and_offset_store: Assertion `offset < 0x1f' failed.

[ERROR] mysqld got signal 6 ;

#8  0xb75bb014 in __assert_fail () from /lib/libc.so.6

#9  0x088a0992 in type_and_offset_store (

    place=0x974a514 "\245\245\245\245\245col1", 'b' <repeats 191 times>..., offset_size=1,

    type=DYN_COL_STRING, offset=31) at mysys/ma_dyncol.c:1155

#10 0x0889f456 in put_header_entry_str (hdr=0xad228e34, column_key=0xad228d78,

    value=0xad228d28, offset=31) at mysys/ma_dyncol.c:229

#11 0x088a2a0c in dynamic_column_update_copy (str=0xad229004, plan=0xad228ec0,

    add_column_count=1, hdr=0xad228e78, new_hdr=0xad228e34, convert=0 '\000')

    at mysys/ma_dyncol.c:2256

#12 0x088a3f43 in dynamic_column_update_many_fmt (str=0xad229004, add_column_count=1,

    column_keys=0x971f468, values=0x971f428, string_keys=1 '\001')

    at mysys/ma_dyncol.c:2953

#13 0x08452aac in Item_func_dyncol_add::val_str (this=0x971f320, str=0x971f330)

    at sql/item_strfunc.cc:4107

#14 0x083e9e63 in Item::save_in_field (this=0x971f320, field=0x977b790,

    no_conversions=false) at sql/item.cc:5856

#15 0x081ef860 in fill_record (thd=0x966f350, fields=..., values=..., ignore_errors=false)

    at sql/sql_base.cc:8867

#16 0x081efa25 in fill_record_n_invoke_before_triggers (thd=0x966f350, fields=...,

    values=..., ignore_errors=false, triggers=0x0, event=TRG_EVENT_UPDATE)

    at sql/sql_base.cc:8922

#17 0x082e1039 in mysql_update (thd=0x966f350, table_list=0x971eb38, fields=...,

    values=..., conds=0x0, order_num=0, order=0x0, limit=18446744073709551615,

    handle_duplicates=DUP_ERROR, ignore=false, found_return=0xad229b50,

    updated_return=0xad229b48) at sql/sql_update.cc:687

#18 0x0823db05 in mysql_execute_command (thd=0x966f350)

    at sql/sql_parse.cc:2797

#19 0x08245a89 in mysql_parse (thd=0x966f350,

    rawbuf=0x971ea48 "UPDATE t1 SET f1 = COLUMN_ADD( f1, REPEAT('c',211), 'val3' )",

    length=60, parser_state=0xad229da4) at sql/sql_parse.cc:5736

#20 0x08239ed4 in dispatch_command (command=COM_QUERY, thd=0x966f350,

    packet=0x9718d19 "UPDATE t1 SET f1 = COLUMN_ADD( f1, REPEAT('c',211), 'val3' )",

    packet_length=60) at sql/sql_parse.cc:1055

#21 0x08239399 in do_command (thd=0x966f350)

    at sql/sql_parse.cc:794

#22 0x08325471 in do_handle_one_connection (thd_arg=0x966f350)

    at sql/sql_connect.cc:1253

#23 0x08324fbc in handle_one_connection (arg=0x966f350)

    at sql/sql_connect.cc:1168

#24 0x0854fd1b in pfs_spawn_thread (arg=0x975fae0)

    at storage/perfschema/pfs.cc:1015

#25 0xb789ab25 in start_thread () from /lib/libpthread.so.0

Some pointers may be invalid and cause the dump to abort.

Query (0x971ea48): UPDATE t1 SET f1 = COLUMN_ADD( f1, REPEAT('c',211), 'val3' )

Connection ID (thread ID): 2

Status: NOT_KILLED

bzr version-info

revision-id: sanja@askmonty.org-20120823152900-3ngz79t2yvtq28f6

date: 2012-08-23 18:29:00 +0300

build-date: 2012-08-26 20:48:18 +0400

revno: 3496

CREATE TABLE t1 (f1 tinyblob);

INSERT INTO t1 VALUES (COLUMN_CREATE('col1', REPEAT('a',30)));

UPDATE t1 SET f1 = COLUMN_ADD( f1, REPEAT('b',211), 'val2' );

UPDATE t1 SET f1 = COLUMN_ADD( f1, REPEAT('c',211), 'val3' );