Server crashes in Locked_tables_list::restore_lock on CREATE OR REPLACE .. SELECT under LOCK

create table t1 (i int);

lock table t1 write;

create or replace table t1 as select 1;

#3  <signal handler called>

#4  __strcmp_ssse3 () at ../sysdeps/x86_64/multiarch/../strcmp.S:1613

#5  0x0000000000606b0e in Locked_tables_list::restore_lock (this=0x7fbfaa338ba8, thd=0x7fbfaa335070, dst_table_list=0x7fbfa7753088, table=0x7fbfa74a3470, lock=0x7fbfa7454cb0) at /home/elenst/bzr/mariadb-monty/sql/sql_base.cc:2928

#6  0x00000000006500e6 in select_create::send_eof (this=0x7fbfa75bc800) at /home/elenst/bzr/mariadb-monty/sql/sql_insert.cc:4298

#7  0x000000000069e445 in JOIN::exec_inner (this=0x7fbfa75bc8e0) at /home/elenst/bzr/mariadb-monty/sql/sql_select.cc:2445

#8  0x000000000069de40 in JOIN::exec (this=0x7fbfa75bc8e0) at /home/elenst/bzr/mariadb-monty/sql/sql_select.cc:2356

#9  0x00000000006a11af in mysql_select (thd=0x7fbfaa335070, rref_pointer_array=0x7fbfaa339688, tables=0x0, wild_num=0, fields=..., conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0, select_options=2418281216, result=0x7fbfa75bc800, unit=0x7fbfaa338d38, select_lex=0x7fbfaa339418) at /home/elenst/bzr/mariadb-monty/sql/sql_select.cc:3294

#10 0x00000000006978e3 in handle_select (thd=0x7fbfaa335070, lex=0x7fbfaa338c78, result=0x7fbfa75bc800, setup_tables_done_option=0) at /home/elenst/bzr/mariadb-monty/sql/sql_select.cc:372

#11 0x0000000000665d68 in mysql_execute_command (thd=0x7fbfaa335070) at /home/elenst/bzr/mariadb-monty/sql/sql_parse.cc:2989

#12 0x000000000066f0cc in mysql_parse (thd=0x7fbfaa335070, rawbuf=0x7fbfa75bc088 "create or replace table t1 as select 1", length=38, parser_state=0x7fbfb1cb4630) at /home/elenst/bzr/mariadb-monty/sql/sql_parse.cc:6386

#13 0x0000000000662006 in dispatch_command (command=COM_QUERY, thd=0x7fbfaa335070, packet=0x7fbfaa32b071 "create or replace table t1 as select 1", packet_length=38) at /home/elenst/bzr/mariadb-monty/sql/sql_parse.cc:1296

#14 0x00000000006613a8 in do_command (thd=0x7fbfaa335070) at /home/elenst/bzr/mariadb-monty/sql/sql_parse.cc:993

#15 0x000000000077aef5 in do_handle_one_connection (thd_arg=0x7fbfaa335070) at /home/elenst/bzr/mariadb-monty/sql/sql_connect.cc:1379

#16 0x000000000077ac48 in handle_one_connection (arg=0x7fbfaa335070) at /home/elenst/bzr/mariadb-monty/sql/sql_connect.cc:1293

#17 0x0000000000a9dd45 in pfs_spawn_thread (arg=0x7fbfaab75530) at /home/elenst/bzr/mariadb-monty/storage/perfschema/pfs.cc:1853

#18 0x00007fbfb1a01b50 in start_thread (arg=<optimized out>) at pthread_create.c:304

#19 0x00007fbfb0550a7d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:112

#20 0x0000000000000000 in ?? ()

revision-id: monty@askmonty.org-20140129123724-hl8iop8cpxbk67r5

revno: 3970

branch-nick: mariadb-monty