Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-6799

Crash in field_conv, memcpy_field_possible

    Details

    • Sprint:
      10.0.21

      Description

      Crash with the following stack trace happened at a customer:

      > mysqld.exe!Field_string::type() Line 2239 + 0x15 bytes	C++
      mysqld.exe!memcpy_field_possible(Field * to, Field * from) Line 840 + 0x10 bytes	C++
      mysqld.exe!field_conv(Field * to, Field * from) Line 865 + 0x5 bytes	C++
      mysqld.exe!save_field_in_field(Field * from, bool * null_value, Field * to, bool no_conversions) Line 5978	C++
      mysqld.exe!sp_eval_expr(THD * thd, Field * result_field, Item * * expr_item_ptr) Line 434	C++
      mysqld.exe!sp_rcontext::set_variable(THD * thd, Field * field, Item * * value) Line 377 + 0xe bytes	C++
      mysqld.exe!sp_cursor::Select_fetch_into_spvars::send_data(List<Item> & items) Line 553 + 0x25 bytes	C++
      mysqld.exe!Materialized_cursor::fetch(unsigned long num_rows) Line 339 + 0x10 bytes	C++
      mysqld.exe!sp_cursor::fetch(THD * thd, List<sp_variable> * vars) Line 510	C++
      mysqld.exe!sp_instr_cfetch::execute(THD * thd, unsigned int * nextp) Line 3864 + 0xe bytes	C++
      mysqld.exe!sp_head::execute(THD * thd, bool merge_da_on_success) Line 1366 + 0x11 bytes	C++
      mysqld.exe!sp_head::execute_procedure(THD * thd, List<Item> * args) Line 2152 + 0xe bytes	C++
      mysqld.exe!mysql_execute_command(THD * thd) Line 4688 + 0x13 bytes	C++
      mysqld.exe!mysql_parse(THD * thd, char * rawbuf, unsigned int length, Parser_state * parser_state) Line 6416	C++
      mysqld.exe!dispatch_command(enum_server_command command, THD * thd, char * packet, unsigned int packet_length) Line 1310	C++
      mysqld.exe!do_command(THD * thd) Line 1011	C++
      mysqld.exe!threadpool_process_request(THD * thd) Line 233 + 0x8 bytes	C++
      mysqld.exe!io_completion_callback(_TP_CALLBACK_INSTANCE * instance, void * context, void * overlapped, unsigned long io_result, unsigned __int64 nbytes, _TP_IO * io) Line 568 + 0x17 bytes	C++
      kernel32.dll!BasepTpIoCallback() + 0x52 bytes
      ntdll.dll!TppIopExecuteCallback() + 0x1ba bytes
      ntdll.dll!TppWorkerThread() + 0x33f bytes
      kernel32.dll!BaseThreadInitThunk() + 0xd bytes
      ntdll.dll!RtlUserThreadStart() + 0x21 bytes

      We were unable to get a small repeatable testcase, but under customer' load the crash is reproducible.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                psergey Sergei Petrunia
                Reporter:
                psergey Sergei Petrunia
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: