[MDEV-20235] AddressSanitizer errors or Out of memory upon query with combination of functions and clauses Created: 2019-08-01  Updated: 2023-07-28  Resolved: 2023-07-28

Status: Closed
Project: MariaDB Server
Component/s: Server
Affects Version/s: 5.5, 10.1
Fix Version/s: N/A

Type: Bug Priority: Major
Reporter: Elena Stepanova Assignee: Oleksandr Byelkin
Resolution: Won't Fix Votes: 0
Labels: not-10.2, not-10.3, not-10.4


 Description    

CREATE TABLE t1 (a INT);
 
INSERT INTO t1 VALUES (1),(2);
 
SELECT DISTINCT VARIANCE(1) FROM t1 GROUP BY a ORDER BY BENCHMARK(4, VAR_SAMP(a));
 
 
 
# Cleanup
 
DROP TABLE t1;

10.1 0bb8f33b

 
==13411==ERROR: AddressSanitizer failed to allocate 0x2000003000 (137438965760) bytes of LargeMmapAllocator (error code: 12)
 
==13411==Process memory map follows:
 
	0x00007fff7000-0x00008fff7000	
	0x00008fff7000-0x02008fff7000	
	0x02008fff7000-0x10007fff8000	
	0x55d80475e000-0x55d806dad000	/data/bld/10.1-asan/bin/mysqld
 
	0x55d806fad000-0x55d80705e000	/data/bld/10.1-asan/bin/mysqld
 
	0x55d80705e000-0x55d807452000	/data/bld/10.1-asan/bin/mysqld
 
	0x55d807452000-0x55d807cf9000	
	0x600000000000-0x602000000000	
	0x602000000000-0x602000010000	
	0x602000010000-0x603000000000	
	0x603000000000-0x603000030000	
	0x603000030000-0x604000000000	
	0x604000000000-0x604000010000	
	0x604000010000-0x606000000000	
	0x606000000000-0x606000020000	
	0x606000020000-0x608000000000	
	0x608000000000-0x608000030000	
	0x608000030000-0x60b000000000	
	0x60b000000000-0x60b000020000	
	0x60b000020000-0x60c000000000	
	0x60c000000000-0x60c000040000	
	0x60c000040000-0x60d000000000	
	0x60d000000000-0x60d000050000	
	0x60d000050000-0x60e000000000	
	0x60e000000000-0x60e000080000	
	0x60e000080000-0x60f000000000	
	0x60f000000000-0x60f0000c0000	
	0x60f0000c0000-0x610000000000	
	0x610000000000-0x610000030000	
	0x610000030000-0x611000000000	
	0x611000000000-0x611000040000	
	0x611000040000-0x612000000000	
	0x612000000000-0x612000030000	
	0x612000030000-0x613000000000	
	0x613000000000-0x6130000c0000	
	0x6130000c0000-0x614000000000	
	0x614000000000-0x614000040000	
	0x614000040000-0x615000000000	
	0x615000000000-0x615000030000	
	0x615000030000-0x616000000000	
	0x616000000000-0x616000080000	
	0x616000080000-0x617000000000	
	0x617000000000-0x617000050000	
	0x617000050000-0x618000000000	
	0x618000000000-0x618000040000	
	0x618000040000-0x619000000000	
	0x619000000000-0x6190000d0000	
	0x6190000d0000-0x61a000000000	
	0x61a000000000-0x61a000060000	
	0x61a000060000-0x61b000000000	
	0x61b000000000-0x61b000050000	
	0x61b000050000-0x61c000000000	
	0x61c000000000-0x61c000070000	
	0x61c000070000-0x61d000000000	
	0x61d000000000-0x61d0001a0000	
	0x61d0001a0000-0x61e000000000	
	0x61e000000000-0x61e000030000	
	0x61e000030000-0x61f000000000	
	0x61f000000000-0x61f000060000	
	0x61f000060000-0x620000000000	
	0x620000000000-0x620000030000	
	0x620000030000-0x621000000000	
	0x621000000000-0x621000080000	
	0x621000080000-0x622000000000	
	0x622000000000-0x622000040000	
	0x622000040000-0x623000000000	
	0x623000000000-0x623000020000	
	0x623000020000-0x624000000000	
	0x624000000000-0x6240001a0000	
	0x6240001a0000-0x625000000000	
	0x625000000000-0x625000100000	
	0x625000100000-0x626000000000	
	0x626000000000-0x626000030000	
	0x626000030000-0x627000000000	
	0x627000000000-0x627000040000	
	0x627000040000-0x628000000000	
	0x628000000000-0x628000040000	
	0x628000040000-0x629000000000	
	0x629000000000-0x629000110000	
	0x629000110000-0x62a000000000	
	0x62a000000000-0x62a000070000	
	0x62a000070000-0x62b000000000	
	0x62b000000000-0x62b000040000	
	0x62b000040000-0x62c000000000	
	0x62c000000000-0x62c000050000	
	0x62c000050000-0x62d000000000	
	0x62d000000000-0x62d000180000	
	0x62d000180000-0x62e000000000	
	0x62e000000000-0x62e000050000	
	0x62e000050000-0x62f000000000	
	0x62f000000000-0x62f000040000	
	0x62f000040000-0x630000000000	
	0x630000000000-0x630000030000	
	0x630000030000-0x631000000000	
	0x631000000000-0x6310000a0000	
	0x6310000a0000-0x632000000000	
	0x632000000000-0x6320000c0000	
	0x6320000c0000-0x633000000000	
	0x633000000000-0x633000040000	
	0x633000040000-0x634000000000	
	0x634000000000-0x6340000e0000	
	0x6340000e0000-0x640000000000	
	0x640000000000-0x640000003000	
	0x7f6a6041b000-0x7f6a60703000	
	0x7f6a60703000-0x7f6a60704000	
	0x7f6a60704000-0x7f6a60784000	
	0x7f6a60784000-0x7f6a60785000	
	0x7f6a60785000-0x7f6a60805000	
	0x7f6a60805000-0x7f6a60806000	
	0x7f6a60806000-0x7f6a61b65000	
	0x7f6a61b65000-0x7f6a61b6b000	/dev/shm/var_auto_LjI5/mysqld.1/data/tc.log
 
	0x7f6a61b6b000-0x7f6a61b8f000	
	0x7f6a61b8f000-0x7f6a61b90000	
	0x7f6a61b90000-0x7f6a623b4000	
	0x7f6a623b4000-0x7f6a623b5000	
	0x7f6a623b5000-0x7f6a62bd9000	
	0x7f6a62bd9000-0x7f6a62bda000	
	0x7f6a62bda000-0x7f6a633fe000	
	0x7f6a633fe000-0x7f6a633ff000	
	0x7f6a633ff000-0x7f6a63c23000	
	0x7f6a63c23000-0x7f6a63c24000	
	0x7f6a63c24000-0x7f6a64448000	
	0x7f6a64448000-0x7f6a64449000	
	0x7f6a64449000-0x7f6a64c6d000	
	0x7f6a64c6d000-0x7f6a64c6e000	
	0x7f6a64c6e000-0x7f6a65491000	
	0x7f6a65491000-0x7f6a65492000	
	0x7f6a65492000-0x7f6a65cb5000	
	0x7f6a65cb5000-0x7f6a65cb6000	
	0x7f6a65cb6000-0x7f6a664d9000	
	0x7f6a664d9000-0x7f6a664da000	
	0x7f6a664da000-0x7f6a66fa8000	
	0x7f6a66fa8000-0x7f6a66fa9000	
	0x7f6a66fa9000-0x7f6a67df3000	
	0x7f6a67df3000-0x7f6a67df4000	
	0x7f6a67df4000-0x7f6a68617000	
	0x7f6a68617000-0x7f6a68618000	
	0x7f6a68618000-0x7f6a68e3b000	
	0x7f6a68e3b000-0x7f6a68e3c000	
	0x7f6a68e3c000-0x7f6a69657000	
	0x7f6a69657000-0x7f6a69658000	
	0x7f6a69658000-0x7f6a69e73000	
	0x7f6a69e73000-0x7f6a69e74000	
	0x7f6a69e74000-0x7f6a6a68f000	
	0x7f6a6a68f000-0x7f6a6a690000	
	0x7f6a6a690000-0x7f6a73d49000	
	0x7f6a73d49000-0x7f6a73d4a000	
	0x7f6a73d4a000-0x7f6a7cfff000	
	0x7f6a7cfff000-0x7f6a7d000000	
	0x7f6a7d000000-0x7f6a7e201000	
	0x7f6a7e201000-0x7f6a7e231000	
	0x7f6a7e231000-0x7f6a7e236000	/[aio] (deleted)
 
	0x7f6a7e236000-0x7f6a7e23b000	/[aio] (deleted)
 
	0x7f6a7e23b000-0x7f6a805b9000	
	0x7f6a805b9000-0x7f6a805c0000	/lib/x86_64-linux-gnu/librt-2.24.so
 
	0x7f6a805c0000-0x7f6a807bf000	/lib/x86_64-linux-gnu/librt-2.24.so
 
	0x7f6a807bf000-0x7f6a807c0000	/lib/x86_64-linux-gnu/librt-2.24.so
 
	0x7f6a807c0000-0x7f6a807c1000	/lib/x86_64-linux-gnu/librt-2.24.so
 
	0x7f6a807c1000-0x7f6a80956000	/lib/x86_64-linux-gnu/libc-2.24.so
 
	0x7f6a80956000-0x7f6a80b56000	/lib/x86_64-linux-gnu/libc-2.24.so
 
	0x7f6a80b56000-0x7f6a80b5a000	/lib/x86_64-linux-gnu/libc-2.24.so
 
	0x7f6a80b5a000-0x7f6a80b5c000	/lib/x86_64-linux-gnu/libc-2.24.so
 
	0x7f6a80b5c000-0x7f6a80b60000	
	0x7f6a80b60000-0x7f6a80b76000	/lib/x86_64-linux-gnu/libgcc_s.so.1
 
	0x7f6a80b76000-0x7f6a80d75000	/lib/x86_64-linux-gnu/libgcc_s.so.1
 
	0x7f6a80d75000-0x7f6a80d76000	/lib/x86_64-linux-gnu/libgcc_s.so.1
 
	0x7f6a80d76000-0x7f6a80d77000	/lib/x86_64-linux-gnu/libgcc_s.so.1
 
	0x7f6a80d77000-0x7f6a80e7a000	/lib/x86_64-linux-gnu/libm-2.24.so
 
	0x7f6a80e7a000-0x7f6a81079000	/lib/x86_64-linux-gnu/libm-2.24.so
 
	0x7f6a81079000-0x7f6a8107a000	/lib/x86_64-linux-gnu/libm-2.24.so
 
	0x7f6a8107a000-0x7f6a8107b000	/lib/x86_64-linux-gnu/libm-2.24.so
 
	0x7f6a8107b000-0x7f6a811ed000	/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
 
	0x7f6a811ed000-0x7f6a813ed000	/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
 
	0x7f6a813ed000-0x7f6a813f7000	/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
 
	0x7f6a813f7000-0x7f6a813f9000	/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.22
 
	0x7f6a813f9000-0x7f6a813fd000	
	0x7f6a813fd000-0x7f6a81400000	/lib/x86_64-linux-gnu/libdl-2.24.so
 
	0x7f6a81400000-0x7f6a815ff000	/lib/x86_64-linux-gnu/libdl-2.24.so
 
	0x7f6a815ff000-0x7f6a81600000	/lib/x86_64-linux-gnu/libdl-2.24.so
 
	0x7f6a81600000-0x7f6a81601000	/lib/x86_64-linux-gnu/libdl-2.24.so
 
	0x7f6a81601000-0x7f6a81609000	/lib/x86_64-linux-gnu/libcrypt-2.24.so
 
	0x7f6a81609000-0x7f6a81809000	/lib/x86_64-linux-gnu/libcrypt-2.24.so
 
	0x7f6a81809000-0x7f6a8180a000	/lib/x86_64-linux-gnu/libcrypt-2.24.so
 
	0x7f6a8180a000-0x7f6a8180b000	/lib/x86_64-linux-gnu/libcrypt-2.24.so
 
	0x7f6a8180b000-0x7f6a81839000	
	0x7f6a81839000-0x7f6a8186d000	/usr/lib/x86_64-linux-gnu/libjemalloc.so.1
 
	0x7f6a8186d000-0x7f6a81a6c000	/usr/lib/x86_64-linux-gnu/libjemalloc.so.1
 
	0x7f6a81a6c000-0x7f6a81a6e000	/usr/lib/x86_64-linux-gnu/libjemalloc.so.1
 
	0x7f6a81a6e000-0x7f6a81a6f000	/usr/lib/x86_64-linux-gnu/libjemalloc.so.1
 
	0x7f6a81a6f000-0x7f6a81a70000	
	0x7f6a81a70000-0x7f6a81a89000	/lib/x86_64-linux-gnu/libz.so.1.2.8
 
	0x7f6a81a89000-0x7f6a81c88000	/lib/x86_64-linux-gnu/libz.so.1.2.8
 
	0x7f6a81c88000-0x7f6a81c89000	/lib/x86_64-linux-gnu/libz.so.1.2.8
 
	0x7f6a81c89000-0x7f6a81c8a000	/lib/x86_64-linux-gnu/libz.so.1.2.8
 
	0x7f6a81c8a000-0x7f6a81c8b000	/lib/x86_64-linux-gnu/libaio.so.1.0.1
 
	0x7f6a81c8b000-0x7f6a81e8a000	/lib/x86_64-linux-gnu/libaio.so.1.0.1
 
	0x7f6a81e8a000-0x7f6a81e8b000	/lib/x86_64-linux-gnu/libaio.so.1.0.1
 
	0x7f6a81e8b000-0x7f6a81e8c000	
	0x7f6a81e8c000-0x7f6a81ea4000	/lib/x86_64-linux-gnu/libpthread-2.24.so
 
	0x7f6a81ea4000-0x7f6a820a3000	/lib/x86_64-linux-gnu/libpthread-2.24.so
 
	0x7f6a820a3000-0x7f6a820a4000	/lib/x86_64-linux-gnu/libpthread-2.24.so
 
	0x7f6a820a4000-0x7f6a820a5000	/lib/x86_64-linux-gnu/libpthread-2.24.so
 
	0x7f6a820a5000-0x7f6a820a9000	
	0x7f6a820a9000-0x7f6a821cd000	/usr/lib/x86_64-linux-gnu/libasan.so.3.0.0
 
	0x7f6a821cd000-0x7f6a823cc000	/usr/lib/x86_64-linux-gnu/libasan.so.3.0.0
 
	0x7f6a823cc000-0x7f6a823cf000	/usr/lib/x86_64-linux-gnu/libasan.so.3.0.0
 
	0x7f6a823cf000-0x7f6a823d2000	/usr/lib/x86_64-linux-gnu/libasan.so.3.0.0
 
	0x7f6a823d2000-0x7f6a83044000	
	0x7f6a83044000-0x7f6a83067000	/lib/x86_64-linux-gnu/ld-2.24.so
 
	0x7f6a83067000-0x7f6a83069000	
	0x7f6a83069000-0x7f6a8306b000	/[aio] (deleted)
 
	0x7f6a8306b000-0x7f6a83070000	/[aio] (deleted)
 
	0x7f6a83070000-0x7f6a83075000	/[aio] (deleted)
 
	0x7f6a83075000-0x7f6a8307a000	/[aio] (deleted)
 
	0x7f6a8307a000-0x7f6a8307f000	/[aio] (deleted)
 
	0x7f6a8307f000-0x7f6a83080000	/[aio] (deleted)
 
	0x7f6a83080000-0x7f6a83251000	
	0x7f6a83251000-0x7f6a83267000	
	0x7f6a83267000-0x7f6a83268000	/lib/x86_64-linux-gnu/ld-2.24.so
 
	0x7f6a83268000-0x7f6a83269000	/lib/x86_64-linux-gnu/ld-2.24.so
 
	0x7f6a83269000-0x7f6a8326a000	
	0x7ffc5de6d000-0x7ffc5de90000	[stack]
 
	0x7ffc5df5d000-0x7ffc5df5f000	[vvar]
 
	0x7ffc5df5f000-0x7ffc5df61000	[vdso]
 
	0xffffffffff600000-0xffffffffff601000	[vsyscall]
 
==13411==End of process memory map.


==13411==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/sanitizer_common/sanitizer_common.cc:180 "((0 && "unable to mmap")) != (0)" (0x0, 0x0)
 
    #0 0x7f6a82173ebd  (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xcaebd)
 
    #1 0x7f6a82179b13 in __sanitizer::CheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xd0b13)
 
    #2 0x7f6a82179cfd  (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xd0cfd)
 
    #3 0x7f6a82183712  (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xda712)
 
    #4 0x7f6a820ce57d  (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x2557d)
 
    #5 0x7f6a8216ad05 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d05)
 
    #6 0x55d8063ca39c in sf_malloc /data/src/10.1/mysys/safemalloc.c:115
 
    #7 0x55d8063a214f in my_malloc /data/src/10.1/mysys/my_malloc.c:101
 
    #8 0x55d80638bb25 in alloc_root /data/src/10.1/mysys/my_alloc.c:242
 
    #9 0x55d8051bc1b5 in create_tmp_table(THD*, TMP_TABLE_PARAM*, List<Item>&, st_order*, bool, bool, unsigned long long, unsigned long long, char const*, bool, bool) /data/src/10.1/sql/sql_select.cc:17157
 
    #10 0x55d80521114a in JOIN::exec_inner() /data/src/10.1/sql/sql_select.cc:2939
 
    #11 0x55d805216d65 in JOIN::exec() /data/src/10.1/sql/sql_select.cc:2564
 
    #12 0x55d805209c24 in mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/src/10.1/sql/sql_select.cc:3501
 
    #13 0x55d80520c271 in handle_select(THD*, LEX*, select_result*, unsigned long) /data/src/10.1/sql/sql_select.cc:377
 
    #14 0x55d8050db991 in execute_sqlcom_select /data/src/10.1/sql/sql_parse.cc:5691
 
    #15 0x55d8050f708a in mysql_execute_command(THD*) /data/src/10.1/sql/sql_parse.cc:3038
 
    #16 0x55d80510dacb in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/src/10.1/sql/sql_parse.cc:7209
 
    #17 0x55d805114e03 in dispatch_command(enum_server_command, THD*, char*, unsigned int) /data/src/10.1/sql/sql_parse.cc:1499
 
    #18 0x55d805119faa in do_command(THD*) /data/src/10.1/sql/sql_parse.cc:1131
 
    #19 0x55d8053bdbca in do_handle_one_connection(THD*) /data/src/10.1/sql/sql_connect.cc:1331
 
    #20 0x55d8053be182 in handle_one_connection /data/src/10.1/sql/sql_connect.cc:1242
 
    #21 0x7f6a81e934a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
 
    #22 0x7f6a808a9d0e in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xe8d0e)

Non-ASAN builds produce the "out of memory" error:

2019-08-01 23:29:07 139987740509952 [ERROR] mysqld: Out of memory (Needed 4294967288 bytes)
 
2019-08-01 23:29:07 139987740509952 [ERROR] Out of memory; check if mysqld or some other process uses all available memory; if not, you may have to use 'ulimit' to allow mysqld to use more memory or you can add more swap space


'SELECT DISTINCT VARIANCE(1) FROM t1 GROUP BY a ORDER BY BENCHMARK(4, VAR_SAMP(a))' failed: 5: Out of memory (Needed 4294967288 bytes)

A slightly different query produces just ASAN error, without OOM:

CREATE TABLE t1 (a INT);
 
INSERT INTO t1 VALUES (1),(2);
 
SELECT DISTINCT VARIANCE(1) FROM t1 GROUP BY a, ExtractValue( 'foo', 'bar' ) ORDER BY BENCHMARK( 4, VAR_SAMP( a ) );
 
 
 
# Cleanup
 
DROP TABLE t1;


==14351==ERROR: AddressSanitizer: use-after-poison on address 0x6190000c6b23 at pc 0x557afa94591a bp 0x7f345355a5a0 sp 0x7f345355a598
 
WRITE of size 1 at 0x6190000c6b23 thread T24
 
    #0 0x557afa945919 in create_tmp_table(THD*, TMP_TABLE_PARAM*, List<Item>&, st_order*, bool, bool, unsigned long long, unsigned long long, char const*, bool, bool) /data/src/10.1/sql/sql_select.cc:17196
 
    #1 0x557afa99a14a in JOIN::exec_inner() /data/src/10.1/sql/sql_select.cc:2939
 
    #2 0x557afa99fd65 in JOIN::exec() /data/src/10.1/sql/sql_select.cc:2564
 
    #3 0x557afa992c24 in mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_lex_unit*, st_select_lex*) /data/src/10.1/sql/sql_select.cc:3501
 
    #4 0x557afa995271 in handle_select(THD*, LEX*, select_result*, unsigned long) /data/src/10.1/sql/sql_select.cc:377
 
    #5 0x557afa864991 in execute_sqlcom_select /data/src/10.1/sql/sql_parse.cc:5691
 
    #6 0x557afa88008a in mysql_execute_command(THD*) /data/src/10.1/sql/sql_parse.cc:3038
 
    #7 0x557afa896acb in mysql_parse(THD*, char*, unsigned int, Parser_state*) /data/src/10.1/sql/sql_parse.cc:7209
 
    #8 0x557afa89de03 in dispatch_command(enum_server_command, THD*, char*, unsigned int) /data/src/10.1/sql/sql_parse.cc:1499
 
    #9 0x557afa8a2faa in do_command(THD*) /data/src/10.1/sql/sql_parse.cc:1131
 
    #10 0x557afab46bca in do_handle_one_connection(THD*) /data/src/10.1/sql/sql_connect.cc:1331
 
    #11 0x557afab47182 in handle_one_connection /data/src/10.1/sql/sql_connect.cc:1242
 
    #12 0x7f3474c944a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
 
    #13 0x7f34736aad0e in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xe8d0e)
 
 
 
0x6190000c6b23 is located 931 bytes inside of 1100-byte region [0x6190000c6780,0x6190000c6bcc)
 
allocated by thread T24 here:
 
    #0 0x7f3474f6bd28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
 
    #1 0x557afbb5339c in sf_malloc /data/src/10.1/mysys/safemalloc.c:115
 
    #2 0x557afbcb04b2  (/data/bld/10.1-asan/bin/mysqld+0x1dc94b2)
 
 
 
Thread T24 created by T0 here:
 
    #0 0x7f3474edaf59 in __interceptor_pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x30f59)
 
    #1 0x557afbb68ff7 in spawn_thread_noop /data/src/10.1/mysys/psi_noop.c:187
 
 
 
SUMMARY: AddressSanitizer: use-after-poison /data/src/10.1/sql/sql_select.cc:17196 in create_tmp_table(THD*, TMP_TABLE_PARAM*, List<Item>&, st_order*, bool, bool, unsigned long long, unsigned long long, char const*, bool, bool)
 
Shadow bytes around the buggy address:
 
  0x0c3280010d10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c3280010d20: 00 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c3280010d30: 00 00 00 00 00 00 00 00 00 00 f7 00 00 00 00 00
 
  0x0c3280010d40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c3280010d50: 00 00 00 f7 00 00 00 00 00 00 00 00 00 00 00 00
 
=>0x0c3280010d60: f7 f7 f7 f7[f7]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
 
  0x0c3280010d70: f7 f7 f7 f7 f7 f7 f7 f7 f7 04 fa fa fa fa fa fa
 
  0x0c3280010d80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
 
  0x0c3280010d90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
 
  0x0c3280010da0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
 
  0x0c3280010db0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
 
Shadow byte legend (one shadow byte represents 8 application bytes):
 
  Addressable:           00
 
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
 
  Heap right redzone:      fb
 
  Freed heap region:       fd
 
  Stack left redzone:      f1
 
  Stack mid redzone:       f2
 
  Stack right redzone:     f3
 
  Stack partial redzone:   f4
 
  Stack after return:      f5
 
  Stack use after scope:   f8
 
  Global redzone:          f9
 
  Global init order:       f6
 
  Poisoned by user:        f7
 
  Container overflow:      fc
 
  Array cookie:            ac
 
  Intra object redzone:    bb
 
  ASan internal:           fe
 
  Left alloca redzone:     ca
 
  Right alloca redzone:    cb
 
==14351==ABORTING

Neither is reproducible on 10.2+.

 Comments   
Comment by Elena Stepanova [ 2023-07-28 ]

10.1 is EOL

Generated at Thu Feb 08 08:57:54 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.