[MDEV-20395] Assertion `!found' failed in remove_ptr_from_dynarray upon operations with roles Created: 2019-08-20  Updated: 2023-04-27

Status: Open
Project: MariaDB Server
Component/s: Authentication and Privilege System
Affects Version/s: 10.1, 10.2, 10.3, 10.4
Fix Version/s: 10.4

Type: Bug Priority: Major
Reporter: Elena Stepanova Assignee: Oleksandr Byelkin
Resolution: Unresolved Votes: 0
Labels: None


 Description   

Note: It's a fragile test, often changing a single letter makes the failure stop happening. But this one currently fails for me every time on all debug builds.

CREATE USER foo@localhost;
GRANT ALL ON *.* TO foo@localhost;
--connect (con1,localhost,foo,,test)
CREATE ROLE g;
CREATE ROLE mri;
CREATE ROLE c;
CREATE ROLE rnd;
CREATE ROLE x;
CREATE ROLE ura;
CREATE ROLE y;
CREATE ROLE kauhea;
CREATE ROLE zoo;
CREATE ROLE wonder;
CREATE ROLE u;
CREATE ROLE o;
CREATE ROLE z;
CREATE ROLE q;
CREATE ROLE k;
CREATE ROLE e WITH ADMIN k;
CREATE ROLE ugm;
CREATE OR REPLACE ROLE k;
CREATE USER l;
DROP ROLE k;

10.4 c5bc0ced

mysqld: /data/src/10.4/sql/sql_acl.cc:3521: void remove_ptr_from_dynarray(DYNAMIC_ARRAY*, void*): Assertion `!found' failed.
190820 21:17:42 [ERROR] mysqld got signal 6 ;
 
#7  0x00007f49da721f12 in __GI___assert_fail (assertion=0x5567384845d1 "!found", file=0x556738483ab8 "/data/src/10.4/sql/sql_acl.cc", line=3521, function=0x5567384866a0 <remove_ptr_from_dynarray(st_dynamic_array*, void*)::__PRETTY_FUNCTION__> "void remove_ptr_from_dynarray(DYNAMIC_ARRAY*, void*)") at assert.c:101
#8  0x00005567377cedc4 in remove_ptr_from_dynarray (array=0x7f49c4182298, ptr=0x7f49b8029048) at /data/src/10.4/sql/sql_acl.cc:3521
#9  0x00005567377e45cf in handle_grant_struct (struct_no=ROLE_ACL, drop=true, user_from=0x7f49b8011ef0, user_to=0x0) at /data/src/10.4/sql/sql_acl.cc:9978
#10 0x00005567377e5656 in handle_grant_data (thd=0x7f49b8000b00, tables=..., drop=true, user_from=0x7f49b8011ef0, user_to=0x0) at /data/src/10.4/sql/sql_acl.cc:10481
#11 0x00005567377e621e in mysql_drop_user (thd=0x7f49b8000b00, list=..., handle_as_role=true) at /data/src/10.4/sql/sql_acl.cc:10722
#12 0x00005567378a06d6 in mysql_execute_command (thd=0x7f49b8000b00) at /data/src/10.4/sql/sql_parse.cc:5235
#13 0x00005567378a92dd in mysql_parse (thd=0x7f49b8000b00, rawbuf=0x7f49b8011e68 "DROP ROLE k", length=11, parser_state=0x7f49d48a8170, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:7908
#14 0x0000556737895586 in dispatch_command (command=COM_QUERY, thd=0x7f49b8000b00, packet=0x7f49b8008331 "DROP ROLE k", packet_length=11, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:1843
#15 0x0000556737893ccc in do_command (thd=0x7f49b8000b00) at /data/src/10.4/sql/sql_parse.cc:1360
#16 0x0000556737a0de00 in do_handle_one_connection (connect=0x55673ab94040) at /data/src/10.4/sql/sql_connect.cc:1404
#17 0x0000556737a0db4f in handle_one_connection (arg=0x55673ab94040) at /data/src/10.4/sql/sql_connect.cc:1306
#18 0x0000556738339f65 in pfs_spawn_thread (arg=0x55673ac33070) at /data/src/10.4/storage/perfschema/pfs.cc:1862
#19 0x00007f49dc2964a4 in start_thread (arg=0x7f49d48a9700) at pthread_create.c:456
#20 0x00007f49da7ded0f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97

Reproducible on all of 10.1-10.5.
No obvious failure on a non-debug build, but there can easily be hidden ones.


Generated at Thu Feb 08 08:59:08 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.