[MDEV-21199] Segfault Created: 2019-12-03  Updated: 2019-12-03  Resolved: 2019-12-03

Status: Closed
Project: MariaDB Server
Component/s: N/A
Affects Version/s: 10.4.10
Fix Version/s: N/A

Type: Bug Priority: Major
Reporter: Gaurav Juvekar Assignee: Unassigned
Resolution: Duplicate Votes: 0
Labels: None
Environment:

$ mysqld --version
mysqld Ver 10.4.10-MariaDB for Linux on x86_64 (Arch Linux

$ uname -a
Linux gaurav-tp 5.3.13-arch1-1 #1 SMP PREEMPT Sun, 24 Nov 2019 10:15:50 +0000 x86_64 GNU/Linux

$ pacman -Q mariadb
mariadb 10.4.10-2


Attachments: File mariadb-MDEV-21100.tar    
Issue Links:
Duplicate
duplicates MDEV-20803 IF NOT EXISTS AND NOT EXISTS crash DB... Closed
Relates
relates to MDEV-20284 Some pointers may be invalid and caus... Closed
relates to MDEV-20290 Server crash in st_select_lex::cleanu... Closed
relates to MDEV-20858 Function crash server Closed

 Description   

Segfault while running a stored procedure.
To reproduce, extract the attached not-so-small working example mariadb-MDEV-2100.tar and run the runme.sh that it contains.

(gdb) bt
#0  0x000055f5aa20d0f9 in JOIN::destroy() ()
#1  0x000055f5aa27389a in st_select_lex::cleanup() ()
#2  0x000055f5aa481bba in subselect_single_select_engine::prepare(THD*) ()
#3  0x000055f5aa481619 in Item_subselect::fix_fields(THD*, Item**) ()
#4  0x000055f5aa481947 in Item_in_subselect::fix_fields(THD*, Item**) ()
#5  0x000055f5aa408490 in Item_in_optimizer::fix_fields(THD*, Item**) ()
#6  0x000055f5aa406070 in Item_cond::fix_fields(THD*, Item**) ()
#7  0x000055f5aa137e0c in THD::sp_fix_func_item(Item**) ()
#8  0x000055f5aa137e7f in THD::sp_prepare_func_item(Item**, unsigned int) ()
#9  0x000055f5aa137ede in sp_instr_jump_if_not::exec_core(THD*, unsigned int*) ()
#10 0x000055f5aa13eb06 in sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*) ()
#11 0x000055f5aa139858 in sp_head::execute(THD*, bool) ()
#12 0x000055f5aa13af83 in sp_head::execute_procedure(THD*, List<Item>*) ()
#13 0x000055f5aa1bdcbc in ?? ()
#14 0x000055f5aa1bfd56 in Sql_cmd_call::execute(THD*) ()
#15 0x000055f5aa1c754f in mysql_execute_command(THD*) ()
#16 0x000055f5aa1cf7b9 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) ()
#17 0x000055f5aa1d1ee1 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) ()
#18 0x000055f5aa1d4541 in do_command(THD*) ()
#19 0x000055f5aa2b7826 in do_handle_one_connection(CONNECT*) ()
#20 0x000055f5aa2b7963 in handle_one_connection ()
#21 0x00007f5f129d84cf in start_thread () from /usr/lib/libpthread.so.0
#22 0x00007f5f121ae2d3 in clone () from /usr/lib/libc.so.6



 Comments   
Comment by Alice Sherepa [ 2019-12-03 ]

Thanks for the report!
Seems to be a duplicate of MDEV-20803 (MDEV-20290), if you'd like to follow the progress, please follow MDEV-20290

Generated at Thu Feb 08 09:05:20 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.