[MDEV-22033] Server crashes in negate_expression upon meaningless GET DIAGNOSTICS Created: 2020-03-25  Updated: 2020-03-25

Status: Open
Project: MariaDB Server
Component/s: Parser
Affects Version/s: 10.4, 10.5
Fix Version/s: 10.4, 10.5

Type: Bug Priority: Minor
Reporter: Elena Stepanova Assignee: Alexander Barkov
Resolution: Unresolved Votes: 0
Labels: None


 Description   

Despite it causing a non-debug server crash, the query is so meaningless that I cannot set it to Major.

GET DIAGNOSTICS CONDITION @a := NOT 1 NOT IN ( SELECT 1 );

10.4 f7599f47

#3  <signal handler called>
#4  0x000055ca66ce0360 in negate_expression (thd=0x7facf8000af0, expr=0x7facf80143e0) at /data/src/10.4/sql/sql_parse.cc:9840
#5  0x000055ca66f7c21b in MYSQLparse (thd=0x7facf8000af0) at /data/src/10.4/sql/sql_yacc.yy:9945
#6  0x000055ca66ce103a in parse_sql (thd=0x7facf8000af0, parser_state=0x7fad0a6f6160, creation_ctx=0x0, do_pfs_digest=true) at /data/src/10.4/sql/sql_parse.cc:10206
#7  0x000055ca66cdb85e in mysql_parse (thd=0x7facf8000af0, rawbuf=0x7facf80132f0 "GET DIAGNOSTICS CONDITION @a := NOT 1 NOT IN ( SELECT 1 )", length=57, parser_state=0x7fad0a6f6160, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:7853
#8  0x000055ca66cc6bd0 in dispatch_command (command=COM_QUERY, thd=0x7facf8000af0, packet=0x7facf8136171 "GET DIAGNOSTICS CONDITION @a := NOT 1 NOT IN ( SELECT 1 )", packet_length=57, is_com_multi=false, is_next_command=false) at /data/src/10.4/sql/sql_parse.cc:1842
#9  0x000055ca66cc525d in do_command (thd=0x7facf8000af0) at /data/src/10.4/sql/sql_parse.cc:1360
#10 0x000055ca66e4e70f in do_handle_one_connection (connect=0x55ca698ff4d0) at /data/src/10.4/sql/sql_connect.cc:1412
#11 0x000055ca66e4e45e in handle_one_connection (arg=0x55ca698ff4d0) at /data/src/10.4/sql/sql_connect.cc:1316
#12 0x000055ca67856db3 in pfs_spawn_thread (arg=0x55ca69813460) at /data/src/10.4/storage/perfschema/pfs.cc:1869
#13 0x00007fad124d54a4 in start_thread (arg=0x7fad0a6f7700) at pthread_create.c:456
#14 0x00007fad10609d0f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:97

Reproducible on 10.4-10.5, debug, non-debug and ASAN alike.
Not reproducible on 10.3.


Generated at Thu Feb 08 09:11:41 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.