[MDEV-22881] Unexpected errors, corrupt output, Valgrind / ASAN errors in Item_ident::print or append_identifier Created: 2020-06-12  Updated: 2020-06-15  Resolved: 2020-06-15

Status: Closed
Project: MariaDB Server
Component/s: Data Definition - Alter Table, Server
Affects Version/s: 10.5
Fix Version/s: 10.5.4

Type: Bug Priority: Critical
Reporter: Elena Stepanova Assignee: Aleksey Midenkov
Resolution: Fixed Votes: 0
Labels: regression

Issue Links:
Relates
relates to MDEV-13508 ALTER TABLE that renames columns and ... Closed
relates to MDEV-16290 ALTER TABLE ... RENAME COLUMN syntax Closed
relates to MDEV-21398 Deadlock (server hang) or assertion f... Closed
relates to MDEV-21695 Server crashes in TABLE::evaluate_upd... Closed

 Description    

CREATE TABLE t1 (a INT CHECK (a >= 0));
 
LOCK TABLES t1 WRITE;
 
ALTER TABLE t1 RENAME COLUMN a TO a;
 
ALTER TABLE t1 RENAME KEY IF EXISTS x TO xx;
 
 
 
# Cleanup
 
UNLOCK TABLES;
 
DROP TABLE t1;

10.5 non-debug c92f7e28

 
mysqltest: At line 4: query 'ALTER TABLE t1 RENAME KEY IF EXISTS x TO xx' failed: 1054: Unknown column 't' in 'CHECK'

The name printed as the alleged unknown column can be different.

10.5 valgrind d34cc6b3

 
==30866== Thread 6:
 
==30866== Invalid read of size 1
 
==30866==    at 0xD63083: Item_ident::print(String*, enum_query_type) (item.cc:3204)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==    by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
 
==30866==    by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
 
==30866==    by 0x9E340A: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7992)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0xA7E930: require_quotes(char const*, unsigned int) (sql_show.cc:1502)
 
==30866==    by 0xA7EBE9: get_quote_char_for_identifier(THD*, char const*, unsigned long) (sql_show.cc:1612)
 
==30866==    by 0xA7E9E2: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1533)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==    by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
 
==30866==    by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0x173EAC2: my_charlen_utf8mb3 (ctype-utf8.c:5207)
 
==30866==    by 0x9B675A: charset_info_st::charlen(char const*, char const*) const (m_ctype.h:731)
 
==30866==    by 0xA7E952: require_quotes(char const*, unsigned int) (sql_show.cc:1503)
 
==30866==    by 0xA7EBE9: get_quote_char_for_identifier(THD*, char const*, unsigned long) (sql_show.cc:1612)
 
==30866==    by 0xA7E9E2: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1533)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0x173D338: my_valid_mbcharlen_utf8mb3 (ctype-utf8.c:81)
 
==30866==    by 0x173EAE0: my_charlen_utf8mb3 (ctype-utf8.c:5209)
 
==30866==    by 0x9B675A: charset_info_st::charlen(char const*, char const*) const (m_ctype.h:731)
 
==30866==    by 0xA7E952: require_quotes(char const*, unsigned int) (sql_show.cc:1503)
 
==30866==    by 0xA7EBE9: get_quote_char_for_identifier(THD*, char const*, unsigned long) (sql_show.cc:1612)
 
==30866==    by 0xA7E9E2: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1533)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0xA7EAD0: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1563)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==    by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
 
==30866==    by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
 
==30866==    by 0x9E340A: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7992)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0x173EAC2: my_charlen_utf8mb3 (ctype-utf8.c:5207)
 
==30866==    by 0x9B675A: charset_info_st::charlen(char const*, char const*) const (m_ctype.h:731)
 
==30866==    by 0xA7EAF2: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1564)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==    by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
 
==30866==    by 0x9DD006: mysql_execute_command(THD*) (sql_parse.cc:5950)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0x173D338: my_valid_mbcharlen_utf8mb3 (ctype-utf8.c:81)
 
==30866==    by 0x173EAE0: my_charlen_utf8mb3 (ctype-utf8.c:5209)
 
==30866==    by 0x9B675A: charset_info_st::charlen(char const*, char const*) const (m_ctype.h:731)
 
==30866==    by 0xA7EAF2: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1564)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==    by 0xB8435F: Sql_cmd_alter_table::execute(THD*) (sql_alter.cc:538)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866== Invalid read of size 1
 
==30866==    at 0x4C326C8: memmove (vg_replace_strmem.c:1252)
 
==30866==    by 0x8A2EBF: Static_binary_string::q_append(char const*, unsigned long) (sql_string.h:329)
 
==30866==    by 0x8E2870: Binary_string::append(char const*, unsigned long) (sql_string.h:557)
 
==30866==    by 0xAB94E7: String::append(char const*, unsigned long, charset_info_st const*) (sql_string.cc:592)
 
==30866==    by 0xA7EB68: append_identifier(THD*, String*, char const*, unsigned long) (sql_show.cc:1577)
 
==30866==    by 0xD58861: append_identifier(THD*, String*, st_mysql_const_lex_string const*) (sql_show.h:97)
 
==30866==    by 0xD63320: Item_ident::print(String*, enum_query_type) (item.cc:3238)
 
==30866==    by 0xD70EE7: Item_field::print(String*, enum_query_type) (item.cc:7662)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xDC3CC5: Item_func::print_op(String*, enum_query_type) (item_func.cc:638)
 
==30866==    by 0xD9FD6C: Item_bool_rowready_func2::print(String*, enum_query_type) (item_cmpfunc.h:522)
 
==30866==    by 0xD59D9E: Item::print_parenthesised(String*, enum_query_type, precedence) (item.cc:486)
 
==30866==    by 0xAAA2ED: Item::print_for_table_def(String*) (item.h:1734)
 
==30866==    by 0xAAA34A: Virtual_column_info::print(String*) (item.h:7354)
 
==30866==    by 0xB3ABF6: pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type) (unireg.cc:747)
 
==30866==    by 0xB3ADC1: pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*) (unireg.cc:776)
 
==30866==    by 0xB38C60: build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) (unireg.cc:280)
 
==30866==    by 0xACA768: mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:4958)
 
==30866==    by 0xACB222: create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) (sql_table.cc:5208)
 
==30866==    by 0xAD9FFF: mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) (sql_table.cc:10365)
 
==30866==  Address 0xdc7cfc0 is 48 bytes inside a block of size 56 free'd
 
==30866==    at 0x4C2CDDB: free (vg_replace_malloc.c:530)
 
==30866==    by 0x16DFF96: my_free (my_malloc.c:209)
 
==30866==    by 0x16CFD01: free_root (my_alloc.c:410)
 
==30866==    by 0x9D18B8: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:2506)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)
 
==30866==  Block was alloc'd at
 
==30866==    at 0x4C2BBAF: malloc (vg_replace_malloc.c:299)
 
==30866==    by 0x16DF7A1: my_malloc (my_malloc.c:88)
 
==30866==    by 0x16CF8B6: alloc_root (my_alloc.c:189)
 
==30866==    by 0x16D0029: strmake_root (my_alloc.c:466)
 
==30866==    by 0x8E488A: THD::make_lex_string(st_mysql_const_lex_string*, char const*, unsigned long) (sql_class.h:3798)
 
==30866==    by 0x9B0416: Lex_ident_sys_st::copy_keyword(THD*, Lex_ident_cli_st const*) (sql_lex.cc:9306)
 
==30866==    by 0x9B0461: Lex_ident_sys_st::copy_or_convert(THD*, Lex_ident_cli_st const*, charset_info_st const*) (sql_lex.cc:9315)
 
==30866==    by 0x95910F: THD::to_ident_sys_alloc(Lex_ident_sys_st*, Lex_ident_cli_st const*) (sql_class.cc:2489)
 
==30866==    by 0xC9D93C: MYSQLparse(THD*) (sql_yacc.yy:15091)
 
==30866==    by 0x9E891E: parse_sql(THD*, Parser_state*, Object_creation_ctx*, bool) (sql_parse.cc:10298)
 
==30866==    by 0x9E3267: mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) (sql_parse.cc:7945)
 
==30866==    by 0x9CF642: dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) (sql_parse.cc:1875)
 
==30866==    by 0x9CDD7A: do_command(THD*) (sql_parse.cc:1356)
 
==30866==    by 0xB78F6E: do_handle_one_connection(CONNECT*, bool) (sql_connect.cc:1411)
 
==30866==    by 0xB78CD6: handle_one_connection (sql_connect.cc:1313)
 
==30866==    by 0x10CE82F: pfs_spawn_thread (pfs.cc:2201)
 
==30866==    by 0x4E3F4A3: start_thread (pthread_create.c:456)
 
==30866==    by 0x6D4BD0E: clone (clone.S:97)

ASAN doesn't complain upon the test case above, but it did non-deterministically with a slighly dirtier one, same in an essence, only with different table/column names, and some seemingly irrelevant logic.

10.5 asan c92f7e28

 
==6602==ERROR: AddressSanitizer: use-after-poison on address 0x62b00005bce2 at pc 0x55e7d725a38c bp 0x7f95d27ec070 sp 0x7f95d27ec068
 
READ of size 1 at 0x62b00005bce2 thread T5
 
    #0 0x55e7d725a38b in append_identifier(THD*, String*, char const*, unsigned long) /data/src/10.5/sql/sql_show.cc:1563
 
    #1 0x55e7d7862597 in append_identifier /data/src/10.5/sql/sql_show.h:97
 
    #2 0x55e7d787c4ea in Item_ident::print(String*, enum_query_type) /data/src/10.5/sql/item.cc:3207
 
    #3 0x55e7d789d9c1 in Item_field::print(String*, enum_query_type) /data/src/10.5/sql/item.cc:7631
 
    #4 0x55e7d7865fda in Item::print_parenthesised(String*, enum_query_type, precedence) /data/src/10.5/sql/item.cc:486
 
    #5 0x55e7d79512e0 in Item_func::print_op(String*, enum_query_type) /data/src/10.5/sql/item_func.cc:638
 
    #6 0x55e7d7913eb6 in Item_bool_rowready_func2::print(String*, enum_query_type) /data/src/10.5/sql/item_cmpfunc.h:522
 
    #7 0x55e7d7865fda in Item::print_parenthesised(String*, enum_query_type, precedence) /data/src/10.5/sql/item.cc:486
 
    #8 0x55e7d72be771 in Item::print_for_table_def(String*) /data/src/10.5/sql/item.h:1734
 
    #9 0x55e7d72be81d in Virtual_column_info::print(String*) /data/src/10.5/sql/item.h:7360
 
    #10 0x55e7d73fe9e3 in pack_expression /data/src/10.5/sql/unireg.cc:747
 
    #11 0x55e7d73fedaf in pack_vcols /data/src/10.5/sql/unireg.cc:776
 
    #12 0x55e7d73faf47 in build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*) /data/src/10.5/sql/unireg.cc:280
 
    #13 0x55e7d73026ec in mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*) /data/src/10.5/sql/sql_table.cc:4932
 
    #14 0x55e7d7303b18 in create_table_impl /data/src/10.5/sql/sql_table.cc:5182
 
    #15 0x55e7d7323b9a in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool) /data/src/10.5/sql/sql_table.cc:10339
 
    #16 0x55e7d74946b8 in Sql_cmd_alter_table::execute(THD*) /data/src/10.5/sql/sql_alter.cc:538
 
    #17 0x55e7d70ddfdb in mysql_execute_command(THD*) /data/src/10.5/sql/sql_parse.cc:5950
 
    #18 0x55e7d70ea051 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.5/sql/sql_parse.cc:7992
 
    #19 0x55e7d70c4964 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.5/sql/sql_parse.cc:1875
 
    #20 0x55e7d70c17e7 in do_command(THD*) /data/src/10.5/sql/sql_parse.cc:1356
 
    #21 0x55e7d747d0e6 in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1411
 
    #22 0x55e7d747cb55 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1313
 
    #23 0x55e7d8063c1c in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
 
    #24 0x7f95dd0384a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
 
    #25 0x7f95db16cd0e in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xe8d0e)
 
 
 
0x62b00005bce2 is located 2786 bytes inside of 24740-byte region [0x62b00005b200,0x62b0000612a4)
 
allocated by thread T5 here:
 
    #0 0x7f95dd30fd28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
 
    #1 0x55e7d8b69fa6 in sf_malloc /data/src/10.5/mysys/safemalloc.c:118
 
    #2 0x55e7d8b3b156 in my_malloc /data/src/10.5/mysys/my_malloc.c:88
 
    #3 0x55e7d8b1a713 in reset_root_defaults /data/src/10.5/mysys/my_alloc.c:147
 
    #4 0x55e7d6fb9159 in THD::init_for_queries() /data/src/10.5/sql/sql_class.cc:1401
 
    #5 0x55e7d747c4ce in prepare_new_connection_state(THD*) /data/src/10.5/sql/sql_connect.cc:1240
 
    #6 0x55e7d747cbd0 in thd_prepare_connection(THD*) /data/src/10.5/sql/sql_connect.cc:1334
 
    #7 0x55e7d747d09c in do_handle_one_connection(CONNECT*, bool) /data/src/10.5/sql/sql_connect.cc:1401
 
    #8 0x55e7d747cb55 in handle_one_connection /data/src/10.5/sql/sql_connect.cc:1313
 
    #9 0x55e7d8063c1c in pfs_spawn_thread /data/src/10.5/storage/perfschema/pfs.cc:2201
 
    #10 0x7f95dd0384a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
 
 
 
Thread T5 created by T0 here:
 
    #0 0x7f95dd27ef59 in __interceptor_pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x30f59)
 
    #1 0x55e7d805ecde in my_thread_create /data/src/10.5/storage/perfschema/my_thread.h:34
 
    #2 0x55e7d806400b in pfs_spawn_thread_v1 /data/src/10.5/storage/perfschema/pfs.cc:2252
 
    #3 0x55e7d6e09de7 in inline_mysql_thread_create /data/src/10.5/include/mysql/psi/mysql_thread.h:1321
 
    #4 0x55e7d6e1cb19 in create_thread_to_handle_connection(CONNECT*) /data/src/10.5/sql/mysqld.cc:5951
 
    #5 0x55e7d6e1d08e in create_new_thread(CONNECT*) /data/src/10.5/sql/mysqld.cc:6010
 
    #6 0x55e7d6e1d24b in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.5/sql/mysqld.cc:6075
 
    #7 0x55e7d6e1dc2e in handle_connections_sockets() /data/src/10.5/sql/mysqld.cc:6202
 
    #8 0x55e7d6e1c47f in mysqld_main(int, char**) /data/src/10.5/sql/mysqld.cc:5620
 
    #9 0x55e7d6e085df in main /data/src/10.5/sql/main.cc:25
 
    #10 0x7f95db0a42e0 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x202e0)
 
 
 
SUMMARY: AddressSanitizer: use-after-poison /data/src/10.5/sql/sql_show.cc:1563 in append_identifier(THD*, String*, char const*, unsigned long)
 
Shadow bytes around the buggy address:
 
  0x0c5680003740: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c5680003750: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c5680003760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c5680003770: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c5680003780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
=>0x0c5680003790: 00 00 00 00 00 00 00 f7 05 f7 05 f7[02]f7 00 00
 
  0x0c56800037a0: 00 00 00 f7 00 00 f7 07 f7 00 00 00 f7 f7 f7 f7
 
  0x0c56800037b0: 00 00 00 00 00 f7 00 f7 f7 00 00 00 00 00 00 00
 
  0x0c56800037c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
  0x0c56800037d0: 00 00 00 00 00 00 00 00 f7 00 00 f7 00 00 00 00
 
  0x0c56800037e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 
Shadow byte legend (one shadow byte represents 8 application bytes):
 
  Addressable:           00
 
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
 
  Heap right redzone:      fb
 
  Freed heap region:       fd
 
  Stack left redzone:      f1
 
  Stack mid redzone:       f2
 
  Stack right redzone:     f3
 
  Stack partial redzone:   f4
 
  Stack after return:      f5
 
  Stack use after scope:   f8
 
  Global redzone:          f9
 
  Global init order:       f6
 
  Poisoned by user:        f7
 
  Container overflow:      fc
 
  Array cookie:            ac
 
  Intra object redzone:    bb
 
  ASan internal:           fe
 
  Left alloca redzone:     ca
 
  Right alloca redzone:    cb
 
==6602==ABORTING
 
200612 20:19:31 [ERROR] mysqld got signal 6 ;
 
This could be because you hit a bug. It is also possible that this binary
 
or one of the libraries it was linked against is corrupt, improperly built,
 
or misconfigured. This error can also be caused by malfunctioning hardware.
 
 
 
To report this bug, see https://mariadb.com/kb/en/reporting-bugs
 
 
 
We will try our best to scrape up some info that will hopefully help
 
diagnose the problem, but since we have already crashed, 
something is definitely wrong and this may fail.
 
 
 
Server version: 10.5.4-MariaDB-debug-log
 
key_buffer_size=1048576
 
read_buffer_size=131072
 
max_used_connections=1
 
max_threads=153
 
thread_count=2
 
It is possible that mysqld could use up to 
key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 63703 K  bytes of memory
 
Hope that's ok; if not, decrease some variables in the equation.
 
 
 
Thread pointer: 0x62b000062288
 
Attempting backtrace. You can use the following information to find out
 
where mysqld died. If you see no messages after this, something went
 
terribly wrong...
 
stack_bottom = 0x7f95d27f39a0 thread_stack 0x5fc00
 
??:0(backtrace)[0x7f95dd29b681]
 
/data/bld/10.5-asan-nightly/bin/mariadbd(my_print_stacktrace+0xb5)[0x55e7d8b49ed6]
 
mysys/stacktrace.c:306(my_print_stacktrace)[0x55e7d78154a2]
 
??:0(__restore_rt)[0x7f95dd0420e0]
 
linux/raise.c:51(__GI_raise)[0x7f95db0b6fff]
 
stdlib/abort.c:91(__GI_abort)[0x7f95db0b842a]
 
??:0(__sanitizer_cov_trace_switch)[0x7f95dd329329]
 
??:0(__asan_print_accumulated_stats)[0x7f95dd31e9ab]
 
??:0(__asan_unpoison_intra_object_redzone)[0x7f95dd318b57]
 
??:0(__asan_report_load1)[0x7f95dd3191e8]
 
/data/bld/10.5-asan-nightly/bin/mariadbd(_Z17append_identifierP3THDP6StringPKcm+0x2c0)[0x55e7d725a38c]
 
sql/sql_show.cc:1563(append_identifier(THD*, String*, char const*, unsigned long))[0x55e7d7862598]
 
sql/sql_show.h:98(append_identifier(THD*, String*, st_mysql_const_lex_string const*))[0x55e7d787c4eb]
 
sql/item.cc:3140(Item_ident::print(String*, enum_query_type))[0x55e7d789d9c2]
 
sql/item.cc:7632(Item_field::print(String*, enum_query_type))[0x55e7d7865fdb]
 
sql/item.cc:487(Item::print_parenthesised(String*, enum_query_type, precedence))[0x55e7d79512e1]
 
sql/item_func.cc:639(Item_func::print_op(String*, enum_query_type))[0x55e7d7913eb7]
 
sql/item_cmpfunc.h:523(Item_bool_rowready_func2::print(String*, enum_query_type))[0x55e7d7865fdb]
 
sql/item.cc:487(Item::print_parenthesised(String*, enum_query_type, precedence))[0x55e7d72be772]
 
sql/item.h:1735(Item::print_for_table_def(String*))[0x55e7d72be81e]
 
sql/item.h:7361(Virtual_column_info::print(String*))[0x55e7d73fe9e4]
 
sql/unireg.cc:748(pack_expression(String*, Virtual_column_info*, unsigned int, enum_vcol_info_type))[0x55e7d73fedb0]
 
sql/unireg.cc:776(pack_vcols(String*, List<Create_field>&, List<Virtual_column_info>*))[0x55e7d73faf48]
 
sql/unireg.cc:280(build_frm_image(THD*, st_mysql_const_lex_string const&, HA_CREATE_INFO*, List<Create_field>&, unsigned int, st_key*, handler*))[0x55e7d73026ed]
 
sql/sql_table.cc:4932(mysql_create_frm_image(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, HA_CREATE_INFO*, Alter_info*, int, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*))[0x55e7d7303b19]
 
sql/sql_table.cc:5182(create_table_impl(THD*, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, st_mysql_const_lex_string const&, char const*, DDL_options_st, HA_CREATE_INFO*, Alter_info*, int, bool*, st_key**, unsigned int*, st_mysql_const_unsigned_lex_string*))[0x55e7d7323b9b]
 
sql/sql_table.cc:10339(mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Alter_info*, unsigned int, st_order*, bool, bool))[0x55e7d74946b9]
 
sql/sql_alter.cc:538(Sql_cmd_alter_table::execute(THD*))[0x55e7d70ddfdc]
 
sql/sql_parse.cc:5950(mysql_execute_command(THD*))[0x55e7d70ea052]
 
sql/sql_parse.cc:7992(mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool))[0x55e7d70c4965]
 
sql/sql_parse.cc:1877(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool))[0x55e7d70c17e8]
 
sql/sql_parse.cc:1356(do_command(THD*))[0x55e7d747d0e7]
 
sql/sql_connect.cc:1411(do_handle_one_connection(CONNECT*, bool))[0x55e7d747cb56]
 
sql/sql_connect.cc:1315(handle_one_connection)[0x55e7d8063c1d]
 
nptl/pthread_create.c:456(start_thread)[0x7f95dd0384a4]
 
x86_64/clone.S:99(clone)[0x7f95db16cd0f]
 
 
 
Trying to get some variables.
 
Some pointers may be invalid and cause the dump to abort.
 
Query (0x62b00005b2a8): ALTER /* QNO 446 CON_ID 11 */ ONLINE TABLE `t14` /*!100301 WAIT 7 */ /* compatibility 10.5.2 */ RENAME KEY IF EXISTS ind7 TO q /*!100307, ALGORITHM=NOCOPY */
 
Connection ID (thread ID): 4
 
Status: NOT_KILLED
 
 
 
Optimizer switch: index_merge=on,index_merge_union=on,index_merge_sort_union=on,index_merge_intersection=on,index_merge_sort_intersection=off,engine_condition_pushdown=off,index_condition_pushdown=on,derived_merge=on,derived_with_keys=on,firstmatch=on,loosescan=on,materialization=on,in_to_exists=on,semijoin=on,partial_match_rowid_merge=on,partial_match_table_scan=on,subquery_cache=on,mrr=off,mrr_cost_based=off,mrr_sort_keys=off,outer_join_with_cache=on,semijoin_with_cache=on,join_cache_incremental=on,join_cache_hashed=on,join_cache_bka=on,optimize_join_buffer_size=on,table_elimination=on,extended_keys=on,exists_to_in=on,orderby_uses_equalities=on,condition_pushdown_for_derived=on,split_materialized=on,condition_pushdown_for_subquery=on,rowid_filter=on,condition_pushdown_from_having=on,not_null_range_scan=off
 
 
 
The manual page at http://dev.mysql.com/doc/mysql/en/crashing.html contains
 
information that should help you find out what is causing the crash.
 
Writing a core file...
 
Working directory at /dev/shm/var_auto_hPiR/mysqld.1/data
 
Resource Limits:
 
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             unlimited            unlimited            bytes     
Max stack size            8388608              unlimited            bytes     
Max core file size        0                    0                    bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             128123               128123               processes 
Max open files            1024                 1024                 files     
Max locked memory         65536                65536                bytes     
Max address space         unlimited            unlimited            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       128123               128123               signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                    
Max realtime priority     0                    0                    
Max realtime timeout      unlimited            unlimited            us        
Core pattern: core

The test case is not applicable to 10.4 due to RENAME COLUMN/INDEX.
Not reproducible on 10.5.3.
The failure started happening in 10.5 after this merge, but it was a fairly big merge, I can't identify the exact commit:

commit 4a0b56f60436cab3f2f60b15ec699cb19c1e10ba
 
Merge: 0bf843cd139 6da14d7b4a9
 
Author: Marko Mäkelä
 
Date:   Sun May 31 10:28:59 2020 +0300
 
 
 
    Merge 10.4 into 10.5



 Comments   
Comment by Aleksey Midenkov [ 2020-06-14 ]

Cause

First ALTER does not reopen locked_tables_list with need_reopen=true. In "good" it does it like this:

#0  0x0000000000c77515 in Item_field::set_field (this=0x7f38cc01bce8, field_par=0x7f38cc01bb58) at /home/midenok/src/mariadb/10.5b/src/sql/item.cc:3007
 
#1  0x0000000000c82465 in Item_field::fix_fields (this=0x7f38cc01bce8, thd=0x7f38cc000d48, reference=0x7f38cc01ced8) at /home/midenok/src/mariadb/10.5b/src/sql/item.cc:5920
 
#2  0x0000000000740693 in Item::fix_fields_if_needed (this=0x7f38cc01bce8, thd=0x7f38cc000d48, ref=0x7f38cc01ced8) at /home/midenok/src/mariadb/10.5b/src/sql/item.h:978
 
#3  0x0000000000ce88a9 in Item_func::fix_fields (this=0x7f38cc01ce40, thd=0x7f38cc000d48, ref=0x7f38cc01d090) at /home/midenok/src/mariadb/10.5b/src/sql/item_func.cc:352
 
#4  0x00000000009f3c26 in fix_vcol_expr (thd=0x7f38cc000d48, vcol=0x7f38cc01d080) at /home/midenok/src/mariadb/10.5b/src/sql/table.cc:3454
 
#5  0x0000000000a0a8b8 in fix_and_check_vcol_expr (thd=0x7f38cc000d48, table=0x7f38cc02c518, vcol=0x7f38cc01d080) at /home/midenok/src/mariadb/10.5b/src/sql/table.cc:3539
 
#6  0x00000000009f0dde in unpack_vcol_info_from_frm (thd=0x7f38cc000d48, mem_root=0x7f38cc02d1d8, table=0x7f38cc02c518, expr_str=0x7f38ddb656b0, vcol_ptr=0x7f38cc01bc18, error_reported=0x7f38ddb65cdf) at /home/midenok/src/mariadb/10.5b/src/sql/table.cc:3666
 
#7  0x00000000009efb8b in parse_vcol_defs (thd=0x7f38cc000d48, mem_root=0x7f38cc02d1d8, table=0x7f38cc02c518, error_reported=0x7f38ddb65cdf, mode=VCOL_INIT_DEPENDENCY_FAILURE_IS_ERROR) at /home/midenok/src/mariadb/10.5b/src/sql/table.cc:1226
 
#8  0x00000000009f4bc2 in open_table_from_share (thd=0x7f38cc000d48, share=0x7f38cc025da0, alias=0x7f38cc02d5b8, db_stat=33, prgflag=8, ha_open_flags=16, outparam=0x7f38cc02c518, is_create_table=false, partitions_to_open=0x0) at /home/midenok/src/mariadb/10.5b/src/sql/table.cc:4034
 
#9  0x00000000007c9dad in open_table (thd=0x7f38cc000d48, table_list=0x7f38cc02d570, ot_ctx=0x7f38ddb661b8) at /home/midenok/src/mariadb/10.5b/src/sql/sql_base.cc:1980
 
#10 0x00000000007c5faa in Locked_tables_list::reopen_tables (this=0x7f38cc004b80, thd=0x7f38cc000d48, need_reopen=true) at /home/midenok/src/mariadb/10.5b/src/sql/sql_base.cc:2587
 
#11 0x000000000089a985 in mysql_execute_command (thd=0x7f38cc000d48) at /home/midenok/src/mariadb/10.5b/src/sql/sql_parse.cc:5983
 
#12 0x000000000088b2e6 in mysql_parse (thd=0x7f38cc000d48, rawbuf=0x7f38cc014ad0 "ALTER TABLE t1 RENAME COLUMN a TO a", length=35, parser_state=0x7f38ddb68590, is_com_multi=false, is_next_command=false) at /home/midenok/src/mariadb/10.5b/src/sql/sql_parse.cc:7991

frame 11

5981      /* close/reopen tables that were marked to need reopen under LOCK TABLES */
 
5982      if (! thd->lex->requires_prelocking())
 
5983        thd->locked_tables_list.reopen_tables(thd, true);

In "bad" new condition was added:

  /* close/reopen tables that were marked to need reopen under LOCK TABLES */
 
  if (unlikely(thd->locked_tables_list.some_table_marked_for_reopen) &&
 
      !thd->lex->requires_prelocking())
 
    thd->locked_tables_list.reopen_tables(thd, true);

Comment by Aleksey Midenkov [ 2020-06-14 ]

Though we marked table for reopen (and set some_table_marked_for_reopen) after we replaced field data here:

8447        for (f_ptr=table->field ; (field= *f_ptr) ; f_ptr++)
 
8448        {
 
8449          if (field->vcol_info)
 
8450            field->vcol_info->expr->walk(&Item::rename_fields_processor, 1,
 
8451                                        &column_rename_param);
 
8452          if (field->check_constraint)
 
8453            field->check_constraint->expr->walk(&Item::rename_fields_processor, 1,
 
8454                                                &column_rename_param);
 
8455          if (field->default_value)
 
8456            field->default_value->expr->walk(&Item::rename_fields_processor, 1,
 
8457                                            &column_rename_param);
 
8458        }
 
8459        // Force reopen because new column name is on thd->mem_root
 
8460        table->mark_table_for_reopen();
 
8461      }

we then did reset some_table_marked_for_reopen while need_reopen=false

#0  Locked_tables_list::reopen_tables (this=0x7f9828004b80, thd=0x7f9828000d48, need_reopen=false) at /home/midenok/src/mariadb/10.5/src/sql/sql_base.cc:2594
 
#1  0x00000000009a9dc8 in mysql_alter_table (thd=0x7f9828000d48, new_db=0x7f98280055f0, new_name=0x7f98280059f8, create_info=0x7f983edcbfc8, table_list=0x7f9828014bc8, alter_info=0x7f983edcbef8, order_num=0, order=0x0, ignore=false, if_exists=false) at /home/midenok/src/mariadb/10.5/src/sql/sql_table.cc:10865
 
#2  0x0000000000a6d360 in Sql_cmd_alter_table::execute (this=0x7f98280152f0, thd=0x7f9828000d48) at /home/midenok/src/mariadb/10.5/src/sql/sql_alter.cc:532
 
#3  0x000000000089e22f in mysql_execute_command (thd=0x7f9828000d48) at /home/midenok/src/mariadb/10.5/src/sql/sql_parse.cc:5950
 
#4  0x000000000088eec6 in mysql_parse (thd=0x7f9828000d48, rawbuf=0x7f9828014ad0 "ALTER TABLE t1 RENAME COLUMN a TO a", length=35, parser_state=0x7f983edce590, is_com_multi=false, is_next_command=false) at /home/midenok/src/mariadb/10.5/src/sql/sql_parse.cc:7992

So we did not reopen the table and dropped some_table_marked_for_reopen flag.

Comment by Aleksey Midenkov [ 2020-06-14 ]

Not reproducible in 10.2 - 10.4 as Item_field is freed after first ALTER.

Comment by Oleksandr Byelkin [ 2020-06-15 ]

OK to push

Comment by Aleksey Midenkov [ 2020-06-15 ]

Not reproducible in 10.4 because of the flag ALTER_COLUMN_DEFAULT:

6781      /*
 
6782        Comparing new and old default values of column is cumbersome.
 
6783        So instead of using such a comparison for detecting if default
 
6784        has really changed we rely on flags set by parser to get an
 
6785        approximate value for storage engine flag.
 
6786      */
 
6787      if (alter_info->flags & ALTER_CHANGE_COLUMN)
 
6788        ha_alter_info->handler_flags|= ALTER_COLUMN_DEFAULT;

this flag prevents from getting into

10057       /*
 
10058         We can ignore ALTER_COLUMN_ORDER and instead check
 
10059         ALTER_STORED_COLUMN_ORDER & ALTER_VIRTUAL_COLUMN_ORDER. This
 
10060         is ok as ALTER_COLUMN_ORDER may be wrong if we use AFTER last_field
 
10061         ALTER_COLUMN_NAME is set if field really was renamed.
 
10062       */
 
10063
 
10064       if (!(ha_alter_info.handler_flags &
 
10065             ~(ALTER_COLUMN_ORDER | ALTER_RENAME_COLUMN)))
 
10066       {

and return without close_all_tables_for_name() which is the case for RENAME COLUMN in 10.5.

Analysis

Generated at Thu Feb 08 09:18:11 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.