[MDEV-23434] Failing assertion: magic2 == ROW_PREBUILT_FETCH_MAGIC_N Created: 2020-08-08  Updated: 2023-04-14  Resolved: 2023-04-14

Status: Closed
Project: MariaDB Server
Component/s: Storage Engine - Memory
Affects Version/s: 10.3.16
Fix Version/s: N/A

Type: Bug Priority: Major
Reporter: walkmancd Assignee: Marko Mäkelä
Resolution: Cannot Reproduce Votes: 1
Labels: None
Environment:

CentOS Linux release 7.6.1810 (Core)

Issue Links:
Relates
relates to MDEV-23512 Process mysqld.exe crashes in row_pre... Closed

 Description   

Master - Slave mode. Master server crashed. The master system log :

Aug  8 04:05:43 mariadb-2 mysqld: 2020-08-08 04:05:43 0x7faa88ffc700  InnoDB: Assertion failure in file /home/buildbot/buildbot/padding_for_CPACK_RPM_BUILD_SOURCE_DIRS_PREFIX/mariadb-10.3.16/storage/innobase/row/row0mysql.cc line 1030
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: Failing assertion: magic2 == ROW_PREBUILT_FETCH_MAGIC_N
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: We intentionally generate a memory trap.
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: Submit a detailed bug report to https://jira.mariadb.org/
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: If you get repeated assertion failures or crashes, even
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: immediately after the mysqld startup, there may be
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: corruption in the InnoDB tablespace. Please refer to
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: https://mariadb.com/kb/en/library/innodb-recovery-modes/
 
Aug  8 04:05:43 mariadb-2 mysqld: InnoDB: about forcing recovery.
 
Aug  8 04:05:43 mariadb-2 mysqld: 200808  4:05:43 [ERROR] mysqld got signal 6 ;
 
Aug  8 04:05:43 mariadb-2 mysqld: This could be because you hit a bug. It is also possible that this binary
 
Aug  8 04:05:43 mariadb-2 mysqld: or one of the libraries it was linked against is corrupt, improperly built,
 
Aug  8 04:05:43 mariadb-2 mysqld: or misconfigured. This error can also be caused by malfunctioning hardware.
 
Aug  8 04:05:43 mariadb-2 mysqld: To report this bug, see https://mariadb.com/kb/en/reporting-bugs
 
Aug  8 04:05:43 mariadb-2 mysqld: We will try our best to scrape up some info that will hopefully help
 
Aug  8 04:05:43 mariadb-2 mysqld: diagnose the problem, but since we have already crashed,
 
Aug  8 04:05:43 mariadb-2 mysqld: something is definitely wrong and this may fail.
 
Aug  8 04:05:43 mariadb-2 mysqld: Server version: 10.3.16-MariaDB-log
 
Aug  8 04:05:43 mariadb-2 mysqld: key_buffer_size=33554432
 
Aug  8 04:05:43 mariadb-2 mysqld: read_buffer_size=2097152
 
Aug  8 04:05:43 mariadb-2 mysqld: max_used_connections=100
 
Aug  8 04:05:43 mariadb-2 mysqld: max_threads=552
 
Aug  8 04:05:43 mariadb-2 mysqld: thread_count=107
 
Aug  8 04:05:43 mariadb-2 mysqld: It is possible that mysqld could use up to
 
Aug  8 04:05:43 mariadb-2 mysqld: key_buffer_size + (read_buffer_size + sort_buffer_size)*max_threads = 5697645 K  bytes of memory
 
Aug  8 04:05:43 mariadb-2 mysqld: Hope that's ok; if not, decrease some variables in the equation.
 
Aug  8 04:05:43 mariadb-2 mysqld: Thread pointer: 0x7faa301897b8
 
Aug  8 04:05:43 mariadb-2 mysqld: Attempting backtrace. You can use the following information to find out
 
Aug  8 04:05:43 mariadb-2 mysqld: where mysqld died. If you see no messages after this, something went
 
Aug  8 04:05:43 mariadb-2 mysqld: terribly wrong...
 
Aug  8 04:05:43 mariadb-2 mysqld: stack_bottom = 0x7faa88ffbd30 thread_stack 0x40000
 
Aug  8 04:05:43 mariadb-2 mysqld: *** buffer overflow detected ***: /usr/sbin/mysqld terminated
 
Aug  8 04:05:43 mariadb-2 mysqld: ======= Backtrace: =========
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libc.so.6(__fortify_fail+0x37)[0x7fabe7dc3b67]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libc.so.6(+0x115ce2)[0x7fabe7dc1ce2]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libc.so.6(+0x117ac7)[0x7fabe7dc3ac7]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(my_addr_resolve+0xda)[0x5595d00d61aa]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(my_print_stacktrace+0x1c2)[0x5595d00bf7e2]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(handle_fatal_signal+0x30f)[0x5595cfb60dff]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libpthread.so.0(+0xf5d0)[0x7fabe9a0f5d0]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libc.so.6(gsignal+0x37)[0x7fabe7ce22c7]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libc.so.6(abort+0x148)[0x7fabe7ce39b8]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(+0x4ccd82)[0x5595cf8a6d82]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(+0x9e4719)[0x5595cfdbe719]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(+0x911b5a)[0x5595cfcebb5a]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z8closefrmP5TABLE+0x131)[0x5595cfa31751]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(+0x707b49)[0x5595cfae1b49]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z12tc_add_tableP3THDP5TABLE+0x1e8)[0x5595cfae1d78]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z10open_tableP3THDP10TABLE_LISTP18Open_table_context+0xb05)[0x5595cf92c035]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z11open_tablesP3THDRK14DDL_options_stPP10TABLE_LISTPjjP19Prelocking_strategy+0xe47)[0x5595cf92f4b7]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z30open_normal_and_derived_tablesP3THDP10TABLE_LISTjj+0x59)[0x5595cf92fbb9]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z31open_tables_only_view_structureP3THDP10TABLE_LISTb+0x4f)[0x5595cf92fc5f]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(+0x6191aa)[0x5595cf9f31aa]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z14get_all_tablesP3THDP10TABLE_LISTP4Item+0x1e6)[0x5595cf9f6fa6]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z24get_schema_tables_resultP4JOIN23enum_schema_table_state+0x276)[0x5595cf9f8f16]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_ZN4JOIN10exec_innerEv+0x6d5)[0x5595cf9dec95]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_ZN4JOIN4execEv+0x33)[0x5595cf9df253]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z12mysql_selectP3THDP10TABLE_LISTjR4ListI4ItemEPS4_jP8st_orderS9_S7_S9_yP13select_resultP18st_select_lex_unitP13st_select_lex+0x11a)[0x5595cf9df3aa]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z13handle_selectP3THDP3LEXP13select_resultm+0x1cc)[0x5595cf9dfebc]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(+0x4bd02c)[0x5595cf89702c]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z21mysql_execute_commandP3THD+0x2f4c)[0x5595cf987cfc]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z11mysql_parseP3THDPcjP12Parser_statebb+0x22b)[0x5595cf98d88b]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z16dispatch_command19enum_server_commandP3THDPcjbb+0x1d3e)[0x5595cf99058e]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z10do_commandP3THD+0x13e)[0x5595cf9913ee]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(_Z24do_handle_one_connectionP7CONNECT+0x1aa)[0x5595cfa644ba]
 
Aug  8 04:05:43 mariadb-2 mysqld: /usr/sbin/mysqld(handle_one_connection+0x3d)[0x5595cfa645dd]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libpthread.so.0(+0x7dd5)[0x7fabe9a07dd5]
 
Aug  8 04:05:43 mariadb-2 mysqld: /lib64/libc.so.6(clone+0x6d)[0x7fabe7daa02d]
 
Aug  8 04:05:43 mariadb-2 mysqld: ======= Memory map: ========
 
....



 Comments   
Comment by Marko Mäkelä [ 2023-04-14 ]

This kind of bugs would best be caught by running an instrumented server. We make extensive use of AddressSanitizer (cmake -DWITH_ASAN=ON) in our internal InnoDB testing. It is possible that the bug is caused by some stray write outside InnoDB. The bulk of open heap-use-after-free or heap-use-after-poison bugs are outside InnoDB.

Generated at Thu Feb 08 09:22:22 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.