[MDEV-27184] Assertion `(old_top == initial_top (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0)' failed, Assertion `str.alloced_length() >= str.length() + data_len' failed Created: 2021-12-07  Updated: 2022-01-30  Resolved: 2021-12-27

Status: Closed
Project: MariaDB Server
Component/s: Storage Engine - Spider
Affects Version/s: 10.6, 10.7, 10.8
Fix Version/s: 10.4.23, 10.5.14, 10.6.6, 10.7.2

Type: Bug Priority: Critical
Reporter: Roel Van de Paar Assignee: Nayuta Yanagisawa (Inactive)
Resolution: Fixed Votes: 1
Labels: malloc, regression, spider

Issue Links:
Relates
relates to MDEV-27676 Assertion `str.alloced_length() >= st... Closed
relates to MDEV-27684 Spider: remove pattern str->reserve()... Stalled

 Description   

Looks unrelated to MDEV-15011. New regression and malloc issue.

INSTALL PLUGIN spider SONAME 'ha_spider.so';
DROP TABLE ar_160;
CREATE TABLE t1(c19 FLOAT);
ALTER TABLE t1 ENGINE=SPIDER UNION=(t1,t2)INSERT_METHOD=LAST;
INSERT INTO t1 VALUES(0xF5A1),(0xF5A2),(0xF5A3),(0xF5A4),(0xF5A5),(0xF5A6),(0xF5A7),(0xF5A8),(0xF5A9),(0xF5AA),(0xF5AB),(0xF5AC),(0xF5AD),(0xF5AE),(0xF5AF),(0xF5B0),(0xF5B1),(0xF5B2),(0xF5B3),(0xF5B4),(0xF5B5),(0xF5B6),(0xF5B7),(0xF5B8),(0xF5B9),(0xF5BA),(0xF5BB),(0xF5BC),(0xF5BD),(0xF5BE),(0xF5BF),(0xF5C0),(0xF5C1),(0xF5C2),(0xF5C3),(0xF5C4),(0xF5C5),(0xF5C6),(0xF5C7),(0xF5C8),(0xF5C9),(0xF5CA),(0xF5CB),(0xF5CC),(0xF5CD),(0xF5CE),(0xF5CF),(0xF5D0),(0xF5D1),(0xF5D2),(0xF5D3),(0xF5D4),(0xF5D5),(0xF5D6),(0xF5D7),(0xF5D8),(0xF5D9),(0xF5DA),(0xF5DB),(0xF5DC),(0xF5DD),(0xF5DE),(0xF5DF),(0xF5E0),(0xF5E1),(0xF5E2),(0xF5E3),(0xF5E4),(0xF5E5),(0xF5E6),(0xF5E7),(0xF5E8),(0xF5E9),(0xF5EA),(0xF5EB),(0xF5EC),(0xF5ED),(0xF5EE),(0xF5EF),(0xF5F0),(0xF5F1),(0xF5F2),(0xF5F3),(0xF5F4),(0xF5F5),(0xF5F6),(0xF5F7),(0xF5F8),(0xF5F9),(0xF5FA),(0xF5FB),(0xF5FC),(0xF5FD),(0xF5FE),(0xF6A1),(0xF6A2),(0xF6A3),(0xF6A4),(0xF6A5),(0xF6A6),(0xF6A7),(0xF6A8),(0xF6A9),(0xF6AA),(0xF6AB),(0xF6AC),(0xF6AD),(0xF6AE),(0xF6AF),(0xF6B0),(0xF6B1),(0xF6B2),(0xF6B3),(0xF6B4),(0xF6B5),(0xF6B6),(0xF6B7),(0xF6B8),(0xF6B9),(0xF6BA),(0xF6BB),(0xF6BC),(0xF6BD),(0xF6BE),(0xF6BF),(0xF6C0),(0xF6C1),(0xF6C2),(0xF6C3),(0xF6C4),(0xF6C5),(0xF6C6),(0xF6C7),(0xF6C8),(0xF6C9),(0xF6CA),(0xF6CB),(0xF6CC),(0xF6CD),(0xF6CE),(0xF6CF),(0xF6D0),(0xF6D1),(0xF6D2),(0xF6D3),(0xF6D4),(0xF6D5),(0xF6D6),(0xF6D7),(0xF6D8),(0xF6D9),(0xF6DA),(0xF6DB),(0xF6DC),(0xF6DD),(0xF6DE),(0xF6DF),(0xF6E0),(0xF6E1),(0xF6E2),(0xF6E3),(0xF6E4),(0xF6E5),(0xF6E6),(0xF6E7),(0xF6E8),(0xF6E9),(0xF6EA),(0xF6EB),(0xF6EC),(0xF6ED),(0xF6EE),(0xF6EF),(0xF6F0),(0xF6F1),(0xF6F2),(0xF6F3),(0xF6F4),(0xF6F5),(0xF6F6),(0xF6F7),(0xF6F8),(0xF6F9),(0xF6FA),(0xF6FB),(0xF6FC),(0xF6FD),(0xF6FE),(0xF7A1),(0xF7A2),(0xF7A3),(0xF7A4),(0xF7A5),(0xF7A6),(0xF7A7),(0xF7A8),(0xF7A9),(0xF7AA),(0xF7AB),(0xF7AC),(0xF7AD),(0xF7AE),(0xF7AF),(0xF7B0),(0xF7B1),(0xF7B2),(0xF7B3),(0xF7B4),(0xF7B5),(0xF7B6),(0xF7B7),(0xF7B8),(0xF7B9),(0xF7BA),(0xF7BB),(0xF7BC),(0xF7BD),(0xF7BE),(0xF7BF),(0xF7C0),(0xF7C1),(0xF7C2),(0xF7C3),(0xF7C4),(0xF7C5),(0xF7C6),(0xF7C7),(0xF7C8),(0xF7C9),(0xF7CA),(0xF7CB),(0xF7CC),(0xF7CD),(0xF7CE),(0xF7CF),(0xF7D0),(0xF7D1),(0xF7D2),(0xF7D3),(0xF7D4),(0xF7D5),(0xF7D6),(0xF7D7),(0xF7D8),(0xF7D9),(0xF7DA),(0xF7DB),(0xF7DC),(0xF7DD),(0xF7DE),(0xF7DF),(0xF7E0),(0xF7E1),(0xF7E2),(0xF7E3),(0xF7E4),(0xF7E5),(0xF7E6),(0xF7E7),(0xF7E8),(0xF7E9),(0xF7EA),(0xF7EB),(0xF7EC),(0xF7ED),(0xF7EE),(0xF7EF),(0xF7F0),(0xF7F1),(0xF7F2),(0xF7F3),(0xF7F4),(0xF7F5),(0xF7F6),(0xF7F7),(0xF7F8),(0xF7F9),(0xF7FA),(0xF7FB),(0xF7FC),(0xF7FD),(0xF7FE),(0xF8A1),(0xF8A2),(0xF8A3),(0xF8A4),(0xF8A5),(0xF8A6),(0xF8A7),(0xF8A8),(0xF8A9),(0xF8AA),(0xF8AB),(0xF8AC),(0xF8AD),(0xF8AE),(0xF8AF),(0xF8B0),(0xF8B1),(0xF8B2),(0xF8B3),(0xF8B4),(0xF8B5),(0xF8B6),(0xF8B7),(0xF8B8),(0xF8B9),(0xF8BA),(0xF8BB),(0xF8BC),(0xF8BD),(0xF8BE),(0xF8BF),(0xF8C0),(0xF8C1),(0xF8C2),(0xF8C3),(0xF8C4),(0xF8C5),(0xF8C6),(0xF8C7),(0xF8C8),(0xF8C9),(0xF8CA),(0xF8CB),(0xF8CC),(0xF8CD),(0xF8CE),(0xF8CF),(0xF8D0),(0xF8D1),(0xF8D2),(0xF8D3),(0xF8D4),(0xF8D5),(0xF8D6),(0xF8D7),(0xF8D8),(0xF8D9),(0xF8DA),(0xF8DB),(0xF8DC),(0xF8DD),(0xF8DE),(0xF8DF),(0xF8E0),(0xF8E1),(0xF8E2),(0xF8E3),(0xF8E4),(0xF8E5),(0xF8E6),(0xF8E7),(0xF8E8),(0xF8E9),(0xF8EA),(0xF8EB),(0xF8EC),(0xF8ED),(0xF8EE),(0xF8EF),(0xF8F0),(0xF8F1),(0xF8F2),(0xF8F3),(0xF8F4),(0xF8F5),(0xF8F6),(0xF8F7),(0xF8F8),(0xF8F9),(0xF8FA),(0xF8FB),(0xF8FC),(0xF8FD),(0xF8FE),(0xF9A1),(0xF9A2),(0xF9A3),(0xF9A4),(0xF9A5),(0xF9A6),(0xF9A7),(0xF9A8),(0xF9A9),(0xF9AA),(0xF9AB),(0xF9AC),(0xF9AD),(0xF9AE),(0xF9AF),(0xF9B0),(0xF9B1),(0xF9B2),(0xF9B3),(0xF9B4),(0xF9B5),(0xF9B6),(0xF9B7),(0xF9B8),(0xF9B9),(0xF9BA),(0xF9BB),(0xF9BC),(0xF9BD),(0xF9BE),(0xF9BF),(0xF9C0),(0xF9C1),(0xF9C2),(0xF9C3),(0xF9C4),(0xF9C5),(0xF9C6),(0xF9C7),(0xF9C8),(0xF9C9),(0xF9CA),(0xF9CB),(0xF9CC),(0xF9CD),(0xF9CE),(0xF9CF),(0xF9D0),(0xF9D1),(0xF9D2),(0xF9D3),(0xF9D4),(0xF9D5),(0xF9D6),(0xF9D7),(0xF9D8),(0xF9D9),(0xF9DA),(0xF9DB),(0xF9DC),(0xF9DD),(0xF9DE),(0xF9DF),(0xF9E0),(0xF9E1),(0xF9E2),(0xF9E3),(0xF9E4),(0xF9E5),(0xF9E6),(0xF9E7),(0xF9E8),(0xF9E9),(0xF9EA),(0xF9EB),(0xF9EC),(0xF9ED),(0xF9EE),(0xF9EF),(0xF9F0),(0xF9F1),(0xF9F2),(0xF9F3),(0xF9F4),(0xF9F5),(0xF9F6),(0xF9F7),(0xF9F8),(0xF9F9),(0xF9FA),(0xF9FB),(0xF9FC),(0xF9FD),(0xF9FE),(0xFAA1),(0xFAA2),(0xFAA3),(0xFAA4),(0xFAA5),(0xFAA6),(0xFAA7),(0xFAA8),(0xFAA9),(0xFAAA),(0xFAAB),(0xFAAC),(0xFAAD),(0xFAAE),(0xFAAF),(0xFAB0),(0xFAB1),(0xFAB2),(0xFAB3),(0xFAB4),(0xFAB5),(0xFAB6),(0xFAB7),(0xFAB8),(0xFAB9),(0xFABA),(0xFABB),(0xFABC),(0xFABD),(0xFABE),(0xFABF),(0xFAC0),(0xFAC1),(0xFAC2),(0xFAC3),(0xFAC4),(0xFAC5),(0xFAC6),(0xFAC7),(0xFAC8),(0xFAC9),(0xFACA),(0xFACB),(0xFACC),(0xFACD),(0xFACE),(0xFACF),(0xFAD0),(0xFAD1),(0xFAD2),(0xFAD3),(0xFAD4),(0xFAD5),(0xFAD6),(0xFAD7),(0xFAD8),(0xFAD9),(0xFADA),(0xFADB),(0xFADC),(0xFADD),(0xFADE),(0xFADF),(0xFAE0),(0xFAE1),(0xFAE2),(0xFAE3),(0xFAE4),(0xFAE5),(0xFAE6),(0xFAE7),(0xFAE8),(0xFAE9),(0xFAEA),(0xFAEB),(0xFAEC),(0xFAED),(0xFAEE),(0xFAEF),(0xFAF0),(0xFAF1),(0xFAF2),(0xFAF3),(0xFAF4),(0xFAF5),(0xFAF6),(0xFAF7),(0xFAF8),(0xFAF9),(0xFAFA),(0xFAFB),(0xFAFC),(0xFAFD),(0xFAFE),(0xFBA1),(0xFBA2),(0xFBA3),(0xFBA4),(0xFBA5),(0xFBA6),(0xFBA7),(0xFBA8),(0xFBA9),(0xFBAA),(0xFBAB),(0xFBAC),(0xFBAD),(0xFBAE),(0xFBAF),(0xFBB0),(0xFBB1),(0xFBB2),(0xFBB3),(0xFBB4),(0xFBB5),(0xFBB6),(0xFBB7),(0xFBB8),(0xFBB9),(0xFBBA),(0xFBBB),(0xFBBC),(0xFBBD),(0xFBBE),(0xFBBF),(0xFBC0),(0xFBC1),(0xFBC2),(0xFBC3),(0xFBC4),(0xFBC5),(0xFBC6),(0xFBC7),(0xFBC8),(0xFBC9),(0xFBCA),(0xFBCB),(0xFBCC),(0xFBCD),(0xFBCE),(0xFBCF),(0xFBD0),(0xFBD1),(0xFBD2),(0xFBD3),(0xFBD4),(0xFBD5),(0xFBD6),(0xFBD7),(0xFBD8),(0xFBD9),(0xFBDA),(0xFBDB),(0xFBDC),(0xFBDD),(0xFBDE),(0xFBDF),(0xFBE0),(0xFBE1),(0xFBE2),(0xFBE3),(0xFBE4),(0xFBE5),(0xFBE6),(0xFBE7),(0xFBE8),(0xFBE9),(0xFBEA),(0xFBEB),(0xFBEC),(0xFBED),(0xFBEE),(0xFBEF),(0xFBF0),(0xFBF1),(0xFBF2),(0xFBF3),(0xFBF4),(0xFBF5),(0xFBF6),(0xFBF7),(0xFBF8),(0xFBF9),(0xFBFA),(0xFBFB),(0xFBFC),(0xFBFD),(0xFBFE),(0xFCA1),(0xFCA2),(0xFCA3),(0xFCA4),(0xFCA5),(0xFCA6),(0xFCA7),(0xFCA8),(0xFCA9),(0xFCAA),(0xFCAB),(0xFCAC),(0xFCAD),(0xFCAE),(0xFCAF),(0xFCB0),(0xFCB1),(0xFCB2),(0xFCB3),(0xFCB4),(0xFCB5),(0xFCB6),(0xFCB7),(0xFCB8),(0xFCB9),(0xFCBA),(0xFCBB),(0xFCBC),(0xFCBD),(0xFCBE),(0xFCBF),(0xFCC0),(0xFCC1),(0xFCC2),(0xFCC3),(0xFCC4),(0xFCC5),(0xFCC6),(0xFCC7),(0xFCC8),(0xFCC9),(0xFCCA),(0xFCCB),(0xFCCC),(0xFCCD),(0xFCCE),(0xFCCF),(0xFCD0),(0xFCD1),(0xFCD2),(0xFCD3),(0xFCD4),(0xFCD5),(0xFCD6),(0xFCD7),(0xFCD8),(0xFCD9),(0xFCDA),(0xFCDB),(0xFCDC),(0xFCDD),(0xFCDE),(0xFCDF),(0xFCE0),(0xFCE1),(0xFCE2),(0xFCE3),(0xFCE4),(0xFCE5),(0xFCE6),(0xFCE7),(0xFCE8),(0xFCE9),(0xFCEA),(0xFCEB),(0xFCEC),(0xFCED),(0xFCEE),(0xFCEF),(0xFCF0),(0xFCF1),(0xFCF2),(0xFCF3),(0xFCF4),(0xFCF5),(0xFCF6),(0xFCF7),(0xFCF8),(0xFCF9),(0xFCFA),(0xFCFB),(0xFCFC),(0xFCFD),(0xFCFE),(0xFDA1),(0xFDA2),(0xFDA3),(0xFDA4),(0xFDA5),(0xFDA6),(0xFDA7),(0xFDA8),(0xFDA9),(0xFDAA),(0xFDAB),(0xFDAC),(0xFDAD),(0xFDAE),(0xFDAF),(0xFDB0),(0xFDB1),(0xFDB2),(0xFDB3),(0xFDB4),(0xFDB5),(0xFDB6),(0xFDB7),(0xFDB8),(0xFDB9),(0xFDBA),(0xFDBB),(0xFDBC),(0xFDBD),(0xFDBE),(0xFDBF),(0xFDC0),(0xFDC1),(0xFDC2),(0xFDC3),(0xFDC4),(0xFDC5),(0xFDC6),(0xFDC7),(0xFDC8),(0xFDC9),(0xFDCA),(0xFDCB),(0xFDCC),(0xFDCD),(0xFDCE),(0xFDCF),(0xFDD0),(0xFDD1),(0xFDD2),(0xFDD3),(0xFDD4),(0xFDD5),(0xFDD6),(0xFDD7),(0xFDD8),(0xFDD9),(0xFDDA),(0xFDDB),(0xFDDC),(0xFDDD),(0xFDDE),(0xFDDF),(0xFDE0),(0xFDE1),(0xFDE2),(0xFDE3),(0xFDE4),(0xFDE5),(0xFDE6),(0xFDE7),(0xFDE8),(0xFDE9),(0xFDEA),(0xFDEB),(0xFDEC),(0xFDED),(0xFDEE),(0xFDEF),(0xFDF0),(0xFDF1),(0xFDF2),(0xFDF3),(0xFDF4),(0xFDF5),(0xFDF6),(0xFDF7),(0xFDF8),(0xFDF9),(0xFDFA),(0xFDFB),(0xFDFC),(0xFDFD),(0xFDFE),(0xFEA1),(0xFEA2),(0xFEA3),(0xFEA4),(0xFEA5),(0xFEA6),(0xFEA7),(0xFEA8),(0xFEA9),(0xFEAA),(0xFEAB),(0xFEAC),(0xFEAD),(0xFEAE),(0xFEAF),(0xFEB0),(0xFEB1),(0xFEB2),(0xFEB3),(0xFEB4),(0xFEB5),(0xFEB6),(0xFEB7),(0xFEB8),(0xFEB9),(0xFEBA),(0xFEBB),(0xFEBC),(0xFEBD),(0xFEBE),(0xFEBF),(0xFEC0),(0xFEC1),(0xFEC2),(0xFEC3),(0xFEC4),(0xFEC5),(0xFEC6),(0xFEC7),(0xFEC8),(0xFEC9),(0xFECA),(0xFECB),(0xFECC),(0xFECD),(0xFECE),(0xFECF),(0xFED0),(0xFED1),(0xFED2),(0xFED3),(0xFED4),(0xFED5),(0xFED6),(0xFED7),(0xFED8),(0xFED9),(0xFEDA),(0xFEDB),(0xFEDC),(0xFEDD),(0xFEDE),(0xFEDF),(0xFEE0),(0xFEE1),(0xFEE2),(0xFEE3),(0xFEE4),(0xFEE5),(0xFEE6),(0xFEE7),(0xFEE8),(0xFEE9),(0xFEEA),(0xFEEB),(0xFEEC),(0xFEED),(0xFEEE),(0xFEEF),(0xFEF0),(0xFEF1),(0xFEF2),(0xFEF3),(0xFEF4),(0xFEF5),(0xFEF6),(0xFEF7),(0xFEF8),(0xFEF9),(0xFEFA),(0xFEFB),(0xFEFC),(0xFEFD),(0xFEFE),(0x8FF5A1),(0x8FF5A2),(0x8FF5A3),(0x8FF5A4),(0x8FF5A5),(0x8FF5A6),(0x8FF5A7),(0x8FF5A8),(0x8FF5A9),(0x8FF5AA),(0x8FF5AB),(0x8FF5AC),(0x8FF5AD),(0x8FF5AE),(0x8FF5AF),(0x8FF5B0),(0x8FF5B1),(0x8FF5B2),(0x8FF5B3),(0x8FF5B4),(0x8FF5B5),(0x8FF5B6),(0x8FF5B7),(0x8FF5B8),(0x8FF5B9),(0x8FF5BA),(0x8FF5BB),(0x8FF5BC),(0x8FF5BD),(0x8FF5BE),(0x8FF5BF),(0x8FF5C0),(0x8FF5C1),(0x8FF5C2),(0x8FF5C3),(0x8FF5C4),(0x8FF5C5),(0x8FF5C6),(0x8FF5C7),(0x8FF5C8),(0x8FF5C9),(0x8FF5CA),(0x8FF5CB),(0x8FF5CC),(0x8FF5CD),(0x8FF5CE),(0x8FF5CF),(0x8FF5D0),(0x8FF5D1),(0x8FF5D2),(0x8FF5D3),(0x8FF5D4),(0x8FF5D5),(0x8FF5D6),(0x8FF5D7),(0x8FF5D8),(0x8FF5D9),(0x8FF5DA),(0x8FF5DB),(0x8FF5DC),(0x8FF5DD),(0x8FF5DE),(0x8FF5DF),(0x8FF5E0),(0x8FF5E1),(0x8FF5E2),(0x8FF5E3),(0x8FF5E4),(0x8FF5E5),(0x8FF5E6),(0x8FF5E7),(0x8FF5E8),(0x8FF5E9),(0x8FF5EA),(0x8FF5EB),(0x8FF5EC),(0x8FF5ED),(0x8FF5EE),(0x8FF5EF),(0x8FF5F0),(0x8FF5F1),(0x8FF5F2),(0x8FF5F3),(0x8FF5F4),(0x8FF5F5),(0x8FF5F6),(0x8FF5F7),(0x8FF5F8),(0x8FF5F9),(0x8FF5FA),(0x8FF5FB),(0x8FF5FC),(0x8FF5FD),(0x8FF5FE),(0x8FF6A1),(0x8FF6A2),(0x8FF6A3),(0x8FF6A4),(0x8FF6A5),(0x8FF6A6),(0x8FF6A7),(0x8FF6A8),(0x8FF6A9),(0x8FF6AA),(0x8FF6AB),(0x8FF6AC),(0x8FF6AD),(0x8FF6AE),(0x8FF6AF),(0x8FF6B0),(0x8FF6B1),(0x8FF6B2),(0x8FF6B3),(0x8FF6B4),(0x8FF6B5),(0x8FF6B6),(0x8FF6B7),(0x8FF6B8),(0x8FF6B9),(0x8FF6BA),(0x8FF6BB),(0x8FF6BC),(0x8FF6BD),(0x8FF6BE),(0x8FF6BF),(0x8FF6C0),(0x8FF6C1),(0x8FF6C2),(0x8FF6C3),(0x8FF6C4),(0x8FF6C5),(0x8FF6C6),(0x8FF6C7),(0x8FF6C8),(0x8FF6C9),(0x8FF6CA),(0x8FF6CB),(0x8FF6CC),(0x8FF6CD),(0x8FF6CE),(0x8FF6CF),(0x8FF6D0),(0x8FF6D1),(0x8FF6D2),(0x8FF6D3),(0x8FF6D4),(0x8FF6D5),(0x8FF6D6),(0x8FF6D7),(0x8FF6D8),(0x8FF6D9),(0x8FF6DA),(0x8FF6DB),(0x8FF6DC),(0x8FF6DD),(0x8FF6DE),(0x8FF6DF),(0x8FF6E0),(0x8FF6E1),(0x8FF6E2),(0x8FF6E3),(0x8FF6E4),(0x8FF6E5),(0x8FF6E6),(0x8FF6E7),(0x8FF6E8),(0x8FF6E9),(0x8FF6EA),(0x8FF6EB),(0x8FF6EC),(0x8FF6ED),(0x8FF6EE),(0x8FF6EF),(0x8FF6F0),(0x8FF6F1),(0x8FF6F2),(0x8FF6F3),(0x8FF6F4),(0x8FF6F5),(0x8FF6F6),(0x8FF6F7),(0x8FF6F8),(0x8FF6F9),(0x8FF6FA),(0x8FF6FB),(0x8FF6FC),(0x8FF6FD),(0x8FF6FE),(0x8FF7A1),(0x8FF7A2),(0x8FF7A3),(0x8FF7A4),(0x8FF7A5),(0x8FF7A6),(0x8FF7A7),(0x8FF7A8),(0x8FF7A9),(0x8FF7AA),(0x8FF7AB),(0x8FF7AC),(0x8FF7AD),(0x8FF7AE),(0x8FF7AF),(0x8FF7B0),(0x8FF7B1),(0x8FF7B2),(0x8FF7B3),(0x8FF7B4),(0x8FF7B5),(0x8FF7B6),(0x8FF7B7),(0x8FF7B8),(0x8FF7B9),(0x8FF7BA),(0x8FF7BB),(0x8FF7BC),(0x8FF7BD),(0x8FF7BE),(0x8FF7BF),(0x8FF7C0),(0x8FF7C1),(0x8FF7C2),(0x8FF7C3),(0x8FF7C4),(0x8FF7C5),(0x8FF7C6),(0x8FF7C7),(0x8FF7C8),(0x8FF7C9),(0x8FF7CA),(0x8FF7CB),(0x8FF7CC),(0x8FF7CD),(0x8FF7CE),(0x8FF7CF),(0x8FF7D0),(0x8FF7D1),(0x8FF7D2),(0x8FF7D3),(0x8FF7D4),(0x8FF7D5),(0x8FF7D6),(0x8FF7D7),(0x8FF7D8),(0x8FF7D9),(0x8FF7DA),(0x8FF7DB),(0x8FF7DC),(0x8FF7DD),(0x8FF7DE),(0x8FF7DF),(0x8FF7E0),(0x8FF7E1),(0x8FF7E2),(0x8FF7E3),(0x8FF7E4),(0x8FF7E5),(0x8FF7E6),(0x8FF7E7),(0x8FF7E8),(0x8FF7E9),(0x8FF7EA),(0x8FF7EB),(0x8FF7EC),(0x8FF7ED),(0x8FF7EE),(0x8FF7EF),(0x8FF7F0),(0x8FF7F1),(0x8FF7F2),(0x8FF7F3),(0x8FF7F4),(0x8FF7F5),(0x8FF7F6),(0x8FF7F7),(0x8FF7F8),(0x8FF7F9),(0x8FF7FA),(0x8FF7FB),(0x8FF7FC),(0x8FF7FD),(0x8FF7FE),(0x8FF8A1),(0x8FF8A2),(0x8FF8A3),(0x8FF8A4),(0x8FF8A5),(0x8FF8A6),(0x8FF8A7),(0x8FF8A8),(0x8FF8A9),(0x8FF8AA),(0x8FF8AB),(0x8FF8AC),(0x8FF8AD),(0x8FF8AE),(0x8FF8AF),(0x8FF8B0),(0x8FF8B1),(0x8FF8B2),(0x8FF8B3),(0x8FF8B4),(0x8FF8B5),(0x8FF8B6),(0x8FF8B7),(0x8FF8B8),(0x8FF8B9),(0x8FF8BA),(0x8FF8BB),(0x8FF8BC),(0x8FF8BD),(0x8FF8BE),(0x8FF8BF),(0x8FF8C0),(0x8FF8C1),(0x8FF8C2),(0x8FF8C3),(0x8FF8C4),(0x8FF8C5),(0x8FF8C6),(0x8FF8C7),(0x8FF8C8),(0x8FF8C9),(0x8FF8CA),(0x8FF8CB),(0x8FF8CC),(0x8FF8CD),(0x8FF8CE),(0x8FF8CF),(0x8FF8D0),(0x8FF8D1),(0x8FF8D2),(0x8FF8D3),(0x8FF8D4),(0x8FF8D5),(0x8FF8D6),(0x8FF8D7),(0x8FF8D8),(0x8FF8D9),(0x8FF8DA),(0x8FF8DB),(0x8FF8DC),(0x8FF8DD),(0x8FF8DE),(0x8FF8DF),(0x8FF8E0),(0x8FF8E1),(0x8FF8E2),(0x8FF8E3),(0x8FF8E4),(0x8FF8E5),(0x8FF8E6),(0x8FF8E7),(0x8FF8E8),(0x8FF8E9),(0x8FF8EA),(0x8FF8EB),(0x8FF8EC),(0x8FF8ED),(0x8FF8EE),(0x8FF8EF),(0x8FF8F0),(0x8FF8F1),(0x8FF8F2),(0x8FF8F3),(0x8FF8F4),(0x8FF8F5),(0x8FF8F6),(0x8FF8F7),(0x8FF8F8),(0x8FF8F9),(0x8FF8FA),(0x8FF8FB),(0x8FF8FC),(0x8FF8FD),(0x8FF8FE),(0x8FF9A1),(0x8FF9A2),(0x8FF9A3),(0x8FF9A4),(0x8FF9A5),(0x8FF9A6),(0x8FF9A7),(0x8FF9A8),(0x8FF9A9),(0x8FF9AA),(0x8FF9AB),(0x8FF9AC),(0x8FF9AD),(0x8FF9AE),(0x8FF9AF),(0x8FF9B0),(0x8FF9B1),(0x8FF9B2),(0x8FF9B3),(0x8FF9B4),(0x8FF9B5),(0x8FF9B6),(0x8FF9B7),(0x8FF9B8),(0x8FF9B9),(0x8FF9BA),(0x8FF9BB),(0x8FF9BC),(0x8FF9BD),(0x8FF9BE),(0x8FF9BF),(0x8FF9C0),(0x8FF9C1),(0x8FF9C2),(0x8FF9C3),(0x8FF9C4),(0x8FF9C5),(0x8FF9C6),(0x8FF9C7),(0x8FF9C8),(0x8FF9C9),(0x8FF9CA),(0x8FF9CB),(0x8FF9CC),(0x8FF9CD),(0x8FF9CE),(0x8FF9CF),(0x8FF9D0),(0x8FF9D1),(0x8FF9D2),(0x8FF9D3),(0x8FF9D4),(0x8FF9D5),(0x8FF9D6),(0x8FF9D7),(0x8FF9D8),(0x8FF9D9),(0x8FF9DA),(0x8FF9DB),(0x8FF9DC),(0x8FF9DD),(0x8FF9DE),(0x8FF9DF),(0x8FF9E0),(0x8FF9E1),(0x8FF9E2),(0x8FF9E3),(0x8FF9E4),(0x8FF9E5),(0x8FF9E6),(0x8FF9E7),(0x8FF9E8),(0x8FF9E9),(0x8FF9EA),(0x8FF9EB),(0x8FF9EC),(0x8FF9ED),(0x8FF9EE),(0x8FF9EF),(0x8FF9F0),(0x8FF9F1),(0x8FF9F2),(0x8FF9F3),(0x8FF9F4),(0x8FF9F5),(0x8FF9F6),(0x8FF9F7),(0x8FF9F8),(0x8FF9F9),(0x8FF9FA),(0x8FF9FB),(0x8FF9FC),(0x8FF9FD),(0x8FF9FE),(0x8FFAA1),(0x8FFAA2),(0x8FFAA3),(0x8FFAA4),(0x8FFAA5),(0x8FFAA6),(0x8FFAA7),(0x8FFAA8),(0x8FFAA9),(0x8FFAAA),(0x8FFAAB),(0x8FFAAC),(0x8FFAAD),(0x8FFAAE),(0x8FFAAF),(0x8FFAB0),(0x8FFAB1),(0x8FFAB2),(0x8FFAB3),(0x8FFAB4),(0x8FFAB5),(0x8FFAB6),(0x8FFAB7),(0x8FFAB8),(0x8FFAB9),(0x8FFABA),(0x8FFABB),(0x8FFABC),(0x8FFABD),(0x8FFABE),(0x8FFABF),(0x8FFAC0),(0x8FFAC1),(0x8FFAC2),(0x8FFAC3),(0x8FFAC4),(0x8FFAC5),(0x8FFAC6),(0x8FFAC7),(0x8FFAC8),(0x8FFAC9),(0x8FFACA),(0x8FFACB),(0x8FFACC),(0x8FFACD),(0x8FFACE),(0x8FFACF),(0x8FFAD0),(0x8FFAD1),(0x8FFAD2),(0x8FFAD3),(0x8FFAD4),(0x8FFAD5),(0x8FFAD6),(0x8FFAD7),(0x8FFAD8),(0x8FFAD9),(0x8FFADA),(0x8FFADB),(0x8FFADC),(0x8FFADD),(0x8FFADE),(0x8FFADF),(0x8FFAE0),(0x8FFAE1),(0x8FFAE2),(0x8FFAE3),(0x8FFAE4),(0x8FFAE5),(0x8FFAE6),(0x8FFAE7),(0x8FFAE8),(0x8FFAE9),(0x8FFAEA),(0x8FFAEB),(0x8FFAEC),(0x8FFAED),(0x8FFAEE),(0x8FFAEF),(0x8FFAF0),(0x8FFAF1),(0x8FFAF2),(0x8FFAF3),(0x8FFAF4),(0x8FFAF5),(0x8FFAF6),(0x8FFAF7),(0x8FFAF8),(0x8FFAF9),(0x8FFAFA),(0x8FFAFB),(0x8FFAFC),(0x8FFAFD),(0x8FFAFE),(0x8FFBA1),(0x8FFBA2),(0x8FFBA3),(0x8FFBA4),(0x8FFBA5),(0x8FFBA6),(0x8FFBA7),(0x8FFBA8),(0x8FFBA9),(0x8FFBAA),(0x8FFBAB),(0x8FFBAC),(0x8FFBAD),(0x8FFBAE),(0x8FFBAF),(0x8FFBB0),(0x8FFBB1),(0x8FFBB2),(0x8FFBB3),(0x8FFBB4),(0x8FFBB5),(0x8FFBB6),(0x8FFBB7),(0x8FFBB8),(0x8FFBB9),(0x8FFBBA),(0x8FFBBB),(0x8FFBBC),(0x8FFBBD),(0x8FFBBE),(0x8FFBBF),(0x8FFBC0),(0x8FFBC1),(0x8FFBC2),(0x8FFBC3),(0x8FFBC4),(0x8FFBC5),(0x8FFBC6),(0x8FFBC7),(0x8FFBC8),(0x8FFBC9),(0x8FFBCA),(0x8FFBCB),(0x8FFBCC),(0x8FFBCD),(0x8FFBCE),(0x8FFBCF),(0x8FFBD0),(0x8FFBD1),(0x8FFBD2),(0x8FFBD3),(0x8FFBD4),(0x8FFBD5),(0x8FFBD6),(0x8FFBD7),(0x8FFBD8),(0x8FFBD9),(0x8FFBDA),(0x8FFBDB),(0x8FFBDC),(0x8FFBDD),(0x8FFBDE),(0x8FFBDF),(0x8FFBE0),(0x8FFBE1),(0x8FFBE2),(0x8FFBE3),(0x8FFBE4),(0x8FFBE5),(0x8FFBE6),(0x8FFBE7),(0x8FFBE8),(0x8FFBE9),(0x8FFBEA),(0x8FFBEB),(0x8FFBEC),(0x8FFBED),(0x8FFBEE),(0x8FFBEF),(0x8FFBF0),(0x8FFBF1),(0x8FFBF2),(0x8FFBF3),(0x8FFBF4),(0x8FFBF5),(0x8FFBF6),(0x8FFBF7),(0x8FFBF8),(0x8FFBF9),(0x8FFBFA),(0x8FFBFB),(0x8FFBFC),(0x8FFBFD),(0x8FFBFE),(0x8FFCA1),(0x8FFCA2),(0x8FFCA3),(0x8FFCA4),(0x8FFCA5),(0x8FFCA6),(0x8FFCA7),(0x8FFCA8),(0x8FFCA9),(0x8FFCAA),(0x8FFCAB),(0x8FFCAC),(0x8FFCAD),(0x8FFCAE),(0x8FFCAF),(0x8FFCB0),(0x8FFCB1),(0x8FFCB2),(0x8FFCB3),(0x8FFCB4),(0x8FFCB5),(0x8FFCB6),(0x8FFCB7),(0x8FFCB8),(0x8FFCB9),(0x8FFCBA),(0x8FFCBB),(0x8FFCBC),(0x8FFCBD),(0x8FFCBE),(0x8FFCBF),(0x8FFCC0),(0x8FFCC1),(0x8FFCC2),(0x8FFCC3),(0x8FFCC4),(0x8FFCC5),(0x8FFCC6),(0x8FFCC7),(0x8FFCC8),(0x8FFCC9),(0x8FFCCA),(0x8FFCCB),(0x8FFCCC),(0x8FFCCD),(0x8FFCCE),(0x8FFCCF),(0x8FFCD0),(0x8FFCD1),(0x8FFCD2),(0x8FFCD3),(0x8FFCD4),(0x8FFCD5),(0x8FFCD6),(0x8FFCD7),(0x8FFCD8),(0x8FFCD9),(0x8FFCDA),(0x8FFCDB),(0x8FFCDC),(0x8FFCDD),(0x8FFCDE),(0x8FFCDF),(0x8FFCE0),(0x8FFCE1),(0x8FFCE2),(0x8FFCE3),(0x8FFCE4),(0x8FFCE5),(0x8FFCE6),(0x8FFCE7),(0x8FFCE8),(0x8FFCE9),(0x8FFCEA),(0x8FFCEB),(0x8FFCEC),(0x8FFCED),(0x8FFCEE),(0x8FFCEF),(0x8FFCF0),(0x8FFCF1),(0x8FFCF2),(0x8FFCF3),(0x8FFCF4),(0x8FFCF5),(0x8FFCF6),(0x8FFCF7),(0x8FFCF8),(0x8FFCF9),(0x8FFCFA),(0x8FFCFB),(0x8FFCFC),(0x8FFCFD),(0x8FFCFE),(0x8FFDA1),(0x8FFDA2),(0x8FFDA3),(0x8FFDA4),(0x8FFDA5),(0x8FFDA6),(0x8FFDA7),(0x8FFDA8),(0x8FFDA9),(0x8FFDAA),(0x8FFDAB),(0x8FFDAC),(0x8FFDAD),(0x8FFDAE),(0x8FFDAF),(0x8FFDB0),(0x8FFDB1),(0x8FFDB2),(0x8FFDB3),(0x8FFDB4),(0x8FFDB5),(0x8FFDB6),(0x8FFDB7),(0x8FFDB8),(0x8FFDB9),(0x8FFDBA),(0x8FFDBB),(0x8FFDBC),(0x8FFDBD),(0x8FFDBE),(0x8FFDBF),(0x8FFDC0),(0x8FFDC1),(0x8FFDC2),(0x8FFDC3),(0x8FFDC4),(0x8FFDC5),(0x8FFDC6),(0x8FFDC7),(0x8FFDC8),(0x8FFDC9),(0x8FFDCA),(0x8FFDCB),(0x8FFDCC),(0x8FFDCD),(0x8FFDCE),(0x8FFDCF),(0x8FFDD0),(0x8FFDD1),(0x8FFDD2),(0x8FFDD3),(0x8FFDD4),(0x8FFDD5),(0x8FFDD6),(0x8FFDD7),(0x8FFDD8),(0x8FFDD9),(0x8FFDDA),(0x8FFDDB),(0x8FFDDC),(0x8FFDDD),(0x8FFDDE),(0x8FFDDF),(0x8FFDE0),(0x8FFDE1),(0x8FFDE2),(0x8FFDE3),(0x8FFDE4),(0x8FFDE5),(0x8FFDE6),(0x8FFDE7),(0x8FFDE8),(0x8FFDE9),(0x8FFDEA),(0x8FFDEB),(0x8FFDEC),(0x8FFDED),(0x8FFDEE),(0x8FFDEF),(0x8FFDF0),(0x8FFDF1),(0x8FFDF2),(0x8FFDF3),(0x8FFDF4),(0x8FFDF5),(0x8FFDF6),(0x8FFDF7),(0x8FFDF8),(0x8FFDF9),(0x8FFDFA),(0x8FFDFB),(0x8FFDFC),(0x8FFDFD),(0x8FFDFE),(0x8FFEA1),(0x8FFEA2),(0x8FFEA3),(0x8FFEA4),(0x8FFEA5),(0x8FFEA6),(0x8FFEA7),(0x8FFEA8),(0x8FFEA9),(0x8FFEAA),(0x8FFEAB),(0x8FFEAC),(0x8FFEAD),(0x8FFEAE),(0x8FFEAF),(0x8FFEB0),(0x8FFEB1),(0x8FFEB2),(0x8FFEB3),(0x8FFEB4),(0x8FFEB5),(0x8FFEB6),(0x8FFEB7),(0x8FFEB8),(0x8FFEB9),(0x8FFEBA),(0x8FFEBB),(0x8FFEBC),(0x8FFEBD),(0x8FFEBE),(0x8FFEBF),(0x8FFEC0),(0x8FFEC1),(0x8FFEC2),(0x8FFEC3),(0x8FFEC4),(0x8FFEC5),(0x8FFEC6),(0x8FFEC7),(0x8FFEC8),(0x8FFEC9),(0x8FFECA),(0x8FFECB),(0x8FFECC),(0x8FFECD),(0x8FFECE),(0x8FFECF),(0x8FFED0),(0x8FFED1),(0x8FFED2),(0x8FFED3),(0x8FFED4),(0x8FFED5),(0x8FFED6),(0x8FFED7),(0x8FFED8),(0x8FFED9),(0x8FFEDA),(0x8FFEDB),(0x8FFEDC),(0x8FFEDD),(0x8FFEDE),(0x8FFEDF),(0x8FFEE0),(0x8FFEE1),(0x8FFEE2),(0x8FFEE3),(0x8FFEE4),(0x8FFEE5),(0x8FFEE6),(0x8FFEE7),(0x8FFEE8),(0x8FFEE9),(0x8FFEEA),(0x8FFEEB),(0x8FFEEC),(0x8FFEED),(0x8FFEEE),(0x8FFEEF),(0x8FFEF0),(0x8FFEF1),(0x8FFEF2),(0x8FFEF3),(0x8FFEF4),(0x8FFEF5),(0x8FFEF6),(0x8FFEF7),(0x8FFEF8),(0x8FFEF9),(0x8FFEFA),(0x8FFEFB),(0x8FFEFC),(0x8FFEFD),(0x8FFEFE);

Leads to:

10.6.6 e0e24b180d090d7ee378c097ab02df891b61a965 (Optimized)

mysqld: malloc.c:2379: sysmalloc: Assertion `(old_top == initial_top (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0)' failed.

10.6.6 e0e24b180d090d7ee378c097ab02df891b61a965 (Optimized)

Core was generated by `/test/MD031221-mariadb-10.6.6-linux-x86_64-opt/bin/mysqld --no-defaults --core-'.
Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
[Current thread is 1 (Thread 0x149d20c1b700 (LWP 2101871))]
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x0000149d29e45859 in __GI_abort () at abort.c:79
#2  0x0000149d29eb845a in __malloc_assert (assertion=assertion@entry=0x149d29fdc8a8 "(old_top == initial_top (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0)", file=file@entry=0x149d29fd83c3 "malloc.c", line=line@entry=2379, function=function@entry=0x149d29fdd030 <__PRETTY_FUNCTION__.13066> "sysmalloc") at malloc.c:298
#3  0x0000149d29ebaabf in sysmalloc (nb=nb@entry=14640, av=av@entry=0x149c80000020) at malloc.c:2379
#4  0x0000149d29ebb913 in _int_malloc (av=av@entry=0x149c80000020, bytes=bytes@entry=14625) at malloc.c:4141
#5  0x0000149d29ebbfdf in _int_realloc (av=av@entry=0x149c80000020, oldp=oldp@entry=0x149c8010a250, oldsize=oldsize@entry=14624, nb=14640) at malloc.c:4600
#6  0x0000149d29ebe2d6 in __GI___libc_realloc (oldmem=oldmem@entry=0x149c8010a260, bytes=bytes@entry=14624) at malloc.c:3235
#7  0x0000563a69a6b37f in my_realloc (key=0, old_point=0x149c8010a278, size=<optimized out>, my_flags=16) at /test/10.6_opt/mysys/my_malloc.c:144
#8  0x0000563a6935b5bb in Binary_string::realloc_raw (alloc_length=14601, this=0x149c800a4128) at /test/10.6_opt/sql/sql_string.cc:98
#9  Binary_string::realloc_raw (this=this@entry=0x149c800a4128, alloc_length=alloc_length@entry=14595) at /test/10.6_opt/sql/sql_string.cc:87
#10 0x0000149d1413c015 in Binary_string::realloc (arg_length=14594, this=<optimized out>) at /test/10.6_opt/sql/sql_string.h:704
#11 Binary_string::reserve (space_needed=1, this=0x149c800a4128) at /test/10.6_opt/sql/sql_string.h:752
#12 spider_string::reserve (this=this@entry=0x149c800a4118, space_needed=space_needed@entry=1) at /test/10.6_opt/storage/spider/spd_malloc.cc:1055
#13 0x0000149d1417289d in spider_mbase_handler::append_insert_values (this=0x149c800a3f30, str=0x149c800a4118) at /test/10.6_opt/storage/spider/spd_db_mysql.cc:13079
#14 0x0000149d14146627 in ha_spider::append_insert_values_sql_part (this=this@entry=0x149c800a2410, sql_type=sql_type@entry=2) at /test/10.6_opt/storage/spider/ha_spider.cc:15403
#15 0x0000149d140f958b in spider_db_bulk_insert (spider=spider@entry=0x149c800a2410, table=0x149c8009a858, copy_info=copy_info@entry=0x149c800a2800, bulk_end=bulk_end@entry=false) at /test/10.6_opt/storage/spider/spd_db_conn.cc:6662
#16 0x0000149d14155489 in ha_spider::write_row (this=0x149c800a2410, buf=0x149c8006c978 <incomplete sequence \375>) at /test/10.6_opt/storage/spider/ha_spider.cc:10039
#17 0x0000563a695092a0 in handler::ha_write_row (this=0x149c800a2410, buf=0x149c8006c978 <incomplete sequence \375>) at /test/10.6_opt/sql/handler.cc:7519
#18 0x0000563a6928acad in write_record (thd=thd@entry=0x149c80000c58, table=table@entry=0x149c8009a858, info=info@entry=0x149d20c19c40, sink=sink@entry=0x0) at /test/10.6_opt/sql/sql_insert.cc:2146
#19 0x0000563a692914bf in mysql_insert (thd=thd@entry=0x149c80000c58, table_list=<optimized out>, fields=@0x149c80005ca8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x563a6a42b590 <end_of_list>, last = 0x149c80005ca8, elements = 0}, <No data fields>}, values_list=@0x149c80005cf0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x149c80015e98, last = 0x149c80102490, elements = 1880}, <No data fields>}, update_fields=@0x149c80005cd8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x563a6a42b590 <end_of_list>, last = 0x149c80005cd8, elements = 0}, <No data fields>}, update_values=@0x149c80005cc0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x563a6a42b590 <end_of_list>, last = 0x149c80005cc0, elements = 0}, <No data fields>}, duplic=<optimized out>, ignore=<optimized out>, result=<optimized out>) at /test/10.6_opt/sql/sql_insert.cc:1123
#20 0x0000563a692cbdf9 in mysql_execute_command (thd=0x149c80000c58, is_called_from_prepared_stmt=<optimized out>) at /test/10.6_opt/sql/sql_parse.cc:4565
#21 0x0000563a692bb9a6 in mysql_parse (thd=0x149c80000c58, rawbuf=<optimized out>, length=<optimized out>, parser_state=<optimized out>) at /test/10.6_opt/sql/sql_parse.cc:8030
#22 0x0000563a692c7b65 in dispatch_command (command=COM_QUERY, thd=0x149c80000c58, packet=<optimized out>, packet_length=<optimized out>, blocking=<optimized out>) at /test/10.6_opt/sql/sql_class.h:1358
#23 0x0000563a692c9d57 in do_command (thd=0x149c80000c58, blocking=blocking@entry=true) at /test/10.6_opt/sql/sql_parse.cc:1404
#24 0x0000563a693d9957 in do_handle_one_connection (connect=<optimized out>, put_in_cache=true) at /test/10.6_opt/sql/sql_connect.cc:1418
#25 0x0000563a693d9c9d in handle_one_connection (arg=arg@entry=0x563a6bd8f958) at /test/10.6_opt/sql/sql_connect.cc:1312
#26 0x0000563a69765828 in pfs_spawn_thread (arg=0x563a6bd02b78) at /test/10.6_opt/storage/perfschema/pfs.cc:2201
#27 0x0000149d2a354609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#28 0x0000149d29f42293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

10.6.6 e0e24b180d090d7ee378c097ab02df891b61a965 (Debug)

mysqld: /test/10.6_dbg/storage/spider/spd_malloc.cc:1116: void spider_string::q_append(const char*, uint32): Assertion `str.alloced_length() >= str.length() + data_len' failed.

10.6.6 e0e24b180d090d7ee378c097ab02df891b61a965 (Debug)

Core was generated by `/test/MD031221-mariadb-10.6.6-linux-x86_64-dbg/bin/mysqld --no-defaults --core-'.
Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
[Current thread is 1 (Thread 0x14922414a700 (LWP 2268110))]
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x000014922d3ae859 in __GI_abort () at abort.c:79
#2  0x000014922d3ae729 in __assert_fail_base (fmt=0x14922d544588 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x14920e5bc510 "str.alloced_length() >= str.length() + data_len", file=0x14920e5bb370 "/test/10.6_dbg/storage/spider/spd_malloc.cc", line=1116, function=<optimized out>) at assert.c:92
#3  0x000014922d3bff36 in __GI___assert_fail (assertion=assertion@entry=0x14920e5bc510 "str.alloced_length() >= str.length() + data_len", file=file@entry=0x14920e5bb370 "/test/10.6_dbg/storage/spider/spd_malloc.cc", line=line@entry=1116, function=function@entry=0x14920e5bc540 "void spider_string::q_append(const char*, uint32)") at assert.c:101
#4  0x000014920e529b6d in spider_string::q_append (this=this@entry=0x1491b016aab8, data=data@entry=0x14920e5a8840 ")", data_len=data_len@entry=1) at /test/10.6_dbg/sql/sql_string.h:431
#5  0x000014920e560c10 in spider_db_mariadb_util::append_column_value (this=0x14920e5fb980 <spider_db_mariadb_utility>, spider=<optimized out>, str=0x1491b016aab8, field=<optimized out>, new_ptr=<optimized out>, access_charset=<optimized out>) at /test/10.6_dbg/storage/spider/spd_db_mysql.cc:4398
#6  0x000014920e585d15 in spider_mbase_handler::append_insert_values (this=this@entry=0x1491b016a8d0, str=str@entry=0x1491b016aab8) at /test/10.6_dbg/storage/spider/spd_db_mysql.cc:13079
#7  0x000014920e585f56 in spider_mbase_handler::append_insert_values_part (this=0x1491b016a8d0, sql_type=2) at /test/10.6_dbg/storage/spider/spd_db_mysql.cc:13022
#8  0x000014920e53ad59 in ha_spider::append_insert_values_sql_part (this=this@entry=0x1491b00f0270, sql_type=sql_type@entry=2) at /test/10.6_dbg/storage/spider/ha_spider.cc:15403
#9  0x000014920e4c4837 in spider_db_bulk_insert (spider=spider@entry=0x1491b00f0270, table=0x1491b00ec2a8, copy_info=copy_info@entry=0x1491b00f0660, bulk_end=bulk_end@entry=false) at /test/10.6_dbg/storage/spider/spd_db_conn.cc:6662
#10 0x000014920e5525ea in ha_spider::write_row (this=0x1491b00f0270, buf=0x1491b00fc558 <incomplete sequence \375>) at /test/10.6_dbg/storage/spider/ha_spider.cc:10039
#11 0x000055e02a9c1c6d in handler::ha_write_row (this=0x1491b00f0270, buf=0x1491b00fc558 <incomplete sequence \375>) at /test/10.6_dbg/sql/handler.cc:7519
#12 0x000055e02a677026 in write_record (thd=thd@entry=0x1491b0000db8, table=table@entry=0x1491b00ec2a8, info=info@entry=0x149224148ca0, sink=sink@entry=0x0) at /test/10.6_dbg/sql/sql_insert.cc:2146
#13 0x000055e02a682c8a in mysql_insert (thd=thd@entry=0x1491b0000db8, table_list=0x1491b00189d8, fields=@0x1491b0005fc8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x55e02bcf6c00 <end_of_list>, last = 0x1491b0005fc8, elements = 0}, <No data fields>}, values_list=@0x1491b0006010: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x1491b00195f8, last = 0x1491b015d2b0, elements = 1880}, <No data fields>}, update_fields=@0x1491b0005ff8: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x55e02bcf6c00 <end_of_list>, last = 0x1491b0005ff8, elements = 0}, <No data fields>}, update_values=@0x1491b0005fe0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x55e02bcf6c00 <end_of_list>, last = 0x1491b0005fe0, elements = 0}, <No data fields>}, duplic=DUP_ERROR, ignore=false, result=0x0) at /test/10.6_dbg/sql/sql_insert.cc:1123
#14 0x000055e02a6c93d2 in mysql_execute_command (thd=thd@entry=0x1491b0000db8, is_called_from_prepared_stmt=is_called_from_prepared_stmt@entry=false) at /test/10.6_dbg/sql/sql_parse.cc:4565
#15 0x000055e02a6b3dec in mysql_parse (thd=thd@entry=0x1491b0000db8, rawbuf=<optimized out>, length=<optimized out>, parser_state=parser_state@entry=0x149224149400) at /test/10.6_dbg/sql/sql_parse.cc:8030
#16 0x000055e02a6c2ab1 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x1491b0000db8, packet=packet@entry=0x1491b0101209 "INSERT INTO t1 VALUES(0xF5A1),(0xF5A2),(0xF5A3),(0xF5A4),(0xF5A5),(0xF5A6),(0xF5A7),(0xF5A8),(0xF5A9),(0xF5AA),(0xF5AB),(0xF5AC),(0xF5AD),(0xF5AE),(0xF5AF),(0xF5B0),(0xF5B1),(0xF5B2),(0xF5B3),(0xF5B4)"..., packet_length=packet_length@entry=18820, blocking=blocking@entry=true) at /test/10.6_dbg/sql/sql_class.h:1358
#17 0x000055e02a6c5eeb in do_command (thd=0x1491b0000db8, blocking=blocking@entry=true) at /test/10.6_dbg/sql/sql_parse.cc:1404
#18 0x000055e02a82b018 in do_handle_one_connection (connect=<optimized out>, connect@entry=0x55e02e0fd7b8, put_in_cache=put_in_cache@entry=true) at /test/10.6_dbg/sql/sql_connect.cc:1418
#19 0x000055e02a82b61d in handle_one_connection (arg=arg@entry=0x55e02e0fd7b8) at /test/10.6_dbg/sql/sql_connect.cc:1312
#20 0x000055e02acdce4e in pfs_spawn_thread (arg=0x55e02e00a888) at /test/10.6_dbg/storage/perfschema/pfs.cc:2201
#21 0x000014922d8bd609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#22 0x000014922d4ab293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

10.8.0 bc57ff7cf79504a198d4752b4748340a4afd886c (Optimized)

Core was generated by `/test/MD121121-mariadb-10.8.0-linux-x86_64-opt/bin/mysqld --no-defaults --core-'.
Program terminated with signal SIGABRT, Aborted.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
[Current thread is 1 (Thread 0x1545dc129700 (LWP 2261111))]
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1  0x00001545f11e7859 in __GI_abort () at abort.c:79
#2  0x00001545f12523ee in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x1545f137c285 "%s\n") at ../sysdeps/posix/libc_fatal.c:155
#3  0x00001545f125a47c in malloc_printerr (str=str@entry=0x1545f137a43a "corrupted size vs. prev_size") at malloc.c:5347
#4  0x00001545f125aaeb in unlink_chunk (p=p@entry=0x1545400a65a0, av=0x154540000020) at malloc.c:1454
#5  0x00001545f125e0c1 in _int_realloc (av=av@entry=0x154540000020, oldp=oldp@entry=0x1545400a6040, oldsize=oldsize@entry=1376, nb=1392) at malloc.c:4594
#6  0x00001545f12602d6 in __GI___libc_realloc (oldmem=oldmem@entry=0x1545400a6050, bytes=bytes@entry=1376) at malloc.c:3235
#7  0x0000560d8c5d6f3f in my_realloc (key=0, old_point=0x1545400a6068, size=<optimized out>, my_flags=16) at /test/10.8_opt/mysys/my_malloc.c:144
#8  0x0000560d8bee3f1b in Binary_string::realloc_raw (alloc_length=1353, this=0x15454009e048) at /test/10.8_opt/sql/sql_string.cc:98
#9  Binary_string::realloc_raw (this=this@entry=0x15454009e048, alloc_length=alloc_length@entry=1347) at /test/10.8_opt/sql/sql_string.cc:87
#10 0x00001545cc165e75 in Binary_string::realloc (arg_length=1346, this=<optimized out>) at /test/10.8_opt/sql/sql_string.h:709
#11 Binary_string::reserve (space_needed=1, this=0x15454009e048) at /test/10.8_opt/sql/sql_string.h:757
#12 spider_string::reserve (this=this@entry=0x15454009e038, space_needed=space_needed@entry=1) at /test/10.8_opt/storage/spider/spd_malloc.cc:1055
#13 0x00001545cc19c37d in spider_mbase_handler::append_insert_values (this=0x15454009de50, str=0x15454009e038) at /test/10.8_opt/storage/spider/spd_db_mysql.cc:13079
#14 0x00001545cc170477 in ha_spider::append_insert_values_sql_part (this=this@entry=0x1545400a20f0, sql_type=sql_type@entry=2) at /test/10.8_opt/storage/spider/ha_spider.cc:15403
#15 0x00001545cc1233db in spider_db_bulk_insert (spider=spider@entry=0x1545400a20f0, table=0x15454009b118, copy_info=copy_info@entry=0x1545400a24e0, bulk_end=bulk_end@entry=false) at /test/10.8_opt/storage/spider/spd_db_conn.cc:6662
#16 0x00001545cc17f2d9 in ha_spider::write_row (this=0x1545400a20f0, buf=0x15454009ac98 <incomplete sequence \375>) at /test/10.8_opt/storage/spider/ha_spider.cc:10039
#17 0x0000560d8c092aa0 in handler::ha_write_row (this=0x1545400a20f0, buf=0x15454009ac98 <incomplete sequence \375>) at /test/10.8_opt/sql/handler.cc:7516
#18 0x0000560d8be0547d in write_record (thd=thd@entry=0x154540000c58, table=table@entry=0x15454009b118, info=info@entry=0x1545dc127c50, sink=sink@entry=0x0) at /test/10.8_opt/sql/sql_insert.cc:2156
#19 0x0000560d8be0bcb8 in mysql_insert (thd=thd@entry=0x154540000c58, table_list=<optimized out>, fields=@0x154540005d58: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x560d8cfaf510 <end_of_list>, last = 0x154540005d58, elements = 0}, <No data fields>}, values_list=@0x154540005da0: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x154540011518, last = 0x1545401041a8, elements = 1880}, <No data fields>}, update_fields=@0x154540005d88: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x560d8cfaf510 <end_of_list>, last = 0x154540005d88, elements = 0}, <No data fields>}, update_values=@0x154540005d70: {<base_list> = {<Sql_alloc> = {<No data fields>}, first = 0x560d8cfaf510 <end_of_list>, last = 0x154540005d70, elements = 0}, <No data fields>}, duplic=<optimized out>, ignore=<optimized out>, result=<optimized out>) at /test/10.8_opt/sql/sql_insert.cc:1127
#20 0x0000560d8be46b4f in mysql_execute_command (thd=0x154540000c58, is_called_from_prepared_stmt=<optimized out>) at /test/10.8_opt/sql/sql_parse.cc:4563
#21 0x0000560d8be36356 in mysql_parse (thd=0x154540000c58, rawbuf=<optimized out>, length=<optimized out>, parser_state=<optimized out>) at /test/10.8_opt/sql/sql_parse.cc:8028
#22 0x0000560d8be42505 in dispatch_command (command=COM_QUERY, thd=0x154540000c58, packet=<optimized out>, packet_length=<optimized out>, blocking=<optimized out>) at /test/10.8_opt/sql/sql_class.h:1360
#23 0x0000560d8be446f7 in do_command (thd=0x154540000c58, blocking=blocking@entry=true) at /test/10.8_opt/sql/sql_parse.cc:1402
#24 0x0000560d8bf627c7 in do_handle_one_connection (connect=<optimized out>, put_in_cache=true) at /test/10.8_opt/sql/sql_connect.cc:1418
#25 0x0000560d8bf62b0d in handle_one_connection (arg=arg@entry=0x560d8f342ad8) at /test/10.8_opt/sql/sql_connect.cc:1312
#26 0x0000560d8c2cf0a8 in pfs_spawn_thread (arg=0x560d8f342b48) at /test/10.8_opt/storage/perfschema/pfs.cc:2201
#27 0x00001545f16f6609 in start_thread (arg=<optimized out>) at pthread_create.c:477
#28 0x00001545f12e4293 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95

Bug confirmed present in:
MariaDB: 10.6.6 (dbg), 10.6.6 (opt), 10.7.2 (dbg), 10.7.2 (opt), 10.8.0 (dbg), 10.8.0 (opt)

Bug (or feature/syntax) confirmed not present in:
MariaDB: 10.2.42 (dbg), 10.2.42 (opt), 10.3.33 (dbg), 10.3.33 (opt), 10.4.23 (dbg), 10.4.23 (opt), 10.5.14 (dbg), 10.5.14 (opt)
MySQL: 5.5.62 (dbg), 5.5.62 (opt), 5.6.51 (dbg), 5.6.51 (opt), 5.7.36 (dbg), 5.7.36 (opt), 8.0.27 (dbg), 8.0.27 (opt)



 Comments   
Comment by Roel Van de Paar [ 2021-12-07 ]

UniqueID's. The second is too generic so not adding to filter list.

(old_top == initial_top (av) && old_size == 0) || ((unsigned long) (old_size) >= MINSIZE && prev_inuse (old_top) && ((unsigned long) old_end & (pagesize - 1)) == 0)|SIGABRT|__malloc_assert|sysmalloc|_int_malloc|_int_realloc
SIGABRT|__libc_message|malloc_printerr|unlink_chunk|_int_realloc
str.alloced_length() >= str.length() + data_len|SIGABRT|spider_string::q_append|spider_db_mariadb_util::append_column_value|spider_mbase_handler::append_insert_values|spider_mbase_handler::append_insert_values_part

Comment by Nayuta Yanagisawa (Inactive) [ 2021-12-23 ]

The result of the git-bisect:

2f6970ef1c7c0d91b750dea0c1ddd4fd707a54dc is the first bad commit
commit 2f6970ef1c7c0d91b750dea0c1ddd4fd707a54dc
Author: Kentoku SHIBA <kentokushiba@gmail.com>
Date:   Sun Dec 20 01:50:16 2020 +0900
                                                                                     
    MDEV-24424 Unnecessary usage of to_float() for INSERT into the Spider table with float column
                                      
    Change default wrapper from mysql to mariadb.
                                                                                     
 .../delete_with_float_column_default_deinit.inc    |  4 +
 .../delete_with_float_column_default_init.inc      | 32 ++++++++     
 .../r/delete_with_float_column_default.result      | 85 ++++++++++++++++++++++
 .../bugfix/t/delete_with_float_column_default.cnf  |  4 +              
 .../bugfix/t/delete_with_float_column_default.test |  5 ++            
 storage/spider/spd_db_conn.h                       |  2 +-
 6 files changed, 131 insertions(+), 1 deletion(-)    
 create mode 100644 storage/spider/mysql-test/spider/bugfix/include/delete_with_float_column_default_deinit.inc
 create mode 100644 storage/spider/mysql-test/spider/bugfix/include/delete_with_float_column_default_init.inc
 create mode 100644 storage/spider/mysql-test/spider/bugfix/r/delete_with_float_column_default.result
 create mode 100644 storage/spider/mysql-test/spider/bugfix/t/delete_with_float_column_default.cnf
 create mode 100644 storage/spider/mysql-test/spider/bugfix/t/delete_with_float_column_default.test
bisect run success

https://github.com/MariaDB/server/commit/2f6970ef1c7c0d91b750dea0c1ddd4fd707a54dc

Comment by Nayuta Yanagisawa (Inactive) [ 2021-12-23 ]

The following change fixes the crash:

diff --git a/storage/spider/spd_db_conn.h b/storage/spider/spd_db_conn.h
index 0dfe9b16fad..8af820c7dfa 100644
--- a/storage/spider/spd_db_conn.h
+++ b/storage/spider/spd_db_conn.h
@@ -14,7 +14,7 @@
   along with this program; if not, write to the Free Software
   Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335 USA */
 
-#define SPIDER_DB_WRAPPER_STR "mariadb"
+#define SPIDER_DB_WRAPPER_STR "mysql"
 #define SPIDER_DB_WRAPPER_LEN (sizeof(SPIDER_DB_WRAPPER_STR) - 1)
 #define SPIDER_DB_PK_NAME_STR "PRIMARY"
 #define SPIDER_DB_PK_NAME_LEN (sizeof(SPIDER_DB_PK_NAME_STR) - 1)

Comment by Nayuta Yanagisawa (Inactive) [ 2021-12-23 ]

I'm not yet sure but 2f6970e may not be the root cause of the bug.

Comment by Nayuta Yanagisawa (Inactive) [ 2021-12-23 ]

Please review: https://github.com/MariaDB/server/commit/dc74d234821b67ab83257fba643acc37dfbafe20

Comment by Alexey Botchkov [ 2021-12-26 ]

Ok to push.

Comment by Nayuta Yanagisawa (Inactive) [ 2021-12-27 ]

holyfoot Thank you for your review. I will also push the patch to 10.4 because 10.4 and 10.5 are potentially buggy (they have the same miss allocation) while they doesn't reproduce the bug.

Generated at Thu Feb 08 09:50:58 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.