[MDEV-30352] crash with firstvalue()/over() Created: 2023-01-06  Updated: 2023-01-09  Resolved: 2023-01-09

Status: Closed
Project: MariaDB Server
Component/s: Optimizer - Window functions
Affects Version/s: 11.0.0
Fix Version/s: N/A

Type: Bug Priority: Major
Reporter: sbester1 Assignee: Unassigned
Resolution: Duplicate Votes: 0
Labels: None
Environment:

linux x64


Issue Links:
Duplicate
duplicates MDEV-26416 A SEGV in Field::set_notnull/Item::sa... Confirmed

 Description   

Version: '11.0.0-preview-MariaDB'  socket: '/tmp/mysql.sock'  port: 3306  MariaDB Server
Thread 18 "mysqld" received signal SIGSEGV, Segmentation fault.
(gdb) bt
#0  in Item::save_real_in_field at ./sql/item.cc:6834
#1  in Item::save_in_field at ./sql/item.cc:6866
#2  in save_window_function_values at ./sql/sql_window.cc:2775
#3  in compute_window_func at ./sql/sql_window.cc:2927
#4  in Window_func_runner::exec at ./sql/sql_window.cc:3042
#5  in Window_funcs_sort::exec at ./sql/sql_window.cc:3067
#6  in Window_funcs_computation::exec at ./sql/sql_window.cc:3196
#7  in AGGR_OP::end_send at ./sql/sql_select.cc:31045
#8  in sub_select_postjoin_aggr at ./sql/sql_select.cc:22319
#9  in do_select at ./sql/sql_select.cc:22156
#10 in JOIN::exec_inner at ./sql/sql_select.cc:4866
#11 in JOIN::exec at ./sql/sql_select.cc:4644
#12 in mysql_select at ./sql/sql_select.cc:5124
#13 in handle_select at ./sql/sql_select.cc:620
#14 in execute_sqlcom_select at ./sql/sql_parse.cc:6265
#15 in mysql_execute_command at ./sql/sql_parse.cc:3949
#16 in mysql_parse at ./sql/sql_parse.cc:8000
#17 in dispatch_command at ./sql/sql_parse.cc:1894
#18 in do_command at ./sql/sql_parse.cc:1408
#19 in do_handle_one_connection at ./sql/sql_connect.cc:1416
#20 in handle_one_connection at ./sql/sql_connect.cc:1318

How to repeat

drop table if exists t;
create table t (
  c0 tinyint not null,
  c1 double not null,
  primary key (c1,c0)
);
 
insert into t values(1,2),(3,4);
select 
(
 inet6_aton(@c)
 between
 decode(last_insert_id(),charset(first_value(c1) over()))
 and
 utc_date
),c0
from t;



 Comments   
Comment by Alice Sherepa [ 2023-01-09 ]

Thanks!
This is the same bug as MDEV-26416

Generated at Thu Feb 08 10:15:36 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.