The crash still occurs after the fix for bug 793436

backtrace:

#4 <signal handler called>
#5 0x0832be95 in generate_derived_keys (keyuse_array=0xae62e3c8) at sql_select.cc:8337
#6 0x08323205 in sort_and_filter_keyuse (thd=0xa137730, keyuse=0xae62e3c8, skip_unprefixed_keyparts=true) at sql_select.cc:4675
#7 0x0831f3a2 in make_join_statistics (join=0xae629290, tables_list=..., conds=0xae6358d8, keyuse_array=0xae62e3c8) at sql_select.cc:3155
#8 0x08318673 in JOIN::optimize (this=0xae629290) at sql_select.cc:1099
#9 0x0831e427 in mysql_select (thd=0xa137730, rref_pointer_array=0xa139248, tables=0xae612750, wild_num=1, fields=..., conds=0x0, og_num=0, order=0x0,
group=0x0, having=0x0, proc_param=0x0, select_options=2147764736, result=0xae614080, unit=0xa138e4c, select_lex=0xa139128) at sql_select.cc:2870
#10 0x08316387 in handle_select (thd=0xa137730, lex=0xa138df0, result=0xae614080, setup_tables_done_option=0) at sql_select.cc:283
#11 0x082b1aca in execute_sqlcom_select (thd=0xa137730, all_tables=0xae612750) at sql_parse.cc:5086
#12 0x082a88df in mysql_execute_command (thd=0xa137730) at sql_parse.cc:2227
#13 0x082b4106 in mysql_parse (thd=0xa137730, rawbuf=0xae6125e0 "SELECT * FROM v1 JOIN t2 ON v1.f1 = t2.f1", length=41, found_semicolon=0xae983228)
at sql_parse.cc:6087
#14 0x082a657b in dispatch_command (command=COM_QUERY, thd=0xa137730, packet=0xa192231 "SELECT * FROM v1 JOIN t2 ON v1.f1 = t2.f1", packet_length=41)
at sql_parse.cc:1206
#15 0x082a5a01 in do_command (thd=0xa137730) at sql_parse.cc:904
#16 0x082a2a7c in handle_one_connection (arg=0xa137730) at sql_connect.cc:1177
#17 0x00821919 in start_thread () from /lib/libpthread.so.0
#18 0x0076acce in clone () from /lib/libc.so.6

test case:

CREATE TABLE t1 ( f1 int) ;
INSERT INTO t1 VALUES (149),(150),(224),(29);

CREATE TABLE t2 ( f1 int , KEY (f1) );
INSERT INTO t2 VALUES (NULL),(NULL);

CREATE ALGORITHM=TEMPTABLE VIEW v1 AS SELECT * FROM t1;

SELECT * FROM v1 JOIN t2 ON v1.f1 = t2.f1;

bzr version-info:

bzr version-info
revision-id: <email address hidden>
date: 2011-06-09 00:13:00 -0700
build-date: 2011-06-09 11:36:31 +0300
revno: 3029
branch-nick: maria-5.3-mwl106