[MDEV-7023] Error 2027: Malformed packet and assertion `field_types == 0 || field_types[field_pos] == MYSQL_TYPE_INT24 || field_types[field_pos] == MYSQL_TYPE_LONG' failure in Protocol_text::store_long Created: 2014-11-05 Updated: 2019-07-09 Resolved: 2015-01-29 |
|
| Status: | Closed |
| Project: | MariaDB Server |
| Component/s: | Data Definition - Procedure |
| Affects Version/s: | 10.1.1 |
| Fix Version/s: | 10.1.3 |
| Type: | Bug | Priority: | Major |
| Reporter: | Elena Stepanova | Assignee: | Oleksandr Byelkin |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | analyze-stmt | ||
| Issue Links: |
|
||||||||||||||||
| Description |
|
|
| Comments |
| Comment by Oleksandr Byelkin [ 2015-01-28 ] |
|
Protocol_text::store_long is trying to work on freed memory: |
| Comment by Oleksandr Byelkin [ 2015-01-28 ] |
|
mem_root where field_types was allocated was freed after executing instruction 0,and crash happens in instruction 1 execution (RETURN). |
| Comment by Oleksandr Byelkin [ 2015-01-29 ] |
|
The problem is that statement which returns result sets should be prohibited for the functions => ANALYZE should be prohibited as it done for EXPLAIN & SELECT. |
| Comment by Oleksandr Byelkin [ 2015-01-29 ] |
|
The problem was that sp_head::MULTI_RESULTS was not set correctly for ANALYZE statement. |
| Comment by Sergei Petrunia [ 2015-01-29 ] |
|
Ok to push |