Crash with get_fanout_with_deps in maria-5.3-mwl90
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MariaDB |
Fix Released
|
Medium
|
Sergey Petrunia |
Bug Description
If the WHERE clause of the subquery contains 2 mutually-exclusive conditions over the same column, mysqld crashes as follows:
#4 <signal handler called>
#5 0x0824311b in get_fanout_
#6 0x0824333a in get_post_
#7 0x082434ff in subselect_
#8 0x0823afa2 in Item_subselect:
#9 0x083c7e5e in get_delayed_
#10 0x08312e23 in make_join_
#11 0x0830b6a7 in JOIN::optimize (this=0xae629ac0) at sql_select.cc:990
#12 0x0831116f in mysql_select (thd=0xa2f4de0, rref_pointer_
order=0x0, group=0x0, having=0x0, proc_param=0x0, select_
at sql_select.cc:2693
#13 0x08309843 in handle_select (thd=0xa2f4de0, lex=0xa2f6484, result=0xae6141d0, setup_tables_
#14 0x082a6a63 in execute_
#15 0x0829d8ad in mysql_execute_
#16 0x082a9009 in mysql_parse (thd=0xa2f4de0,
rawbuf=
found_
#17 0x0829b533 in dispatch_command (command=COM_QUERY, thd=0xa2f4de0,
packet=
at sql_parse.cc:1215
#18 0x0829a991 in do_command (thd=0xa2f4de0) at sql_parse.cc:904
#19 0x08297a44 in handle_
#20 0x00821919 in start_thread () from /lib/libpthread
#21 0x0076acce in clone () from /lib/libc.so.6
test case:
DROP TABLE IF EXISTS t1;
CREATE TABLE t1 ( f1 int ) ;
INSERT INTO t1 VALUES (2),(2);
DROP TABLE IF EXISTS t2;
CREATE TABLE t2 (f3 int) ;
INSERT INTO t2 VALUES (2),(2);
SELECT *
FROM t1
WHERE ( f1 ) IN (
SELECT t2.f3
FROM t2
WHERE t2.f3 = 97
AND t2.f3 = 50
GROUP BY 1
);
Related branches
Changed in maria: | |
assignee: | nobody → Sergey Petrunia (sergefp) |
milestone: | none → 5.3 |
Changed in maria: | |
status: | New → Fix Committed |
importance: | Undecided → Medium |
Changed in maria: | |
status: | Fix Committed → Fix Released |