Crash in Field::eq with extended_keys+semijoin+materialization, IN subquery, aggregate function
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MariaDB |
Fix Released
|
Critical
|
Igor Babaev |
Bug Description
#4 <signal handler called>
#5 0x083b4652 in Field::eq (this=0x9e11a28, field=0x0) at field.h:244
#6 0x08535f7a in add_key_part (keyuse_
at sql_select.cc:4419
#7 0x08537891 in update_ref_and_keys (thd=0x9d80ad8, keyuse=0x9e08758,
join_
normal_
at sql_select.cc:4719
#8 0x0852f741 in make_join_
conds=
#9 0x08521c45 in JOIN::optimize (this=0x9e022b8) at sql_select.cc:1145
#10 0x0852dbef in mysql_select (thd=0x9d80ad8, rref_pointer_
tables=
group=0x0, having=0x0, proc_param=0x0, select_
result=
#11 0x0851cf75 in handle_select (thd=0x9d80ad8, lex=0x9d821d4, result=0x9df0ea8,
setup_
#12 0x0843bdba in execute_
at sql_parse.cc:5148
#13 0x0842943f in mysql_execute_
#14 0x08440e20 in mysql_parse (thd=0x9d80ad8,
rawbuf=
at sql_parse.cc:6149
#15 0x08424839 in dispatch_command (command=COM_QUERY, thd=0x9d80ad8,
packet=
#16 0x08422edf in do_command (thd=0x9d80ad8) at sql_parse.cc:922
#17 0x0841c3d2 in handle_
#18 0xb7795b25 in start_thread () from /lib/libpthread
#19 0xb75b634e in clone () from /lib/libc.so.6
bzr version-info
revision-id: <email address hidden>
date: 2012-01-01 22:42:11 -0800
build-date: 2012-01-11 06:34:02 +0400
revno: 3379
branch-nick: lp-5.3-
EXPLAIN also crashes.
Does not crash with extended_keys=OFF.
Sporadically reproducible on all of MyISAM, InnoDB, Aria.
Minimal optimizer_switch: materialization
Full optimizer_switch: index_merge=
# Test case
# If it does not crash at once,
# try several times, different engines and functions (MIN,MAX,SUM)
SET optimizer_switch = 'materializatio
CREATE TABLE t1 (a INT, b INT);
INSERT INTO t1 VALUES (1,1),(2,2);
SELECT * FROM t1
WHERE 1 IN (
SELECT MAX(alias1.a)
FROM t1 AS alias1, t1 AS alias2 );
# end of test case
Changed in maria: | |
importance: | Undecided → Critical |
status: | New → Confirmed |
status: | Confirmed → In Progress |
Changed in maria: | |
status: | In Progress → Fix Committed |
Fix released in 5.5.21.