Crash in decimal_cmp on using UNIX_TIMESTAMP with a wrongly formatted timestamp
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MariaDB |
Fix Released
|
Undecided
|
Sergei Golubchik |
Bug Description
#3 0x082d05ab in handle_segfault (sig=11) at mysqld.cc:2838
#4 <signal handler called>
#5 0x0881d10e in decimal_cmp (from1=0x0, from2=0x945d0f8) at decimal.c:1971
#6 0x082114e3 in my_decimal_cmp (a=0x0, b=0x945d0f8) at my_decimal.h:438
#7 0x0823e58d in Arg_comparator:
#8 0x0822374a in Arg_comparator:
#9 0x08240614 in Item_func_
#10 0x08208738 in Item::send (this=0x945ce48, protocol=0x93ee7e4, buffer=0xae898060) at item.cc:5971
#11 0x082b8b56 in select_
#12 0x08356416 in JOIN::exec (this=0x946ac68) at sql_select.cc:2115
#13 0x08358e45 in mysql_select (thd=0x93ee4b8, rref_pointer_
wild_num=0, fields=..., conds=0x0, og_num=0, order=0x0, group=0x0, having=0x0, proc_param=0x0,
select_
at sql_select.cc:2931
#14 0x08350b5f in handle_select (thd=0x93ee4b8, lex=0x93efbcc, result=0x945d000,
setup_
#15 0x082ec098 in execute_
#16 0x082e3474 in mysql_execute_
#17 0x082ee6d3 in mysql_parse (thd=0x93ee4b8, rawbuf=0x945cc08 "SELECT UNIX_TIMESTAMP(
length=32, found_semicolon
#18 0x082e10d6 in dispatch_command (command=COM_QUERY, thd=0x93ee4b8, packet=0x9447329 "",
packet_
#19 0x082e0580 in do_command (thd=0x93ee4b8) at sql_parse.cc:922
#20 0x082dd545 in handle_
#21 0xb76aeb25 in start_thread () from /lib/libpthread
bzr version-info
revision-id: <email address hidden>
date: 2012-01-25 22:05:20 +0400
build-date: 2012-01-29 21:29:29 +0400
revno: 3395
branch-nick: maria-5.3
Also reproducible on MariaDB 5.3.2, 5.3.3, 5.5.
Could not reproduce in MariaDB 5.2, MySQL 5.1.60, 5.5.20, 5.6.4.
Minimal optimizer_switch: none required
Full optimizer_switch: index_merge=
Test case:
SELECT UNIX_TIMESTAMP(
summary: |
- Crash in decimal_cmp on using UNIX_TIMESTAMP on a wrongly formatted + Crash in decimal_cmp on using UNIX_TIMESTAMP with a wrongly formatted timestamp |
Changed in maria: | |
assignee: | nobody → Sergei (sergii) |
Changed in maria: | |
status: | New → Fix Committed |
Fix released with 5.3.5-ga.