invalid memory access within wsrep_apply_cb() for non-ROW events
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MySQL patches by Codership |
New
|
Undecided
|
Unassigned | ||
5.5 |
New
|
Undecided
|
Unassigned | ||
Percona XtraDB Cluster moved to https://jira.percona.com/projects/PXC |
New
|
Undecided
|
Unassigned | ||
5.5 |
Confirmed
|
Critical
|
Unassigned |
Bug Description
Valgrind complains about use of uninitialized values and invalid memory access within wsrep_apply_cb():
==3596== Thread 24:
==3596== Conditional jump or move depends on uninitialised value(s)
==3596== at 0x7694B6: Intvar_
==3596== by 0x59FECC: wsrep_apply_
==3596== by 0x83B2F95: apply_wscoll(void*, wsrep_status (*)(void*, void const*, unsigned long, long), galera::TrxHandle const&) (replicator_
==3596== by 0x83B329A: apply_trx_ws(void*, wsrep_status (*)(void*, void const*, unsigned long, long), wsrep_status (*)(void*, long, bool), galera::TrxHandle const&) (replicator_
==3596== by 0x83B7ADD: galera:
==3596== by 0x83B7EBF: galera:
==3596== by 0x83A13D2: galera:
==3596== by 0x83A15D1: galera:
==3596== by 0x83B8EFC: galera:
==3596== by 0x83C4BEE: galera_recv (wsrep_
==3596== by 0x5A0D44: wsrep_replicati
==3596== by 0x51BB64: start_wsrep_THD (mysqld.cc:4435)
==3596==
==3596== Invalid read of size 1
==3596== at 0x5A00A1: wsrep_apply_
==3596== by 0x83B2F95: apply_wscoll(void*, wsrep_status (*)(void*, void const*, unsigned long, long), galera::TrxHandle const&) (replicator_
==3596== by 0x83B329A: apply_trx_ws(void*, wsrep_status (*)(void*, void const*, unsigned long, long), wsrep_status (*)(void*, long, bool), galera::TrxHandle const&) (replicator_
==3596== by 0x83B7ADD: galera:
==3596== by 0x83B7EBF: galera:
==3596== by 0x83A13D2: galera:
==3596== by 0x83A15D1: galera:
==3596== by 0x83B8EFC: galera:
==3596== by 0x83C4BEE: galera_recv (wsrep_
==3596== by 0x5A0D44: wsrep_replicati
==3596== by 0x51BB64: start_wsrep_THD (mysqld.cc:4435)
==3596== by 0x5897E99: start_thread (pthread_
==3596== Address 0x1da72eb8 is not stack'd, malloc'd or (recently) free'd
==3596==
==3596== Conditional jump or move depends on uninitialised value(s)
==3596== at 0x7693F4: Rand_log_
==3596== by 0x59FECC: wsrep_apply_
==3596== by 0x83B2F95: apply_wscoll(void*, wsrep_status (*)(void*, void const*, unsigned long, long), galera::TrxHandle const&) (replicator_
==3596== by 0x83B329A: apply_trx_ws(void*, wsrep_status (*)(void*, void const*, unsigned long, long), wsrep_status (*)(void*, long, bool), galera::TrxHandle const&) (replicator_
==3596== by 0x83B7ADD: galera:
==3596== by 0x83B7EBF: galera:
==3596== by 0x83A13D2: galera:
==3596== by 0x83A15D1: galera:
==3596== by 0x83B8EFC: galera:
==3596== by 0x83C4BEE: galera_recv (wsrep_
==3596== by 0x5A0D44: wsrep_replicati
==3596== by 0x51BB64: start_wsrep_THD (mysqld.cc:4435)
==3596==
summary: |
- invalid memory access in wsrep_apply_cb() + invalid memory access within wsrep_apply_cb() |
summary: |
- invalid memory access within wsrep_apply_cb() + invalid memory access within wsrep_apply_cb() for non-ROW events |
tags: | added: statement |
Percona now uses JIRA for bug reports so this bug report is migrated to: https:/ /jira.percona. com/browse/ PXC-1452