Crash in Gcalc_operation_reducer::end_couple with ST_UNION and MULTIPOLYGONs in 5.3-gis

[Philip Stoev]

backtrace:

#4 <signal handler called>
#5 0x083674a8 in Gcalc_operation_reducer::end_couple (this=0xae61309c, t0=0xae625f50, t1=0xae625e70, p=0xae72e450) at gcalc_tools.cc:559
#6 0x08367833 in Gcalc_operation_reducer::count_slice (this=0xae61309c, si=0xae9dfb74) at gcalc_tools.cc:629
#7 0x083689ae in Gcalc_operation_reducer::count_all (this=0xae61309c, hp=0xae612f48) at gcalc_tools.cc:1066
#8 0x0825c295 in Item_func_spatial_operation::val_str (this=0xae612ec0, str_value=0xae9e0060) at item_geofunc.cc:1039
#9 0x081dbb51 in Item::send (this=0xae612ec0, protocol=0xafa7c0c, buffer=0xae9e0060) at item.cc:5905
#10 0x082894bc in select_send::send_data (this=0xae613280, items=...) at sql_class.cc:1919
#11 0x0832630c in JOIN::exec (this=0xae620a60) at sql_select.cc:2069
#12 0x08328d28 in mysql_select (thd=0xafa78e0, rref_pointer_array=0xafa93f8, tables=0x0, wild_num=0, fields=..., conds=0x0, og_num=0, order=0x0, group=0x0,
    having=0x0, proc_param=0x0, select_options=2147764736, result=0xae613280, unit=0xafa8ffc, select_lex=0xafa92d8) at sql_select.cc:2885
#13 0x08320bf3 in handle_select (thd=0xafa78e0, lex=0xafa8fa0, result=0xae613280, setup_tables_done_option=0) at sql_select.cc:283
#14 0x082bc323 in execute_sqlcom_select (thd=0xafa78e0, all_tables=0x0) at sql_parse.cc:5082
#15 0x082b3127 in mysql_execute_command (thd=0xafa78e0) at sql_parse.cc:2227
#16 0x082be95f in mysql_parse (thd=0xafa78e0,
    rawbuf=0xae6125e0 "SELECT ST_UNION( \nMULTIPOLYGONFROMTEXT( ' MULTIPOLYGON( ( ( 9 9 , 2 6 , 3 0 , 9 9 ) ) ) ' ) ,\nMULTIPOLYGONFROMTEXT( ' MULTIPOLYGON( ( ( 2 2 , 7 2 , 4 2 , 2 0 , 2 2 ) ) ) ' ) \n)", length=179, found_semicolon=0xae9e1228) at sql_parse.cc:6083
#17 0x082b0dc3 in dispatch_command (command=COM_QUERY, thd=0xafa78e0, packet=0xb0023e9 "", packet_length=179) at sql_parse.cc:1206
#18 0x082b0249 in do_command (thd=0xafa78e0) at sql_parse.cc:904
#19 0x082ad2c4 in handle_one_connection (arg=0xafa78e0) at sql_connect.cc:1177
#20 0x00821919 in start_thread () from /lib/libpthread.so.0
#21 0x0076acce in clone () from /lib/libc.so.6

test case:

SELECT ST_UNION(
        MULTIPOLYGONFROMTEXT( ' MULTIPOLYGON( ( ( 9 9 , 2 6 , 3 0 , 9 9 ) ) ) ' ) ,
        MULTIPOLYGONFROMTEXT( ' MULTIPOLYGON( ( ( 2 2 , 7 2 , 4 2 , 2 0 , 2 2 ) ) ) ' )
);

 bzr version-info
revision-id: <email address hidden>
date: 2011-09-01 11:44:56 +0500
build-date: 2011-09-02 10:01:30 +0300
revno: 2993
branch-nick: maria-5.3-gis