handle_fatal_signal (sig=11) in hp_delete_key

Bug #1736819 reported by Roel Van de Paar
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Percona Server moved to https://jira.percona.com/projects/PS
Status tracked in 5.7
5.5
Triaged
High
Unassigned
5.6
Invalid
Undecided
Unassigned
5.7
Invalid
Undecided
Unassigned

Bug Description

171207 9:53:39 [Note] /sda/PS091117-percona-server-5.5.58-38.10-linux-x86_64-debug/bin/mysqld: ready for connections.
Version: '5.5.58-38.10-debug' socket: '/sda/PS091117-percona-server-5.5.58-38.10-linux-x86_64-debug/socket.sock' port: 18644 MySQL Community Server (GPL)
22:53:41 UTC - mysqld got signal 11 ;

Core was generated by `/sda/PS091117-percona-server-5.5.58-38.10-linux-x86_64-debug/bin/mysqld --no-de'.
Program terminated with signal 11, Segmentation fault.
#0 0x00007f50ff21d9b1 in __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)
    at ../nptl/sysdeps/unix/sysv/linux/pthread_kill.c:61
61 val = INTERNAL_SYSCALL (tgkill, err, 3, THREAD_GETMEM (THREAD_SELF, pid),
(gdb) bt
#0 0x00007f50ff21d9b1 in __pthread_kill (threadid=<optimized out>, signo=signo@entry=11)
    at ../nptl/sysdeps/unix/sysv/linux/pthread_kill.c:61
#1 0x00000000007f9bc8 in my_write_core (sig=11) at /home/roel/PS-5.5.58_dbg/mysys/stacktrace.c:433
#2 0x00000000006b9803 in handle_fatal_signal (sig=11) at /home/roel/PS-5.5.58_dbg/sql/signal_handler.cc:250
#3 <signal handler called>
#4 hp_movelink (pos=pos@entry=0x7f50da4f1030, next_link=0x0, newlink=newlink@entry=0x7f50da4f1000)
    at /home/roel/PS-5.5.58_dbg/storage/heap/hp_hash.c:232
#5 0x00000000008036cf in hp_delete_key (info=0x7f50da481300, keyinfo=0x7f50da4968ec,
    record=0x7f50da447410 <incomplete sequence \375\200>, recpos=<optimized out>, flag=0)
    at /home/roel/PS-5.5.58_dbg/storage/heap/hp_delete.c:178
#6 0x0000000000803303 in heap_delete (info=0x7f50da481300, record=0x7f50da447410 <incomplete sequence \375\200>)
    at /home/roel/PS-5.5.58_dbg/storage/heap/hp_delete.c:42
#7 0x0000000000802368 in ha_heap::delete_row (this=0x7f50da448010, buf=0x7f50da447410 <incomplete sequence \375\200>)
    at /home/roel/PS-5.5.58_dbg/storage/heap/ha_heap.cc:283
#8 0x00000000006c2cc1 in handler::ha_delete_row (this=0x7f50da448010, buf=0x7f50da447410 <incomplete sequence \375\200>)
    at /home/roel/PS-5.5.58_dbg/sql/handler.cc:5516
#9 0x00000000007b0a2c in mysql_delete (thd=thd@entry=0x7f50f03d6000, table_list=0x7f50da41f0e0, conds=0x0,
    order_list=order_list@entry=0x7f50f03d84f0, limit=18446744073709551615, options=<optimized out>)
    at /home/roel/PS-5.5.58_dbg/sql/sql_delete.cc:313
#10 0x000000000059a01e in mysql_execute_command (thd=thd@entry=0x7f50f03d6000) at /home/roel/PS-5.5.58_dbg/sql/sql_parse.cc:3350
#11 0x000000000059ec81 in mysql_parse (thd=thd@entry=0x7f50f03d6000, rawbuf=<optimized out>, length=14,
    parser_state=parser_state@entry=0x7f50ff811520) at /home/roel/PS-5.5.58_dbg/sql/sql_parse.cc:6113
#12 0x00000000005a0721 in dispatch_command (command=command@entry=COM_QUERY, thd=thd@entry=0x7f50f03d6000,
    packet=packet@entry=0x7f50f038d001 "DELETE FROM t1", packet_length=packet_length@entry=14)
    at /home/roel/PS-5.5.58_dbg/sql/sql_parse.cc:1112
#13 0x00000000005a256f in do_command (thd=0x7f50f03d6000) at /home/roel/PS-5.5.58_dbg/sql/sql_parse.cc:792
#14 0x0000000000651406 in do_handle_one_connection (thd_arg=thd_arg@entry=0x7f50f03d6000)
    at /home/roel/PS-5.5.58_dbg/sql/sql_connect.cc:1474
#15 0x00000000006514fc in handle_one_connection (arg=0x7f50f03d6000) at /home/roel/PS-5.5.58_dbg/sql/sql_connect.cc:1381
#16 0x00007f50ff218e25 in start_thread (arg=0x7f50ff812700) at pthread_create.c:308
#17 0x00007f50fda1634d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113

USE test;
set @@session.binlog_format=row;
set default_storage_engine=MEMORY;
CREATE TEMPORARY TABLE t1(f1 INT)ENGINE=MRG_MEMORY UNION(t1);
insert into t1 values(1);
ALTER TABLE t1 ADD c2 TEXT;
INSERT INTO t1 VALUES(0,"1");
insert INTO t1 values(0,REPEAT(0,0));
ALTER TABLE t1 AVG_ROW_LENGTH 10;
ALTER TABLE t1 ADD b DECIMAL FIRST;
ALTER TABLE t1 ADD greek_f CHAR(1);
ALTER TABLE t1ENGINE=InnoDB;
insert into t1 values(0,0,8312,0);
ALTER TABLE t1 ADD c CHAR(1),ADD d CHAR (1),ADD e char(1);
INSERT INTO t1 VALUES(0,0,37,'a','a','a',0);
alter table t1 add unique index(c,d);
DELETE FROM t1;

Same testcase does not crash MS 5.5.58

Tags: qa
Revision history for this message
Roel Van de Paar (roel11) wrote :

PS 5.6.36 does not crash because;

5.6.36>CREATE TEMPORARY TABLE t1(f1 INT)ENGINE=MRG_MEMORY UNION(t1);
ERROR 1286 (42000): Unknown storage engine 'MRG_MEMORY'

Revision history for this message
Roel Van de Paar (roel11) wrote :

(Using
CREATE TEMPORARY TABLE t1(f1 INT)ENGINE=InnoDB UNION(t1);
does not crash it either)

Revision history for this message
Roel Van de Paar (roel11) wrote :

Any connection w/ bug 1731343 ?

tags: added: qa
Revision history for this message
Sveta Smirnova (svetasmirnova) wrote :

5.7 also does not have storage engine 'MRG_MEMORY'

Revision history for this message
Shahriyar Rzayev (rzayev-sehriyar) wrote :

Percona now uses JIRA for bug reports so this bug report is migrated to: https://jira.percona.com/browse/PS-3764

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.