ADDRESS SANITIZER REPORTS FAILURE IN MAIN.PARTITION_ORDER ON MYSQL-TRUNK
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Percona Server moved to https://jira.percona.com/projects/PS | Status tracked in 5.7 | |||||
5.5 |
Fix Released
|
High
|
Laurynas Biveinis | |||
5.6 |
Fix Released
|
High
|
Laurynas Biveinis | |||
5.7 |
Invalid
|
Undecided
|
Unassigned |
Bug Description
parts.partition
...
CURRENT_TEST: parts.partition
mysqltest: In included file "./suite/
included from ./suite/
At line 48: query 'select hex(a) from t1' failed: 2013: Lost connection to MySQL server during query
...
=======
==18175==ERROR: AddressSanitizer: heap-buffer-
READ of size 64 at 0x6060002c6275 thread T841
#0 0x7f322348e675 in memcmp (/usr/lib/
#1 0x957d8d in Field_bit:
#2 0xb5f919 in key_rec_cmp /mnt/workspace/
#3 0xd4dda2 in _downheap /mnt/workspace/
#4 0xd4e122 in queue_fix /mnt/workspace/
#5 0x1285d70 in ha_partition:
#6 0x1286e41 in ha_partition:
#7 0x1286f72 in ha_partition:
#8 0x719732 in join_read_first /mnt/workspace/
#9 0x6fe6e8 in sub_select(JOIN*, st_join_table*, bool) /mnt/workspace/
#10 0x718286 in do_select /mnt/workspace/
#11 0x756715 in JOIN::exec() /mnt/workspace/
#12 0x7451ad in mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_
#13 0x745a0c in handle_select(THD*, LEX*, select_result*, unsigned long) /mnt/workspace/
#14 0x66d883 in execute_
#15 0x680f1c in mysql_execute_
#16 0x693331 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /mnt/workspace/
#17 0x6970ce in dispatch_
#18 0x69b88d in do_command(THD*) /mnt/workspace/
#19 0x8956ad in do_handle_
#20 0x89594e in handle_
#21 0xd914dc in pfs_spawn_thread /mnt/workspace/
#22 0x7f3222de56f9 in start_thread (/lib/x86_
#23 0x7f3221990b5c in clone (/lib/x86_
0x6060002c6275 is located 0 bytes to the right of 53-byte region [0x6060002c6240
allocated by thread T841 here:
#0 0x7f32234af54a in malloc (/usr/lib/
#1 0xd41419 in my_malloc /mnt/workspace/
#2 0x1281db9 in ha_partition:
#3 0x128258c in ha_partition:
#4 0x719641 in handler:
#5 0x719641 in join_read_first /mnt/workspace/
#6 0x6fe6e8 in sub_select(JOIN*, st_join_table*, bool) /mnt/workspace/
#7 0x718286 in do_select /mnt/workspace/
#8 0x756715 in JOIN::exec() /mnt/workspace/
#9 0x7451ad in mysql_select(THD*, Item***, TABLE_LIST*, unsigned int, List<Item>&, Item*, unsigned int, st_order*, st_order*, Item*, st_order*, unsigned long long, select_result*, st_select_
#10 0x745a0c in handle_select(THD*, LEX*, select_result*, unsigned long) /mnt/workspace/
#11 0x66d883 in execute_
#12 0x680f1c in mysql_execute_
#13 0x693331 in mysql_parse(THD*, char*, unsigned int, Parser_state*) /mnt/workspace/
#14 0x6970ce in dispatch_
#15 0x69b88d in do_command(THD*) /mnt/workspace/
#16 0x8956ad in do_handle_
#17 0x89594e in handle_
#18 0xd914dc in pfs_spawn_thread /mnt/workspace/
#19 0x7f3222de56f9 in start_thread (/lib/x86_
Thread T841 created by T0 here:
#0 0x7f322344d253 in pthread_create (/usr/lib/
#1 0xd94a99 in spawn_thread_v1 /mnt/workspace/
#2 0x519d5d in inline_
#3 0x519d5d in create_
#4 0x51b4d9 in create_new_thread /mnt/workspace/
#5 0x51b4d9 in handle_
#6 0x51e8c0 in mysqld_main(int, char**) /mnt/workspace/
#7 0x505e3e in main /mnt/workspace/
#8 0x7f32218aa82f in __libc_start_main (/lib/x86_
SUMMARY: AddressSanitizer: heap-buffer-
Shadow bytes around the buggy address:
0x0c0c80050bf0: fa fa fa fa fd fd fd fd fd fd fd fd fa fa fa fa
0x0c0c80050c00: fd fd fd fd fd fd fd fd fa fa fa fa fd fd fd fd
0x0c0c80050c10: fd fd fd fd fa fa fa fa fd fd fd fd fd fd fd fd
0x0c0c80050c20: fa fa fa fa fd fd fd fd fd fd fd fd fa fa fa fa
0x0c0c80050c30: fd fd fd fd fd fd fd fd fa fa fa fa fd fd fd fd
=>0x0c0c80050c40: fd fd fd fd fa fa fa fa 00 00 00 00 00 00[05]fa
0x0c0c80050c50: fa fa fa fa 00 00 00 00 00 00 00 00 fa fa fa fa
0x0c0c80050c60: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
0x0c0c80050c70: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
0x0c0c80050c80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c0c80050c90: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
==18175==ABORTING
The fix seems to be backporting
commit f0d7a37c48cd423 ea48c32c644d1da 3c4d5898e7
Author: Mattias Jonsson <email address hidden>
Date: Thu Feb 13 16:47:31 2014 +0100
Bug#17957894: ADDRESS SANITIZER REPORTS FAILURE IN MAIN.PARTITION_ ORDER ON MYSQL-TRUNK
Bad length in memcmp in Field_bit: :cmp_max( ).