Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-36814

MariaDB 10.11.9 Signal 11 crash on second Stored Procedure call

    XMLWordPrintable

Details

    • Bug
    • Status: Confirmed (View Workflow)
    • Critical
    • Resolution: Unresolved
    • 10.11.9, 10.5, 10.6, 10.11, 11.4
    • 10.11, 11.4
    • Data types, Stored routines
    • None
    • Ubuntu 22.04 - Jammy

    Description

      On MariaDB 10.11.9 calling a stored procedure twice with different input parameter causes second procedure call to crash on parameter change and coredump with signal 11.
      It can be called multiple times with the same parameter without crashing

      call test('HOURLY',null,null);
      call test('HOURLY',null,null);
      call test('DAILY',null,null); --> Crash

      call test('DAILY',null,null);
      call test('DAILY',null,null);
      call test('HOURLY',null,null); --> Crash

      I managed to test this on a MariaDB 10.6.15 environment where it did not crash.

      script attached

      Stack Trace

      May 14 14:29:14 db-node-01-devtest mariadbd[2266098]: Thread pointer: 0x7f95480c66d8
      May 14 14:29:14 db-node-01-devtest mariadbd[2266098]: Attempting backtrace. You can use the following information to find out
      May 14 14:29:14 db-node-01-devtest mariadbd[2266098]: where mysqld died. If you see no messages after this, something went
      May 14 14:29:14 db-node-01-devtest mariadbd[2266098]: terribly wrong...
      May 14 14:29:14 db-node-01-devtest mariadbd[2266098]: stack_bottom = 0x7f91bf7fdcb8 thread_stack 0x49000
      May 14 14:29:15 db-node-01-devtest mariadbd[2266098]: mysys/stacktrace.c:216(my_print_stacktrace)[0x55d35694a582]
      May 14 14:29:15 db-node-01-devtest mariadbd[2266098]: sql/signal_handler.cc:239(handle_fatal_signal)[0x55d3563ff5c8]
      May 14 14:29:15 db-node-01-devtest mariadbd[2266098]: libc_sigaction.c:0(__restore_rt)[0x7f9766c90520]
      May 14 14:29:18 db-node-01-devtest mariadbd[2266098]: sql/item.cc:2734(Type_std_attributes::agg_item_set_converter(DTCollation const&, st_mysql_const_lex_string const&, Item**, unsigned int, unsigned int, int, Type_std_attributes::Singlle_coll_err const*))[0x55d35642e0aa]
      May 14 14:29:21 db-node-01-devtest mariadbd[2266098]: sql/sql_type.h:3325(Type_std_attributes::agg_arg_charsets(DTCollation&, st_mysql_const_lex_string const&, Item**, unsigned int, unsigned int, int))[0x55d3564b45af]
      May 14 14:29:22 db-node-01-devtest mariadbd[2266098]: sql/item_func.cc:381(Item_func::fix_fields(THD*, Item**))[0x55d356477dcb]
      May 14 14:29:22 db-node-01-devtest mariadbd[2266098]: sql/item_strfunc.cc:132(Item_str_func::fix_fields(THD*, Item**))[0x55d3564af8c6]
      May 14 14:29:24 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:399(THD::sp_fix_func_item(Item**))[0x55d3560d4667]
      May 14 14:29:24 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:429(THD::sp_fix_func_item_for_assignment(Field const*, Item**))[0x55d3560d4797]
      May 14 14:29:25 db-node-01-devtest mariadbd[2266098]: sql/field.cc:1502(Field::sp_prepare_and_store_item(THD*, Item**))[0x55d3563dbbc2]
      May 14 14:29:25 db-node-01-devtest mariadbd[2266098]: sql/sql_class.h:8140(Sp_eval_expr_state::stop())[0x55d3560d482c]
      May 14 14:29:26 db-node-01-devtest mariadbd[2266098]: sql/sp_rcontext.cc:641(sp_rcontext::set_variable(THD*, unsigned int, Item**))[0x55d3560e38d8]
      May 14 14:29:26 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:2600(sp_head::bind_input_param(THD*, Item*, unsigned int, sp_rcontext*, bool))[0x55d3560d7997]
      May 14 14:29:26 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:2397(sp_head::execute_procedure(THD*, List<Item>*))[0x55d3560d7d24]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:3068(do_execute_sp(THD*, sp_head*))[0x55d356184697]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:3310(Sql_cmd_call::execute(THD*))[0x55d356188158]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:3264(Sql_cmd_call::execute(THD*))[0x55d356190932]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:3926(sp_instr_stmt::exec_core(THD*, unsigned int*))[0x55d3560d2a4b]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:3654(sp_lex_keeper::reset_lex_and_exec_core(THD*, unsigned int*, bool, sp_instr*))[0x55d3560dc1e4]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:3827(sp_instr_stmt::execute(THD*, unsigned int*))[0x55d3560dcc0c]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sp_head.cc:1463(sp_head::execute(THD*, bool))[0x55d3560d6589]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: psi/mysql_sp.h:79(sp_head::execute_procedure(THD*, List<Item>*))[0x55d3560d8226]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:3068(do_execute_sp(THD*, sp_head*))[0x55d356184697]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:3310(Sql_cmd_call::execute(THD*))[0x55d356188158]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:3264(Sql_cmd_call::execute(THD*))[0x55d356190932]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_class.h:2871(THD::enter_stage(PSI_stage_info_v1 const*, char const*, char const*, unsigned int))[0x55d3561959c7]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_class.h:4542(THD::get_stmt_da())[0x55d356196261]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:1882(dispatch_command(enum_server_command, THD*, char*, unsigned int, bool))[0x55d356199657]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_parse.cc:1410(do_command(THD*, bool))[0x55d35619a108]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_connect.cc:1417(do_handle_one_connection(CONNECT*, bool))[0x55d3562c390f]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: sql/sql_connect.cc:1319(handle_one_connection)[0x55d3562c3c5d]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: perfschema/pfs.cc:2204(pfs_spawn_thread)[0x55d356645616]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: nptl/pthread_create.c:442(start_thread)[0x7f9766ce2ac3]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: x86_64/clone3.S:83(__clone3)[0x7f9766d74850]
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: Trying to get some variables.
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: Some pointers may be invalid and cause the dump to abort.
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: Query (0x7f95482ce558): call testlog(concat( NAME_CONST('varSummaryType',_latin1'DAILY' COLLATE 'latin1_swedish_ci'), ' Summarizing of Pdu Port Power Information between: ', @startDate, ' and ', @endDate),  NAME_CONST('v_procedureName',_latin1'test' COLLATE 'latin1_swedish_ci'), 'I')
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: Connection ID (thread ID): 95
      May 14 14:29:28 db-node-01-devtest mariadbd[2266098]: Status: NOT_KILLED
      

      Attachments

        1. 50-server.cnf
          3 kB
        2. 50-server.cnf.dpkg-dist
          4 kB
        3. gdb.txt
          590 kB
        4. my.cnf
          6 kB
        5. script.txt
          1 kB

        Issue Links

          Activity

            People

              bar Alexander Barkov
              stephanvos Stephan Vos
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.