| Bug #34773 | query with explain extended and derived table / other table crashes server | ||
|---|---|---|---|
| Submitted: | 23 Feb 2008 10:29 | Modified: | 9 Jan 2:30 |
| Reporter: | Shane Bester | ||
| Status: | Closed | ||
| Category: | Server: Optimizer | Severity: | S1 (Critical) |
| Version: | 5.0.56-debug,5.1.23-debug | OS: | Any |
| Assigned to: | Georgi Kodinov | Target Version: | 5.1.31, 5.0+ |
| Tags: | avg distinct | ||
| Triage: | Triaged: D1 (Critical) / R2 (Low) / E1 (None/Negligible) | ||
[23 Feb 2008 10:29]
Shane Bester
[24 Feb 2008 1:16]
Miguel Solorzano
Thank you for the bug report. > mysqld-debug.exe!Item_field::print(String * str=0x038be0bc) Line 5179 + 0x12 C++ mysqld-debug.exe!Item_sum::print(String * str=0x038be0bc) Line 369 + 0x28 C++ mysqld-debug.exe!Item::print_item_w_name(String * str=0x038be0bc) Line 447 + 0x14 C++ mysqld-debug.exe!st_select_lex::print(THD * thd=0x0171bbc8, String * str=0x038be0bc) Line 16457 C++ mysqld-debug.exe!st_select_lex_unit::print(String * str=0x038be0bc) Line 1966 C++ mysqld-debug.exe!TABLE_LIST::print(THD * thd=0x0171bbc8, String * str=0x038be0bc) Line 16349 C++ mysqld-debug.exe!print_join(THD * thd=0x0171bbc8, String * str=0x038be0bc, List<TABLE_LIST> * tables=0x0171cf38) Line 16253 C++ mysqld-debug.exe!st_select_lex::print(THD * thd=0x0171bbc8, String * str=0x038be0bc) Line 16467 + 0x17 C++ mysqld-debug.exe!st_select_lex_unit::print(String * str=0x038be0bc) Line 1966 C++ mysqld-debug.exe!execute_sqlcom_select(THD * thd=0x0171bbc8, TABLE_LIST * all_tables=0x01749160) Line 4734 C++ mysqld-debug.exe!mysql_execute_command(THD * thd=0x0171bbc8) Line 2056 + 0xd C++ mysqld-debug.exe!mysql_parse(THD * thd=0x0171bbc8, const char * inBuf=0x01747d60, unsigned int length=136, const char * * found_semicolon=0x038bfd00) Line 5622 + 0x9 C++ mysqld-debug.exe!dispatch_command(enum_server_command command=COM_QUERY, THD * thd=0x0171bbc8, char * packet=0x0173fcb1, unsigned int packet_length=136) Line 1121 + 0x1e C++ mysqld-debug.exe!do_command(THD * thd=0x0171bbc8) Line 781 + 0x1b C++ mysqld-debug.exe!handle_one_connection(void * arg=0x0171bbc8) Line 1120 + 0x9 C++ mysqld-debug.exe!pthread_start(void * param=0x011ef5a8) Line 85 + 0x9 C mysqld-debug.exe!_threadstart(void * ptd=0x017383d0) Line 196 + 0xd C kernel32.dll!7c80b683()
[24 Feb 2008 13:04]
Shane Bester
looks like similar bug to bug #28728
[6 Jun 2008 10:49]
Ramil Kalimullin
It's a flaw in the optimizator. Change the table type to innodb leads to the same crash.
[12 Jun 2008 15:23]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/47781 2662 Georgi Kodinov 2008-06-12 Bug#34773: query with explain extended and derived table / other table crashes server When creating temporary table that contains aggregate functions a non-reversible source transformation was performed to redirect aggregate function arguments towards temporary table columns. This caused EXPLAIN EXTENDED to fail because it was trying to resolve references to the (freed) temporary table. Fixed by preserving the original aggregate function arguments and using them (instead of the transformed ones) for EXPLAIN EXTENDED.
[2 Oct 2008 15:09]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/55073 2662 Georgi Kodinov 2008-10-02 Bug#34773: query with explain extended and derived table / other table crashes server When creating temporary table that contains aggregate functions a non-reversible source transformation was performed to redirect aggregate function arguments towards temporary table columns. This caused EXPLAIN EXTENDED to fail because it was trying to resolve references to the (freed) temporary table. Fixed by preserving the original aggregate function arguments and using them (instead of the transformed ones) for EXPLAIN EXTENDED.
[6 Oct 2008 16:18]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/55457 2662 Georgi Kodinov 2008-10-06 Bug#34773: query with explain extended and derived table / other table crashes server When creating temporary table that contains aggregate functions a non-reversible source transformation was performed to redirect aggregate function arguments towards temporary table columns. This caused EXPLAIN EXTENDED to fail because it was trying to resolve references to the (freed) temporary table. Fixed by preserving the original aggregate function arguments and using them (instead of the transformed ones) for EXPLAIN EXTENDED.
[10 Nov 2008 11:51]
Bugs System
Pushed into 6.0.8-alpha (revid:kgeorge@mysql.com-20081006141725-dlol5jjumw9lb5ar) (version source revid:kgeorge@mysql.com-20081010131729-7l9slxbb4u8kyrva) (pib:5)
[10 Nov 2008 12:35]
Bugs System
Pushed into 5.1.26-rc (revid:kgeorge@mysql.com-20081006141725-dlol5jjumw9lb5ar) (version source revid:kgeorge@mysql.com-20081006141725-dlol5jjumw9lb5ar) (pib:5)
[11 Nov 2008 2:42]
Paul DuBois
Noted in 5.1.31, 6.0.8 changelogs. EXPLAIN EXTENDED evaluation of aggregate functions that required a temporary table caused a server crash.
[11 Nov 2008 17:25]
Paul DuBois
6.0.9 changelog, not 6.0.8.
[26 Nov 2008 16:05]
Mark Leith
Hi Georgi, It doesn't appear that this was pushed to 5.0 - is there some reason for that? Can we have this pushed to a 5.0 release as well please? Many thanks, Mark
[9 Dec 2008 13:38]
Georgi Kodinov
Moving back to Need Doc Info until pushed to 5.0
[9 Dec 2008 20:40]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/61127 2735 Georgi Kodinov 2008-12-09 backported the fix for bug #34773 to 5.0
[6 Jan 14:56]
Bugs System
Pushed into 5.0.76 (revid:joro@sun.com-20090105160414-8q9j4bi1klkfwiup) (version source revid:azundris@mysql.com-20081230114734-nmsc37ak330zlygn) (merge vers: 5.0.76) (pib:6)
[9 Jan 2:30]
Paul DuBois
Noted in 5.0.76 changelog.
[15 Jan 7:32]
Bugs System
Pushed into 5.1.31 (revid:joro@sun.com-20090115053147-tx1oapthnzgvs1ro) (version source revid:azundris@mysql.com-20081230114838-cn52tu180wcrvh0h) (merge vers: 5.1.31) (pib:6)
[19 Jan 12:29]
Bugs System
Pushed into 5.1.31-ndb-6.2.17 (revid:tomas.ulin@sun.com-20090119095303-uwwvxiibtr38djii) (version source revid:tomas.ulin@sun.com-20090115073240-1wanl85vlvw2she1) (merge vers: 5.1.31-ndb-6.2.17) (pib:6)
[19 Jan 14:07]
Bugs System
Pushed into 5.1.31-ndb-6.3.21 (revid:tomas.ulin@sun.com-20090119104956-guxz190n2kh31fxl) (version source revid:tomas.ulin@sun.com-20090119104956-guxz190n2kh31fxl) (merge vers: 5.1.31-ndb-6.3.21) (pib:6)
[19 Jan 17:13]
Bugs System
Pushed into 5.1.31-ndb-6.4.1 (revid:tomas.ulin@sun.com-20090119144033-4aylstx5czzz88i5) (version source revid:tomas.ulin@sun.com-20090119144033-4aylstx5czzz88i5) (merge vers: 5.1.31-ndb-6.4.1) (pib:6)
[20 Jan 19:59]
Bugs System
Pushed into 6.0.10-alpha (revid:joro@sun.com-20090119171328-2hemf2ndc1dxl0et) (version source revid:azundris@mysql.com-20081230114916-c290n83z25wkt6e4) (merge vers: 6.0.9-alpha) (pib:6)
[9 Jun 20:45]
Paul DuBois
Noted in 5.0.74sp1 changelog.
